./Ultimate.py --spec ../../sv-benchmarks/c/properties/termination.prp --file ../../sv-benchmarks/c/product-lines/elevator_spec14_product11.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for termination Using default analysis Version 826ab2ba Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/plugins/org.eclipse.equinox.launcher_1.6.800.v20240513-1750.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/config/AutomizerTermination.xml -i ../../sv-benchmarks/c/product-lines/elevator_spec14_product11.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/config/svcomp-Termination-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(F end) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash a3102ca0659fbbd15269b525dd7b096164ab7cd0af67dfa99033803ea46b0a8e --- Real Ultimate output --- This is Ultimate 0.3.0-dev-826ab2b [2024-11-13 15:36:49,055 INFO L188 SettingsManager]: Resetting all preferences to default values... [2024-11-13 15:36:49,160 INFO L114 SettingsManager]: Loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/config/svcomp-Termination-32bit-Automizer_Default.epf [2024-11-13 15:36:49,172 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2024-11-13 15:36:49,173 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2024-11-13 15:36:49,211 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2024-11-13 15:36:49,212 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2024-11-13 15:36:49,212 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2024-11-13 15:36:49,212 INFO L151 SettingsManager]: Preferences of Boogie Preprocessor differ from their defaults: [2024-11-13 15:36:49,212 INFO L153 SettingsManager]: * Use memory slicer=true [2024-11-13 15:36:49,213 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2024-11-13 15:36:49,214 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2024-11-13 15:36:49,214 INFO L153 SettingsManager]: * Use SBE=true [2024-11-13 15:36:49,215 INFO L151 SettingsManager]: Preferences of BuchiAutomizer differ from their defaults: [2024-11-13 15:36:49,216 INFO L153 SettingsManager]: * NCSB implementation=INTSET_LAZY3 [2024-11-13 15:36:49,216 INFO L153 SettingsManager]: * Use old map elimination=false [2024-11-13 15:36:49,216 INFO L153 SettingsManager]: * Use external solver (rank synthesis)=false [2024-11-13 15:36:49,216 INFO L153 SettingsManager]: * Use only trivial implications for array writes=true [2024-11-13 15:36:49,217 INFO L153 SettingsManager]: * Rank analysis=LINEAR_WITH_GUESSES [2024-11-13 15:36:49,217 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2024-11-13 15:36:49,217 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=ASSUME [2024-11-13 15:36:49,217 INFO L153 SettingsManager]: * sizeof long=4 [2024-11-13 15:36:49,217 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2024-11-13 15:36:49,217 INFO L153 SettingsManager]: * sizeof POINTER=4 [2024-11-13 15:36:49,218 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2024-11-13 15:36:49,218 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=ASSUME [2024-11-13 15:36:49,218 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=ASSUME [2024-11-13 15:36:49,218 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=ASSUME [2024-11-13 15:36:49,218 INFO L153 SettingsManager]: * Allow undefined functions=false [2024-11-13 15:36:49,218 INFO L153 SettingsManager]: * Check unreachability of reach_error function=false [2024-11-13 15:36:49,218 INFO L153 SettingsManager]: * sizeof long double=12 [2024-11-13 15:36:49,218 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2024-11-13 15:36:49,218 INFO L153 SettingsManager]: * Assume nondeterminstic values are in range=false [2024-11-13 15:36:49,218 INFO L153 SettingsManager]: * Use constant arrays=true [2024-11-13 15:36:49,219 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2024-11-13 15:36:49,219 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2024-11-13 15:36:49,219 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2024-11-13 15:36:49,220 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2024-11-13 15:36:49,220 INFO L151 SettingsManager]: Preferences of IcfgTransformer differ from their defaults: [2024-11-13 15:36:49,220 INFO L153 SettingsManager]: * TransformationType=MODULO_NEIGHBOR Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(F end) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> a3102ca0659fbbd15269b525dd7b096164ab7cd0af67dfa99033803ea46b0a8e [2024-11-13 15:36:49,523 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2024-11-13 15:36:49,537 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2024-11-13 15:36:49,540 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2024-11-13 15:36:49,542 INFO L270 PluginConnector]: Initializing CDTParser... [2024-11-13 15:36:49,543 INFO L274 PluginConnector]: CDTParser initialized [2024-11-13 15:36:49,545 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/../../sv-benchmarks/c/product-lines/elevator_spec14_product11.cil.c Unable to find full path for "g++" [2024-11-13 15:36:51,455 INFO L533 CDTParser]: Created temporary CDT project at NULL [2024-11-13 15:36:51,916 INFO L384 CDTParser]: Found 1 translation units. [2024-11-13 15:36:51,917 INFO L180 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/sv-benchmarks/c/product-lines/elevator_spec14_product11.cil.c [2024-11-13 15:36:51,950 INFO L427 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/data/33bed4d90/dd78bea760ae4100ad254243abbc0469/FLAG41fdd0a5a [2024-11-13 15:36:51,968 INFO L435 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/data/33bed4d90/dd78bea760ae4100ad254243abbc0469 [2024-11-13 15:36:51,970 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2024-11-13 15:36:51,972 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2024-11-13 15:36:51,973 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2024-11-13 15:36:51,973 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2024-11-13 15:36:51,978 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2024-11-13 15:36:51,979 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 13.11 03:36:51" (1/1) ... [2024-11-13 15:36:51,980 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@6e73f92d and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.11 03:36:51, skipping insertion in model container [2024-11-13 15:36:51,981 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 13.11 03:36:51" (1/1) ... [2024-11-13 15:36:52,034 INFO L175 MainTranslator]: Built tables and reachable declarations [2024-11-13 15:36:52,594 INFO L210 PostProcessor]: Analyzing one entry point: main [2024-11-13 15:36:52,623 INFO L200 MainTranslator]: Completed pre-run [2024-11-13 15:36:52,637 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [48] [2024-11-13 15:36:52,639 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"UnitTests.i","") [86] [2024-11-13 15:36:52,639 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [186] [2024-11-13 15:36:52,639 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Person.i","") [195] [2024-11-13 15:36:52,640 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Specification14_spec.i","") [315] [2024-11-13 15:36:52,640 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [355] [2024-11-13 15:36:52,641 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [705] [2024-11-13 15:36:52,641 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Floor.i","") [1071] [2024-11-13 15:36:52,641 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Elevator.i","") [1738] [2024-11-13 15:36:52,642 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [3255] [2024-11-13 15:36:52,801 INFO L210 PostProcessor]: Analyzing one entry point: main [2024-11-13 15:36:52,833 INFO L204 MainTranslator]: Completed translation [2024-11-13 15:36:52,834 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.11 03:36:52 WrapperNode [2024-11-13 15:36:52,834 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2024-11-13 15:36:52,835 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2024-11-13 15:36:52,835 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2024-11-13 15:36:52,836 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2024-11-13 15:36:52,843 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.11 03:36:52" (1/1) ... [2024-11-13 15:36:52,866 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.11 03:36:52" (1/1) ... [2024-11-13 15:36:53,213 INFO L138 Inliner]: procedures = 90, calls = 332, calls flagged for inlining = 185, calls inlined = 636, statements flattened = 20223 [2024-11-13 15:36:53,213 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2024-11-13 15:36:53,215 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2024-11-13 15:36:53,215 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2024-11-13 15:36:53,215 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2024-11-13 15:36:53,225 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.11 03:36:52" (1/1) ... [2024-11-13 15:36:53,225 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.11 03:36:52" (1/1) ... [2024-11-13 15:36:53,274 INFO L184 PluginConnector]: Executing the observer MemorySlicer from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.11 03:36:52" (1/1) ... [2024-11-13 15:36:53,450 INFO L175 MemorySlicer]: Split 81 memory accesses to 20 slices as follows [2, 4, 4, 4, 2, 4, 4, 5, 3, 3, 5, 7, 4, 4, 4, 4, 4, 6, 4, 4]. 9 percent of accesses are in the largest equivalence class. The 81 initializations are split as follows [2, 4, 4, 4, 2, 4, 4, 5, 3, 3, 5, 7, 4, 4, 4, 4, 4, 6, 4, 4]. The 0 writes are split as follows [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0]. [2024-11-13 15:36:53,451 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.11 03:36:52" (1/1) ... [2024-11-13 15:36:53,451 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.11 03:36:52" (1/1) ... [2024-11-13 15:36:53,611 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.11 03:36:52" (1/1) ... [2024-11-13 15:36:53,746 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.11 03:36:52" (1/1) ... [2024-11-13 15:36:53,786 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.11 03:36:52" (1/1) ... [2024-11-13 15:36:53,823 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.11 03:36:52" (1/1) ... [2024-11-13 15:36:53,902 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2024-11-13 15:36:53,904 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2024-11-13 15:36:53,904 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2024-11-13 15:36:53,904 INFO L274 PluginConnector]: RCFGBuilder initialized [2024-11-13 15:36:53,906 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.11 03:36:52" (1/1) ... [2024-11-13 15:36:53,917 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2024-11-13 15:36:53,937 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 [2024-11-13 15:36:53,953 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2024-11-13 15:36:53,960 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (1)] Waiting until timeout for monitored process [2024-11-13 15:36:53,992 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2024-11-13 15:36:53,996 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#0 [2024-11-13 15:36:53,996 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#1 [2024-11-13 15:36:53,996 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#2 [2024-11-13 15:36:53,996 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#3 [2024-11-13 15:36:53,996 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#4 [2024-11-13 15:36:53,996 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#5 [2024-11-13 15:36:53,996 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#6 [2024-11-13 15:36:53,996 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#7 [2024-11-13 15:36:53,997 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#8 [2024-11-13 15:36:53,997 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#9 [2024-11-13 15:36:53,997 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#10 [2024-11-13 15:36:53,997 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#11 [2024-11-13 15:36:53,997 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#12 [2024-11-13 15:36:53,997 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#13 [2024-11-13 15:36:53,997 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#14 [2024-11-13 15:36:53,997 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#15 [2024-11-13 15:36:53,997 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#16 [2024-11-13 15:36:53,997 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#17 [2024-11-13 15:36:53,998 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#18 [2024-11-13 15:36:53,998 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#19 [2024-11-13 15:36:53,998 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2024-11-13 15:36:53,998 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2024-11-13 15:36:54,293 INFO L238 CfgBuilder]: Building ICFG [2024-11-13 15:36:54,297 INFO L264 CfgBuilder]: Building CFG for each procedure with an implementation [2024-11-13 15:37:07,569 INFO L? ?]: Removed 9350 outVars from TransFormulas that were not future-live. [2024-11-13 15:37:07,569 INFO L287 CfgBuilder]: Performing block encoding [2024-11-13 15:37:07,712 INFO L311 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2024-11-13 15:37:07,712 INFO L316 CfgBuilder]: Removed 1 assume(true) statements. [2024-11-13 15:37:07,713 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 13.11 03:37:07 BoogieIcfgContainer [2024-11-13 15:37:07,713 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2024-11-13 15:37:07,714 INFO L112 PluginConnector]: ------------------------BuchiAutomizer---------------------------- [2024-11-13 15:37:07,714 INFO L270 PluginConnector]: Initializing BuchiAutomizer... [2024-11-13 15:37:07,721 INFO L274 PluginConnector]: BuchiAutomizer initialized [2024-11-13 15:37:07,721 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2024-11-13 15:37:07,722 INFO L184 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "CDTParser AST 13.11 03:36:51" (1/3) ... [2024-11-13 15:37:07,724 INFO L204 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@7c0ee3b5 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 13.11 03:37:07, skipping insertion in model container [2024-11-13 15:37:07,724 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2024-11-13 15:37:07,724 INFO L184 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.11 03:36:52" (2/3) ... [2024-11-13 15:37:07,725 INFO L204 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@7c0ee3b5 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 13.11 03:37:07, skipping insertion in model container [2024-11-13 15:37:07,725 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2024-11-13 15:37:07,725 INFO L184 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 13.11 03:37:07" (3/3) ... [2024-11-13 15:37:07,726 INFO L333 chiAutomizerObserver]: Analyzing ICFG elevator_spec14_product11.cil.c [2024-11-13 15:37:07,886 INFO L299 stractBuchiCegarLoop]: Interprodecural is true [2024-11-13 15:37:07,887 INFO L300 stractBuchiCegarLoop]: Hoare is None [2024-11-13 15:37:07,887 INFO L301 stractBuchiCegarLoop]: Compute interpolants for ForwardPredicates [2024-11-13 15:37:07,887 INFO L302 stractBuchiCegarLoop]: Backedges is STRAIGHT_LINE [2024-11-13 15:37:07,887 INFO L303 stractBuchiCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2024-11-13 15:37:07,887 INFO L304 stractBuchiCegarLoop]: Difference is false [2024-11-13 15:37:07,887 INFO L305 stractBuchiCegarLoop]: Minimize is MINIMIZE_SEVPA [2024-11-13 15:37:07,888 INFO L309 stractBuchiCegarLoop]: ======== Iteration 0 == of CEGAR loop == BuchiAutomatonCegarLoop ======== [2024-11-13 15:37:07,922 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand has 5831 states, 5830 states have (on average 1.8710120068610634) internal successors, (10908), 5830 states have internal predecessors, (10908), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-13 15:37:08,127 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1182 [2024-11-13 15:37:08,128 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-13 15:37:08,128 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-13 15:37:08,155 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-13 15:37:08,155 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-13 15:37:08,155 INFO L331 stractBuchiCegarLoop]: ======== Iteration 1 ============ [2024-11-13 15:37:08,172 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand has 5831 states, 5830 states have (on average 1.8710120068610634) internal successors, (10908), 5830 states have internal predecessors, (10908), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-13 15:37:08,266 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1182 [2024-11-13 15:37:08,266 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-13 15:37:08,266 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-13 15:37:08,276 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-13 15:37:08,276 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-13 15:37:08,291 INFO L745 eck$LassoCheckResult]: Stem: 209#$Ultimate##0true assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 5719#L-1true assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret28#1, main_~retValue_acc~6#1, main_~tmp~11#1;havoc main_~retValue_acc~6#1;havoc main_~tmp~11#1;assume { :begin_inline_select_helpers } true; 4039#select_helpers_returnLabel#1true assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 3585#select_features_returnLabel#1true assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; 837#valid_product_returnLabel#1true main_#t~ret28#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;assume { :end_inline_valid_product } true;main_~tmp~11#1 := main_#t~ret28#1;havoc main_#t~ret28#1; 940#L692true assume 0 != main_~tmp~11#1;assume { :begin_inline_setup } true; 1886#setup_returnLabel#1true assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret21#1, bigMacCall_~tmp~8#1;havoc bigMacCall_~tmp~8#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 5530#L241true assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 3116#getOrigin_returnLabel#1true bigMacCall_#t~ret21#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~8#1 := bigMacCall_#t~ret21#1;havoc bigMacCall_#t~ret21#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~8#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 3831#L1431true assume 0 == initPersonOnFloor_~floor#1; 4689#L1432true assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 2970#L1539-1true assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 5737#L1223true assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 5720#L1235-2true havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 1210#initPersonOnFloor_returnLabel#1true havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 532#bigMacCall_returnLabel#1true havoc bigMacCall_#t~ret21#1, bigMacCall_~tmp~8#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 1114#L1160true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 2992#isFloorCalling_returnLabel#1true isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 4960#isExecutiveFloorCalling_returnLabel#1true stopRequestedAtCurrentFloor_#t~ret76#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 303#L2627true assume 0 != stopRequestedAtCurrentFloor_~tmp~22#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 4226#getCurrentFloorID_returnLabel#1true stopRequestedAtCurrentFloor_#t~ret77#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret77#1;havoc stopRequestedAtCurrentFloor_#t~ret77#1; 3121#L2631true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 302#stopRequestedAtCurrentFloor_returnLabel#1true timeShift_#t~ret92#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret92#1;havoc timeShift_#t~ret92#1; 4723#L2779true assume !(0 != timeShift_~tmp___9~2#1); 3459#L2870true assume !(1 == ~doorState~0); 1698#L2870-2true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 1395#L1160-3true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 3399#isFloorCalling_returnLabel#4true isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 1184#isExecutiveFloorCalling_returnLabel#2true stopRequestedInDirection_#t~ret70#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1; 3204#L2510true assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 4575#getCurrentFloorID_returnLabel#2true stopRequestedInDirection_#t~ret71#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~19#1 := stopRequestedInDirection_#t~ret71#1;havoc stopRequestedInDirection_#t~ret71#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~19#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 2026#stopRequestedInDirection_returnLabel#1true timeShift_#t~ret99#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret99#1;havoc timeShift_#t~ret99#1; 3882#L2878true assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1; 3393#L2567true assume !(1 == ~currentHeading~0); 2369#L2577true assume !(0 == ~currentFloorID~0); 820#L2577-2true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 899#L2583-1true havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 4013#L2887-2true assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 4414#L1160-25true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 4196#isFloorCalling_returnLabel#26true isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 1782#isExecutiveFloorCalling_returnLabel#4true __utac_acc__Specification14_spec__1_#t~ret11#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret11#1;havoc __utac_acc__Specification14_spec__1_#t~ret11#1; 5551#L330true assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1); 5#L330-1true havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :end_inline___utac_acc__Specification14_spec__1 } true; 5384#timeShift_returnLabel#1true havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 3977#L1160-26true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 4289#isFloorCalling_returnLabel#27true isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 154#isExecutiveFloorCalling_returnLabel#5true stopRequestedAtCurrentFloor_#t~ret76#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 5725#L2627-1true assume 0 != stopRequestedAtCurrentFloor_~tmp~22#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1316#getCurrentFloorID_returnLabel#5true stopRequestedAtCurrentFloor_#t~ret77#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret77#1;havoc stopRequestedAtCurrentFloor_#t~ret77#1; 1588#L2631-1true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 2521#stopRequestedAtCurrentFloor_returnLabel#2true timeShift_#t~ret92#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret92#1;havoc timeShift_#t~ret92#1; 1388#L2779-2true assume !(0 != timeShift_~tmp___9~2#1); 4333#L2870-3true assume 1 == ~doorState~0;~doorState~0 := 0; 3138#L2870-5true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 4555#L1160-29true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 534#isFloorCalling_returnLabel#30true isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 315#isExecutiveFloorCalling_returnLabel#6true stopRequestedInDirection_#t~ret70#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1; 5662#L2510-2true assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1273#getCurrentFloorID_returnLabel#6true stopRequestedInDirection_#t~ret71#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~19#1 := stopRequestedInDirection_#t~ret71#1;havoc stopRequestedInDirection_#t~ret71#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~19#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 1414#stopRequestedInDirection_returnLabel#3true timeShift_#t~ret99#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret99#1;havoc timeShift_#t~ret99#1; 1142#L2878-2true assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1; 1275#L2567-3true assume !(1 == ~currentHeading~0); 2295#L2577-9true assume !(0 == ~currentFloorID~0); 3714#L2577-11true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2453#L2583-7true havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 780#L2887-5true assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 3094#L1160-51true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 4537#isFloorCalling_returnLabel#52true isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 2087#isExecutiveFloorCalling_returnLabel#8true __utac_acc__Specification14_spec__1_#t~ret11#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret11#1;havoc __utac_acc__Specification14_spec__1_#t~ret11#1; 1094#L330-2true assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1); 961#L330-3true havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :end_inline___utac_acc__Specification14_spec__1 } true; 2472#timeShift_returnLabel#2true havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 5261#L1160-52true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 2797#isFloorCalling_returnLabel#53true isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 3471#isExecutiveFloorCalling_returnLabel#9true stopRequestedAtCurrentFloor_#t~ret76#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 149#L2627-2true assume 0 != stopRequestedAtCurrentFloor_~tmp~22#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1539#getCurrentFloorID_returnLabel#9true stopRequestedAtCurrentFloor_#t~ret77#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret77#1;havoc stopRequestedAtCurrentFloor_#t~ret77#1; 2506#L2631-2true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 783#stopRequestedAtCurrentFloor_returnLabel#3true timeShift_#t~ret92#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret92#1;havoc timeShift_#t~ret92#1; 4903#L2779-4true assume !(0 != timeShift_~tmp___9~2#1); 2636#L2870-6true assume !(1 == ~doorState~0); 830#L2870-8true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 494#L1160-55true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 3026#isFloorCalling_returnLabel#56true isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 854#isExecutiveFloorCalling_returnLabel#10true stopRequestedInDirection_#t~ret70#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1; 141#L2510-4true assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 5702#getCurrentFloorID_returnLabel#10true stopRequestedInDirection_#t~ret71#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~19#1 := stopRequestedInDirection_#t~ret71#1;havoc stopRequestedInDirection_#t~ret71#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~19#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 2450#stopRequestedInDirection_returnLabel#5true timeShift_#t~ret99#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret99#1;havoc timeShift_#t~ret99#1; 3826#L2878-4true assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1; 535#L2567-6true assume !(1 == ~currentHeading~0); 218#L2577-18true assume !(0 == ~currentFloorID~0); 4355#L2577-20true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1940#L2583-13true havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 3624#L2887-8true assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 1700#L1160-77true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 5373#isFloorCalling_returnLabel#78true isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 3442#isExecutiveFloorCalling_returnLabel#12true __utac_acc__Specification14_spec__1_#t~ret11#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret11#1;havoc __utac_acc__Specification14_spec__1_#t~ret11#1; 3526#L330-4true assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1); 4446#L330-5true havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :end_inline___utac_acc__Specification14_spec__1 } true; 353#timeShift_returnLabel#3true havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true; 66#threeTS_returnLabel#1true assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret16#1, bobCall_~tmp~3#1;havoc bobCall_~tmp~3#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 4546#L241-1true assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 499#getOrigin_returnLabel#2true bobCall_#t~ret16#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~3#1 := bobCall_#t~ret16#1;havoc bobCall_#t~ret16#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~3#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 4477#L1431-1true assume 0 == initPersonOnFloor_~floor#1; 851#L1432-2true assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 4022#L1539-3true assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 2553#L1223-2true assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 774#L1235-5true havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 4141#initPersonOnFloor_returnLabel#2true havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 3451#bobCall_returnLabel#1true havoc bobCall_#t~ret16#1, bobCall_~tmp~3#1;assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret22#1, cleanup_#t~ret23#1, cleanup_~i~2#1, cleanup_~tmp~9#1, cleanup_~tmp___0~3#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~9#1;havoc cleanup_~tmp___0~3#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 2173#L1160-78true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 1157#isFloorCalling_returnLabel#79true isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 5027#isExecutiveFloorCalling_returnLabel#13true stopRequestedAtCurrentFloor_#t~ret76#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 1785#L2627-3true assume 0 != stopRequestedAtCurrentFloor_~tmp~22#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 4818#getCurrentFloorID_returnLabel#13true stopRequestedAtCurrentFloor_#t~ret77#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret77#1;havoc stopRequestedAtCurrentFloor_#t~ret77#1; 1052#L2631-3true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 4382#stopRequestedAtCurrentFloor_returnLabel#4true timeShift_#t~ret92#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret92#1;havoc timeShift_#t~ret92#1; 2284#L2779-6true assume !(0 != timeShift_~tmp___9~2#1); 2489#L2870-9true assume !(1 == ~doorState~0); 63#L2870-11true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 187#L1160-81true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 3706#isFloorCalling_returnLabel#82true isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 2667#isExecutiveFloorCalling_returnLabel#14true stopRequestedInDirection_#t~ret70#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1; 112#L2510-6true assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 2670#getCurrentFloorID_returnLabel#14true stopRequestedInDirection_#t~ret71#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~19#1 := stopRequestedInDirection_#t~ret71#1;havoc stopRequestedInDirection_#t~ret71#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~19#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 2275#stopRequestedInDirection_returnLabel#7true timeShift_#t~ret99#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret99#1;havoc timeShift_#t~ret99#1; 2313#L2878-6true assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1; 1269#L2567-9true assume !(1 == ~currentHeading~0); 843#L2577-27true assume !(0 == ~currentFloorID~0); 5825#L2577-29true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1997#L2583-19true havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 17#L2887-11true assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 3037#L1160-103true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 2756#isFloorCalling_returnLabel#104true isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 5570#isExecutiveFloorCalling_returnLabel#16true __utac_acc__Specification14_spec__1_#t~ret11#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret11#1;havoc __utac_acc__Specification14_spec__1_#t~ret11#1; 148#L330-6true assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1); 935#L330-7true havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :end_inline___utac_acc__Specification14_spec__1 } true; 5324#timeShift_returnLabel#4true havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 3989#L500-2true [2024-11-13 15:37:08,293 INFO L747 eck$LassoCheckResult]: Loop: 3989#L500-2true assume !false; 600#L501true cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 5026#L504true assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 4028#isBlocked_returnLabel#1true cleanup_#t~ret22#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~3#1 := cleanup_#t~ret22#1;havoc cleanup_#t~ret22#1; 5154#L508true assume 1 != cleanup_~tmp___0~3#1; 390#L508-1true assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret58#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~17#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~17#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret53#1, anyStopRequested_#t~ret54#1, anyStopRequested_#t~ret55#1, anyStopRequested_#t~ret56#1, anyStopRequested_#t~ret57#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~16#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~16#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 3230#L1160-104true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 2567#isFloorCalling_returnLabel#105true anyStopRequested_#t~ret53#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret53#1;havoc anyStopRequested_#t~ret53#1; 2293#L2066true assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 182#anyStopRequested_returnLabel#1true isIdle_#t~ret58#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret53#1, anyStopRequested_#t~ret54#1, anyStopRequested_#t~ret55#1, anyStopRequested_#t~ret56#1, anyStopRequested_#t~ret57#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~16#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~17#1 := isIdle_#t~ret58#1;havoc isIdle_#t~ret58#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~17#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 1370#isIdle_returnLabel#1true cleanup_#t~ret23#1 := isIdle_#res#1;havoc isIdle_#t~ret58#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~17#1;assume { :end_inline_isIdle } true;cleanup_~tmp~9#1 := cleanup_#t~ret23#1;havoc cleanup_#t~ret23#1; 4615#L520true assume !(0 != cleanup_~tmp~9#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 5614#L1160-109true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 4124#isFloorCalling_returnLabel#110true isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 570#isExecutiveFloorCalling_returnLabel#17true stopRequestedAtCurrentFloor_#t~ret76#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 2038#L2627-4true assume 0 != stopRequestedAtCurrentFloor_~tmp~22#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 2294#getCurrentFloorID_returnLabel#17true stopRequestedAtCurrentFloor_#t~ret77#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret77#1;havoc stopRequestedAtCurrentFloor_#t~ret77#1; 4169#L2631-4true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 1422#stopRequestedAtCurrentFloor_returnLabel#5true timeShift_#t~ret92#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret92#1;havoc timeShift_#t~ret92#1; 2118#L2779-8true assume !(0 != timeShift_~tmp___9~2#1); 2786#L2870-12true assume 1 == ~doorState~0;~doorState~0 := 0; 5771#L2870-14true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 4614#L1160-112true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 5206#isFloorCalling_returnLabel#113true isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 4726#isExecutiveFloorCalling_returnLabel#18true stopRequestedInDirection_#t~ret70#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1; 3408#L2510-8true assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 3835#getCurrentFloorID_returnLabel#18true stopRequestedInDirection_#t~ret71#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~19#1 := stopRequestedInDirection_#t~ret71#1;havoc stopRequestedInDirection_#t~ret71#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~19#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 5086#stopRequestedInDirection_returnLabel#9true timeShift_#t~ret99#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret99#1;havoc timeShift_#t~ret99#1; 634#L2878-8true assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1; 3956#L2567-12true assume !(1 == ~currentHeading~0); 5239#L2577-36true assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 5061#L2577-38true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1897#L2583-25true havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 5827#L2887-14true assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 3690#L1160-134true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 4504#isFloorCalling_returnLabel#135true isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 921#isExecutiveFloorCalling_returnLabel#20true __utac_acc__Specification14_spec__1_#t~ret11#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret11#1;havoc __utac_acc__Specification14_spec__1_#t~ret11#1; 2752#L330-8true assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1); 5549#L330-9true havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :end_inline___utac_acc__Specification14_spec__1 } true; 3553#timeShift_returnLabel#5true havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 3989#L500-2true [2024-11-13 15:37:08,305 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-13 15:37:08,306 INFO L85 PathProgramCache]: Analyzing trace with hash 1954735616, now seen corresponding path program 1 times [2024-11-13 15:37:08,319 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-13 15:37:08,320 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1319197459] [2024-11-13 15:37:08,320 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-13 15:37:08,321 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-13 15:37:08,578 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-13 15:37:09,096 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-13 15:37:09,096 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-13 15:37:09,096 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1319197459] [2024-11-13 15:37:09,097 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1319197459] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-13 15:37:09,097 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-13 15:37:09,097 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-13 15:37:09,101 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [842492267] [2024-11-13 15:37:09,102 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-13 15:37:09,107 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-13 15:37:09,109 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-13 15:37:09,109 INFO L85 PathProgramCache]: Analyzing trace with hash -1897838617, now seen corresponding path program 1 times [2024-11-13 15:37:09,110 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-13 15:37:09,110 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [992300972] [2024-11-13 15:37:09,110 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-13 15:37:09,110 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-13 15:37:09,155 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-13 15:37:09,361 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-13 15:37:09,361 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-13 15:37:09,361 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [992300972] [2024-11-13 15:37:09,361 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [992300972] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-13 15:37:09,362 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-13 15:37:09,362 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-11-13 15:37:09,362 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1207308869] [2024-11-13 15:37:09,362 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-13 15:37:09,363 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-13 15:37:09,364 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-13 15:37:09,400 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2024-11-13 15:37:09,400 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2024-11-13 15:37:09,416 INFO L87 Difference]: Start difference. First operand has 5831 states, 5830 states have (on average 1.8710120068610634) internal successors, (10908), 5830 states have internal predecessors, (10908), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand has 7 states, 7 states have (on average 5.714285714285714) internal successors, (40), 7 states have internal predecessors, (40), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-13 15:37:16,860 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-13 15:37:16,860 INFO L93 Difference]: Finished difference Result 16952 states and 31550 transitions. [2024-11-13 15:37:16,862 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 16952 states and 31550 transitions. [2024-11-13 15:37:17,028 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 3456 [2024-11-13 15:37:17,317 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 16952 states to 16916 states and 31507 transitions. [2024-11-13 15:37:17,319 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 16916 [2024-11-13 15:37:17,346 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 16916 [2024-11-13 15:37:17,347 INFO L73 IsDeterministic]: Start isDeterministic. Operand 16916 states and 31507 transitions. [2024-11-13 15:37:17,397 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-13 15:37:17,398 INFO L218 hiAutomatonCegarLoop]: Abstraction has 16916 states and 31507 transitions. [2024-11-13 15:37:17,436 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 16916 states and 31507 transitions. [2024-11-13 15:37:17,811 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 16916 to 16826. [2024-11-13 15:37:17,853 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 16826 states, 16826 states have (on average 1.8636039462736242) internal successors, (31357), 16825 states have internal predecessors, (31357), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-13 15:37:17,897 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 16826 states to 16826 states and 31357 transitions. [2024-11-13 15:37:17,898 INFO L240 hiAutomatonCegarLoop]: Abstraction has 16826 states and 31357 transitions. [2024-11-13 15:37:17,899 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2024-11-13 15:37:17,902 INFO L424 stractBuchiCegarLoop]: Abstraction has 16826 states and 31357 transitions. [2024-11-13 15:37:17,903 INFO L331 stractBuchiCegarLoop]: ======== Iteration 2 ============ [2024-11-13 15:37:17,903 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 16826 states and 31357 transitions. [2024-11-13 15:37:18,171 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 3438 [2024-11-13 15:37:18,172 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-13 15:37:18,172 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-13 15:37:18,182 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-13 15:37:18,182 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-13 15:37:18,183 INFO L745 eck$LassoCheckResult]: Stem: 23342#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 23343#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret28#1, main_~retValue_acc~6#1, main_~tmp~11#1;havoc main_~retValue_acc~6#1;havoc main_~tmp~11#1;assume { :begin_inline_select_helpers } true; 28448#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 28118#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; 24630#valid_product_returnLabel#1 main_#t~ret28#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;assume { :end_inline_valid_product } true;main_~tmp~11#1 := main_#t~ret28#1;havoc main_#t~ret28#1; 24631#L692 assume 0 != main_~tmp~11#1;assume { :begin_inline_setup } true; 24807#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret21#1, bigMacCall_~tmp~8#1;havoc bigMacCall_~tmp~8#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 26282#L241 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 25046#getOrigin_returnLabel#1 bigMacCall_#t~ret21#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~8#1 := bigMacCall_#t~ret21#1;havoc bigMacCall_#t~ret21#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~8#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 27680#L1431 assume 0 == initPersonOnFloor_~floor#1; 28302#L1432 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 22849#L1539-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 27555#L1223 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 23024#L1235-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 25262#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 24052#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret21#1, bigMacCall_~tmp~8#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 24053#L1160 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 25096#isFloorCalling_returnLabel#1 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 27574#isExecutiveFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret76#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 23560#L2627 assume 0 != stopRequestedAtCurrentFloor_~tmp~22#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 23561#getCurrentFloorID_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret77#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret77#1;havoc stopRequestedAtCurrentFloor_#t~ret77#1; 27683#L2631 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 23558#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret92#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret92#1;havoc timeShift_#t~ret92#1; 23559#L2779 assume !(0 != timeShift_~tmp___9~2#1); 28014#L2870 assume !(1 == ~doorState~0); 26022#L2870-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 25569#L1160-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 25570#isFloorCalling_returnLabel#4 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 25218#isExecutiveFloorCalling_returnLabel#2 stopRequestedInDirection_#t~ret70#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1; 25219#L2510 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 27762#getCurrentFloorID_returnLabel#2 stopRequestedInDirection_#t~ret71#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~19#1 := stopRequestedInDirection_#t~ret71#1;havoc stopRequestedInDirection_#t~ret71#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~19#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 35027#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret99#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret99#1;havoc timeShift_#t~ret99#1; 35024#L2878 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1; 35022#L2567 assume !(1 == ~currentHeading~0); 35019#L2577 assume !(0 == ~currentFloorID~0); 24603#L2577-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 24604#L2583-1 havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 24741#L2887-2 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 34422#L1160-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 30437#isFloorCalling_returnLabel#26 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 34420#isExecutiveFloorCalling_returnLabel#4 __utac_acc__Specification14_spec__1_#t~ret11#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret11#1;havoc __utac_acc__Specification14_spec__1_#t~ret11#1; 34418#L330 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1); 34414#L330-1 havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :end_inline___utac_acc__Specification14_spec__1 } true; 34413#timeShift_returnLabel#1 havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 34412#L1160-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 31852#isFloorCalling_returnLabel#27 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 34411#isExecutiveFloorCalling_returnLabel#5 stopRequestedAtCurrentFloor_#t~ret76#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 34409#L2627-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~22#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 34404#getCurrentFloorID_returnLabel#5 stopRequestedAtCurrentFloor_#t~ret77#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret77#1;havoc stopRequestedAtCurrentFloor_#t~ret77#1; 34402#L2631-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 25864#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret92#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret92#1;havoc timeShift_#t~ret92#1; 25556#L2779-2 assume !(0 != timeShift_~tmp___9~2#1); 25557#L2870-3 assume 1 == ~doorState~0;~doorState~0 := 0; 37659#L2870-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 37658#L1160-29 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 24056#isFloorCalling_returnLabel#30 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 23589#isExecutiveFloorCalling_returnLabel#6 stopRequestedInDirection_#t~ret70#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1; 23590#L2510-2 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 29114#getCurrentFloorID_returnLabel#6 stopRequestedInDirection_#t~ret71#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~19#1 := stopRequestedInDirection_#t~ret71#1;havoc stopRequestedInDirection_#t~ret71#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~19#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 37629#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret99#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret99#1;havoc timeShift_#t~ret99#1; 37627#L2878-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1; 37624#L2567-3 assume !(1 == ~currentHeading~0); 37621#L2577-9 assume !(0 == ~currentFloorID~0); 36504#L2577-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 36483#L2583-7 havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 24533#L2887-5 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 24534#L1160-51 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 29310#isFloorCalling_returnLabel#52 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 29309#isExecutiveFloorCalling_returnLabel#8 __utac_acc__Specification14_spec__1_#t~ret11#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret11#1;havoc __utac_acc__Specification14_spec__1_#t~ret11#1; 29222#L330-2 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1); 29220#L330-3 havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :end_inline___utac_acc__Specification14_spec__1 } true; 29218#timeShift_returnLabel#2 havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 29215#L1160-52 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 29141#isFloorCalling_returnLabel#53 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 29195#isExecutiveFloorCalling_returnLabel#9 stopRequestedAtCurrentFloor_#t~ret76#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 29184#L2627-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~22#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 29175#getCurrentFloorID_returnLabel#9 stopRequestedAtCurrentFloor_#t~ret77#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret77#1;havoc stopRequestedAtCurrentFloor_#t~ret77#1; 29165#L2631-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 24537#stopRequestedAtCurrentFloor_returnLabel#3 timeShift_#t~ret92#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret92#1;havoc timeShift_#t~ret92#1; 24538#L2779-4 assume !(0 != timeShift_~tmp___9~2#1); 27202#L2870-6 assume !(1 == ~doorState~0); 24617#L2870-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 23975#L1160-55 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 23976#isFloorCalling_returnLabel#56 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 24661#isExecutiveFloorCalling_returnLabel#10 stopRequestedInDirection_#t~ret70#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1; 24662#L2510-4 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 32698#getCurrentFloorID_returnLabel#10 stopRequestedInDirection_#t~ret71#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~19#1 := stopRequestedInDirection_#t~ret71#1;havoc stopRequestedInDirection_#t~ret71#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~19#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 32012#stopRequestedInDirection_returnLabel#5 timeShift_#t~ret99#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret99#1;havoc timeShift_#t~ret99#1; 32013#L2878-4 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1; 32009#L2567-6 assume !(1 == ~currentHeading~0); 32006#L2577-18 assume !(0 == ~currentFloorID~0); 28613#L2577-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 26359#L2583-13 havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 25592#L2887-8 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 26023#L1160-77 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 26024#isFloorCalling_returnLabel#78 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 32358#isExecutiveFloorCalling_returnLabel#12 __utac_acc__Specification14_spec__1_#t~ret11#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret11#1;havoc __utac_acc__Specification14_spec__1_#t~ret11#1; 32355#L330-4 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1); 32351#L330-5 havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :end_inline___utac_acc__Specification14_spec__1 } true; 32350#timeShift_returnLabel#3 havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true; 22984#threeTS_returnLabel#1 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret16#1, bobCall_~tmp~3#1;havoc bobCall_~tmp~3#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 22985#L241-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 23846#getOrigin_returnLabel#2 bobCall_#t~ret16#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~3#1 := bobCall_#t~ret16#1;havoc bobCall_#t~ret16#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~3#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 23987#L1431-1 assume 0 == initPersonOnFloor_~floor#1; 24654#L1432-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 22904#L1539-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 27117#L1223-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 24497#L1235-5 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 24526#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 28003#bobCall_returnLabel#1 havoc bobCall_#t~ret16#1, bobCall_~tmp~3#1;assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret22#1, cleanup_#t~ret23#1, cleanup_~i~2#1, cleanup_~tmp~9#1, cleanup_~tmp___0~3#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~9#1;havoc cleanup_~tmp___0~3#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 26647#L1160-78 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 25168#isFloorCalling_returnLabel#79 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 25169#isExecutiveFloorCalling_returnLabel#13 stopRequestedAtCurrentFloor_#t~ret76#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 26141#L2627-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~22#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 26143#getCurrentFloorID_returnLabel#13 stopRequestedAtCurrentFloor_#t~ret77#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret77#1;havoc stopRequestedAtCurrentFloor_#t~ret77#1; 28835#L2631-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 23458#stopRequestedAtCurrentFloor_returnLabel#4 timeShift_#t~ret92#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret92#1;havoc timeShift_#t~ret92#1; 26798#L2779-6 assume !(0 != timeShift_~tmp___9~2#1); 26799#L2870-9 assume !(1 == ~doorState~0); 22976#L2870-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 22977#L1160-81 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 23291#isFloorCalling_returnLabel#82 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 27228#isExecutiveFloorCalling_returnLabel#14 stopRequestedInDirection_#t~ret70#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1; 23105#L2510-6 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 23107#getCurrentFloorID_returnLabel#14 stopRequestedInDirection_#t~ret71#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~19#1 := stopRequestedInDirection_#t~ret71#1;havoc stopRequestedInDirection_#t~ret71#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~19#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 34596#stopRequestedInDirection_returnLabel#7 timeShift_#t~ret99#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret99#1;havoc timeShift_#t~ret99#1; 34594#L2878-6 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1; 34592#L2567-9 assume !(1 == ~currentHeading~0); 34589#L2577-27 assume !(0 == ~currentFloorID~0); 29137#L2577-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 26433#L2583-19 havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 22833#L2887-11 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 22854#L1160-103 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 27613#isFloorCalling_returnLabel#104 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 29090#isExecutiveFloorCalling_returnLabel#16 __utac_acc__Specification14_spec__1_#t~ret11#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret11#1;havoc __utac_acc__Specification14_spec__1_#t~ret11#1; 29091#L330-6 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1); 32845#L330-7 havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :end_inline___utac_acc__Specification14_spec__1 } true; 29023#timeShift_returnLabel#4 havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 28097#L500-2 [2024-11-13 15:37:18,185 INFO L747 eck$LassoCheckResult]: Loop: 28097#L500-2 assume !false; 28413#L501 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 28918#L504 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 28440#isBlocked_returnLabel#1 cleanup_#t~ret22#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~3#1 := cleanup_#t~ret22#1;havoc cleanup_#t~ret22#1; 28441#L508 assume 1 != cleanup_~tmp___0~3#1; 23756#L508-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret58#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~17#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~17#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret53#1, anyStopRequested_#t~ret54#1, anyStopRequested_#t~ret55#1, anyStopRequested_#t~ret56#1, anyStopRequested_#t~ret57#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~16#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~16#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 23757#L1160-104 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 27784#isFloorCalling_returnLabel#105 anyStopRequested_#t~ret53#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret53#1;havoc anyStopRequested_#t~ret53#1; 26813#L2066 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 23283#anyStopRequested_returnLabel#1 isIdle_#t~ret58#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret53#1, anyStopRequested_#t~ret54#1, anyStopRequested_#t~ret55#1, anyStopRequested_#t~ret56#1, anyStopRequested_#t~ret57#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~16#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~17#1 := isIdle_#t~ret58#1;havoc isIdle_#t~ret58#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~17#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 23284#isIdle_returnLabel#1 cleanup_#t~ret23#1 := isIdle_#res#1;havoc isIdle_#t~ret58#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~17#1;assume { :end_inline_isIdle } true;cleanup_~tmp~9#1 := cleanup_#t~ret23#1;havoc cleanup_#t~ret23#1; 25535#L520 assume !(0 != cleanup_~tmp~9#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 32803#L1160-109 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 29145#isFloorCalling_returnLabel#110 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 24122#isExecutiveFloorCalling_returnLabel#17 stopRequestedAtCurrentFloor_#t~ret76#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 24123#L2627-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~22#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 26489#getCurrentFloorID_returnLabel#17 stopRequestedAtCurrentFloor_#t~ret77#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret77#1;havoc stopRequestedAtCurrentFloor_#t~ret77#1; 32102#L2631-4 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 23262#stopRequestedAtCurrentFloor_returnLabel#5 timeShift_#t~ret92#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret92#1;havoc timeShift_#t~ret92#1; 25614#L2779-8 assume !(0 != timeShift_~tmp___9~2#1); 26576#L2870-12 assume 1 == ~doorState~0;~doorState~0 := 0; 39440#L2870-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 39439#L1160-112 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 34904#isFloorCalling_returnLabel#113 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 34898#isExecutiveFloorCalling_returnLabel#18 stopRequestedInDirection_#t~ret70#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1; 34895#L2510-8 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 34882#getCurrentFloorID_returnLabel#18 stopRequestedInDirection_#t~ret71#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~19#1 := stopRequestedInDirection_#t~ret71#1;havoc stopRequestedInDirection_#t~ret71#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~19#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 34881#stopRequestedInDirection_returnLabel#9 timeShift_#t~ret99#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret99#1;havoc timeShift_#t~ret99#1; 34879#L2878-8 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1; 34880#L2567-12 assume !(1 == ~currentHeading~0); 34997#L2577-36 assume !(0 == ~currentFloorID~0); 32864#L2577-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 32860#L2583-25 havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 32858#L2887-14 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 32856#L1160-134 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 31855#isFloorCalling_returnLabel#135 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 32854#isExecutiveFloorCalling_returnLabel#20 __utac_acc__Specification14_spec__1_#t~ret11#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret11#1;havoc __utac_acc__Specification14_spec__1_#t~ret11#1; 32849#L330-8 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1); 29085#L330-9 havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :end_inline___utac_acc__Specification14_spec__1 } true; 28096#timeShift_returnLabel#5 havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 28097#L500-2 [2024-11-13 15:37:18,186 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-13 15:37:18,186 INFO L85 PathProgramCache]: Analyzing trace with hash 1954735616, now seen corresponding path program 2 times [2024-11-13 15:37:18,186 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-13 15:37:18,186 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1444347042] [2024-11-13 15:37:18,190 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-13 15:37:18,190 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-13 15:37:18,260 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-13 15:37:18,478 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-13 15:37:18,478 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-13 15:37:18,479 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1444347042] [2024-11-13 15:37:18,479 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1444347042] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-13 15:37:18,479 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-13 15:37:18,479 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-13 15:37:18,479 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1723969879] [2024-11-13 15:37:18,479 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-13 15:37:18,480 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-13 15:37:18,480 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-13 15:37:18,480 INFO L85 PathProgramCache]: Analyzing trace with hash 2004101669, now seen corresponding path program 1 times [2024-11-13 15:37:18,480 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-13 15:37:18,480 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1044868923] [2024-11-13 15:37:18,480 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-13 15:37:18,481 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-13 15:37:18,516 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-13 15:37:18,697 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-13 15:37:18,697 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-13 15:37:18,697 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1044868923] [2024-11-13 15:37:18,697 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1044868923] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-13 15:37:18,697 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-13 15:37:18,697 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2024-11-13 15:37:18,697 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1789290686] [2024-11-13 15:37:18,698 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-13 15:37:18,698 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-13 15:37:18,698 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-13 15:37:18,698 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2024-11-13 15:37:18,698 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=43, Unknown=0, NotChecked=0, Total=56 [2024-11-13 15:37:18,699 INFO L87 Difference]: Start difference. First operand 16826 states and 31357 transitions. cyclomatic complexity: 14533 Second operand has 8 states, 8 states have (on average 5.0) internal successors, (40), 8 states have internal predecessors, (40), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-13 15:37:22,346 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-13 15:37:22,346 INFO L93 Difference]: Finished difference Result 34109 states and 63056 transitions. [2024-11-13 15:37:22,346 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 34109 states and 63056 transitions. [2024-11-13 15:37:22,828 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 6942 [2024-11-13 15:37:23,024 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 34109 states to 34109 states and 63056 transitions. [2024-11-13 15:37:23,024 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 34109 [2024-11-13 15:37:23,073 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 34109 [2024-11-13 15:37:23,073 INFO L73 IsDeterministic]: Start isDeterministic. Operand 34109 states and 63056 transitions. [2024-11-13 15:37:23,141 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-13 15:37:23,141 INFO L218 hiAutomatonCegarLoop]: Abstraction has 34109 states and 63056 transitions. [2024-11-13 15:37:23,188 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 34109 states and 63056 transitions. [2024-11-13 15:37:23,913 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 34109 to 33535. [2024-11-13 15:37:23,971 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 33535 states, 33535 states have (on average 1.8631877143283138) internal successors, (62482), 33534 states have internal predecessors, (62482), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-13 15:37:24,074 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 33535 states to 33535 states and 62482 transitions. [2024-11-13 15:37:24,075 INFO L240 hiAutomatonCegarLoop]: Abstraction has 33535 states and 62482 transitions. [2024-11-13 15:37:24,075 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2024-11-13 15:37:24,077 INFO L424 stractBuchiCegarLoop]: Abstraction has 33535 states and 62482 transitions. [2024-11-13 15:37:24,078 INFO L331 stractBuchiCegarLoop]: ======== Iteration 3 ============ [2024-11-13 15:37:24,078 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 33535 states and 62482 transitions. [2024-11-13 15:37:24,339 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 6814 [2024-11-13 15:37:24,339 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-13 15:37:24,339 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-13 15:37:24,346 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-13 15:37:24,346 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-13 15:37:24,347 INFO L745 eck$LassoCheckResult]: Stem: 74298#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 74299#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret28#1, main_~retValue_acc~6#1, main_~tmp~11#1;havoc main_~retValue_acc~6#1;havoc main_~tmp~11#1;assume { :begin_inline_select_helpers } true; 79417#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 79088#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; 75593#valid_product_returnLabel#1 main_#t~ret28#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;assume { :end_inline_valid_product } true;main_~tmp~11#1 := main_#t~ret28#1;havoc main_#t~ret28#1; 75594#L692 assume 0 != main_~tmp~11#1;assume { :begin_inline_setup } true; 75767#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret21#1, bigMacCall_~tmp~8#1;havoc bigMacCall_~tmp~8#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 77231#L241 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 76008#getOrigin_returnLabel#1 bigMacCall_#t~ret21#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~8#1 := bigMacCall_#t~ret21#1;havoc bigMacCall_#t~ret21#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~8#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 78636#L1431 assume 0 == initPersonOnFloor_~floor#1; 79269#L1432 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 73804#L1539-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 78505#L1223 assume !(0 == callOnFloor_~floorID#1); 73979#L1226 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 73980#L1235-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 81775#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 81774#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret21#1, bigMacCall_~tmp~8#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 81772#L1160 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 81773#isFloorCalling_returnLabel#1 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 82537#isExecutiveFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret76#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 82535#L2627 assume 0 != stopRequestedAtCurrentFloor_~tmp~22#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 82534#getCurrentFloorID_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret77#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret77#1;havoc stopRequestedAtCurrentFloor_#t~ret77#1; 82528#L2631 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 82529#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret92#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret92#1;havoc timeShift_#t~ret92#1; 84650#L2779 assume !(0 != timeShift_~tmp___9~2#1); 84651#L2870 assume !(1 == ~doorState~0); 87083#L2870-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 87082#L1160-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 87080#isFloorCalling_returnLabel#4 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 87079#isExecutiveFloorCalling_returnLabel#2 stopRequestedInDirection_#t~ret70#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1; 87078#L2510 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 86914#getCurrentFloorID_returnLabel#2 stopRequestedInDirection_#t~ret71#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~19#1 := stopRequestedInDirection_#t~ret71#1;havoc stopRequestedInDirection_#t~ret71#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~19#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 82248#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret99#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret99#1;havoc timeShift_#t~ret99#1; 82226#L2878 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1; 82222#L2567 assume !(1 == ~currentHeading~0); 82211#L2577 assume !(0 == ~currentFloorID~0); 82209#L2577-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 81547#L2583-1 havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 81545#L2887-2 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 81544#L1160-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 81010#isFloorCalling_returnLabel#26 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 81543#isExecutiveFloorCalling_returnLabel#4 __utac_acc__Specification14_spec__1_#t~ret11#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret11#1;havoc __utac_acc__Specification14_spec__1_#t~ret11#1; 81190#L330 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1); 81184#L330-1 havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :end_inline___utac_acc__Specification14_spec__1 } true; 81035#timeShift_returnLabel#1 havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 81019#L1160-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 80968#isFloorCalling_returnLabel#27 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 81011#isExecutiveFloorCalling_returnLabel#5 stopRequestedAtCurrentFloor_#t~ret76#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 81007#L2627-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~22#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 81002#getCurrentFloorID_returnLabel#5 stopRequestedAtCurrentFloor_#t~ret77#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret77#1;havoc stopRequestedAtCurrentFloor_#t~ret77#1; 81001#L2631-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 80487#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret92#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret92#1;havoc timeShift_#t~ret92#1; 80485#L2779-2 assume !(0 != timeShift_~tmp___9~2#1); 80483#L2870-3 assume 1 == ~doorState~0;~doorState~0 := 0; 80480#L2870-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 80478#L1160-29 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 80476#isFloorCalling_returnLabel#30 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 80472#isExecutiveFloorCalling_returnLabel#6 stopRequestedInDirection_#t~ret70#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1; 80374#L2510-2 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 80330#getCurrentFloorID_returnLabel#6 stopRequestedInDirection_#t~ret71#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~19#1 := stopRequestedInDirection_#t~ret71#1;havoc stopRequestedInDirection_#t~ret71#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~19#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 80328#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret99#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret99#1;havoc timeShift_#t~ret99#1; 80325#L2878-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1; 80326#L2567-3 assume !(1 == ~currentHeading~0); 104971#L2577-9 assume !(0 == ~currentFloorID~0); 104968#L2577-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 104024#L2583-7 havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 104023#L2887-5 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 80227#L1160-51 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 80226#isFloorCalling_returnLabel#52 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 80225#isExecutiveFloorCalling_returnLabel#8 __utac_acc__Specification14_spec__1_#t~ret11#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret11#1;havoc __utac_acc__Specification14_spec__1_#t~ret11#1; 80219#L330-2 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1); 80220#L330-3 havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :end_inline___utac_acc__Specification14_spec__1 } true; 80211#timeShift_returnLabel#2 havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 80208#L1160-52 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 80206#isFloorCalling_returnLabel#53 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 80207#isExecutiveFloorCalling_returnLabel#9 stopRequestedAtCurrentFloor_#t~ret76#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 91537#L2627-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~22#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 80165#getCurrentFloorID_returnLabel#9 stopRequestedAtCurrentFloor_#t~ret77#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret77#1;havoc stopRequestedAtCurrentFloor_#t~ret77#1; 80130#L2631-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 75498#stopRequestedAtCurrentFloor_returnLabel#3 timeShift_#t~ret92#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret92#1;havoc timeShift_#t~ret92#1; 75499#L2779-4 assume !(0 != timeShift_~tmp___9~2#1); 78155#L2870-6 assume !(1 == ~doorState~0); 75578#L2870-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 74932#L1160-55 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 74933#isFloorCalling_returnLabel#56 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 75623#isExecutiveFloorCalling_returnLabel#10 stopRequestedInDirection_#t~ret70#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1; 74140#L2510-4 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 74141#getCurrentFloorID_returnLabel#10 stopRequestedInDirection_#t~ret71#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~19#1 := stopRequestedInDirection_#t~ret71#1;havoc stopRequestedInDirection_#t~ret71#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~19#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 79841#stopRequestedInDirection_returnLabel#5 timeShift_#t~ret99#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret99#1;havoc timeShift_#t~ret99#1; 91372#L2878-4 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1; 91370#L2567-6 assume !(1 == ~currentHeading~0); 91362#L2577-18 assume !(0 == ~currentFloorID~0); 79600#L2577-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 79601#L2583-13 havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 91355#L2887-8 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 95767#L1160-77 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 90369#isFloorCalling_returnLabel#78 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 95766#isExecutiveFloorCalling_returnLabel#12 __utac_acc__Specification14_spec__1_#t~ret11#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret11#1;havoc __utac_acc__Specification14_spec__1_#t~ret11#1; 95763#L330-4 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1); 95759#L330-5 havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :end_inline___utac_acc__Specification14_spec__1 } true; 95758#timeShift_returnLabel#3 havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true; 95756#threeTS_returnLabel#1 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret16#1, bobCall_~tmp~3#1;havoc bobCall_~tmp~3#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 95752#L241-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 95749#getOrigin_returnLabel#2 bobCall_#t~ret16#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~3#1 := bobCall_#t~ret16#1;havoc bobCall_#t~ret16#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~3#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 95748#L1431-1 assume 0 == initPersonOnFloor_~floor#1; 95734#L1432-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 95682#L1539-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 95678#L1223-2 assume !(0 == callOnFloor_~floorID#1); 80018#L1226-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 75460#L1235-5 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 75484#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 78975#bobCall_returnLabel#1 havoc bobCall_#t~ret16#1, bobCall_~tmp~3#1;assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret22#1, cleanup_#t~ret23#1, cleanup_~i~2#1, cleanup_~tmp~9#1, cleanup_~tmp___0~3#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~9#1;havoc cleanup_~tmp___0~3#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 77607#L1160-78 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 76130#isFloorCalling_returnLabel#79 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 76131#isExecutiveFloorCalling_returnLabel#13 stopRequestedAtCurrentFloor_#t~ret76#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 79890#L2627-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~22#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 99627#getCurrentFloorID_returnLabel#13 stopRequestedAtCurrentFloor_#t~ret77#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret77#1;havoc stopRequestedAtCurrentFloor_#t~ret77#1; 99526#L2631-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 93062#stopRequestedAtCurrentFloor_returnLabel#4 timeShift_#t~ret92#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret92#1;havoc timeShift_#t~ret92#1; 93060#L2779-6 assume !(0 != timeShift_~tmp___9~2#1); 93059#L2870-9 assume !(1 == ~doorState~0); 93058#L2870-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 93057#L1160-81 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 93055#isFloorCalling_returnLabel#82 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 93053#isExecutiveFloorCalling_returnLabel#14 stopRequestedInDirection_#t~ret70#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1; 93050#L2510-6 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 90347#getCurrentFloorID_returnLabel#14 stopRequestedInDirection_#t~ret71#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~19#1 := stopRequestedInDirection_#t~ret71#1;havoc stopRequestedInDirection_#t~ret71#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~19#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 77744#stopRequestedInDirection_returnLabel#7 timeShift_#t~ret99#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret99#1;havoc timeShift_#t~ret99#1; 77745#L2878-6 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1; 76321#L2567-9 assume !(1 == ~currentHeading~0); 75601#L2577-27 assume !(0 == ~currentFloorID~0); 75602#L2577-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 80096#L2583-19 havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 92399#L2887-11 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 92396#L1160-103 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 92392#isFloorCalling_returnLabel#104 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 92390#isExecutiveFloorCalling_returnLabel#16 __utac_acc__Specification14_spec__1_#t~ret11#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret11#1;havoc __utac_acc__Specification14_spec__1_#t~ret11#1; 92385#L330-6 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1); 92376#L330-7 havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :end_inline___utac_acc__Specification14_spec__1 } true; 92374#timeShift_returnLabel#4 havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 92372#L500-2 [2024-11-13 15:37:24,349 INFO L747 eck$LassoCheckResult]: Loop: 92372#L500-2 assume !false; 92371#L501 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 92370#L504 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 92369#isBlocked_returnLabel#1 cleanup_#t~ret22#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~3#1 := cleanup_#t~ret22#1;havoc cleanup_#t~ret22#1; 92368#L508 assume 1 != cleanup_~tmp___0~3#1; 92367#L508-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret58#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~17#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~17#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret53#1, anyStopRequested_#t~ret54#1, anyStopRequested_#t~ret55#1, anyStopRequested_#t~ret56#1, anyStopRequested_#t~ret57#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~16#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~16#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 92366#L1160-104 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 92365#isFloorCalling_returnLabel#105 anyStopRequested_#t~ret53#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret53#1;havoc anyStopRequested_#t~ret53#1; 92364#L2066 assume !(0 != anyStopRequested_~tmp___3~0#1); 92359#L2070 assume 0 != ~floorButtons_0~0;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 92348#anyStopRequested_returnLabel#1 isIdle_#t~ret58#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret53#1, anyStopRequested_#t~ret54#1, anyStopRequested_#t~ret55#1, anyStopRequested_#t~ret56#1, anyStopRequested_#t~ret57#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~16#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~17#1 := isIdle_#t~ret58#1;havoc isIdle_#t~ret58#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~17#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 93288#isIdle_returnLabel#1 cleanup_#t~ret23#1 := isIdle_#res#1;havoc isIdle_#t~ret58#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~17#1;assume { :end_inline_isIdle } true;cleanup_~tmp~9#1 := cleanup_#t~ret23#1;havoc cleanup_#t~ret23#1; 93287#L520 assume !(0 != cleanup_~tmp~9#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 93255#L1160-109 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 93254#isFloorCalling_returnLabel#110 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 93253#isExecutiveFloorCalling_returnLabel#17 stopRequestedAtCurrentFloor_#t~ret76#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 93251#L2627-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~22#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 93250#getCurrentFloorID_returnLabel#17 stopRequestedAtCurrentFloor_#t~ret77#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret77#1;havoc stopRequestedAtCurrentFloor_#t~ret77#1; 93248#L2631-4 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 93249#stopRequestedAtCurrentFloor_returnLabel#5 timeShift_#t~ret92#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret92#1;havoc timeShift_#t~ret92#1; 97157#L2779-8 assume !(0 != timeShift_~tmp___9~2#1); 97156#L2870-12 assume 1 == ~doorState~0;~doorState~0 := 0; 97155#L2870-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 97154#L1160-112 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 97153#isFloorCalling_returnLabel#113 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 97152#isExecutiveFloorCalling_returnLabel#18 stopRequestedInDirection_#t~ret70#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1; 93437#L2510-8 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 92508#getCurrentFloorID_returnLabel#18 stopRequestedInDirection_#t~ret71#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~19#1 := stopRequestedInDirection_#t~ret71#1;havoc stopRequestedInDirection_#t~ret71#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~19#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 92506#stopRequestedInDirection_returnLabel#9 timeShift_#t~ret99#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret99#1;havoc timeShift_#t~ret99#1; 92503#L2878-8 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1; 92480#L2567-12 assume !(1 == ~currentHeading~0); 92415#L2577-36 assume !(0 == ~currentFloorID~0); 92411#L2577-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 92400#L2583-25 havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 92397#L2887-14 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 92393#L1160-134 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 92391#isFloorCalling_returnLabel#135 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 92388#isExecutiveFloorCalling_returnLabel#20 __utac_acc__Specification14_spec__1_#t~ret11#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret11#1;havoc __utac_acc__Specification14_spec__1_#t~ret11#1; 92380#L330-8 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1); 92375#L330-9 havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :end_inline___utac_acc__Specification14_spec__1 } true; 92373#timeShift_returnLabel#5 havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 92372#L500-2 [2024-11-13 15:37:24,350 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-13 15:37:24,350 INFO L85 PathProgramCache]: Analyzing trace with hash 354313599, now seen corresponding path program 1 times [2024-11-13 15:37:24,350 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-13 15:37:24,350 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1202075685] [2024-11-13 15:37:24,350 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-13 15:37:24,350 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-13 15:37:24,410 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-13 15:37:24,695 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-13 15:37:24,695 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-13 15:37:24,695 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1202075685] [2024-11-13 15:37:24,696 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1202075685] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-13 15:37:24,697 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-13 15:37:24,697 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-13 15:37:24,697 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1796714595] [2024-11-13 15:37:24,697 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-13 15:37:24,698 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-13 15:37:24,698 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-13 15:37:24,699 INFO L85 PathProgramCache]: Analyzing trace with hash 524233296, now seen corresponding path program 1 times [2024-11-13 15:37:24,699 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-13 15:37:24,700 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1834122443] [2024-11-13 15:37:24,700 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-13 15:37:24,700 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-13 15:37:24,724 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-13 15:37:24,844 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-13 15:37:24,844 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-13 15:37:24,844 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1834122443] [2024-11-13 15:37:24,845 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1834122443] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-13 15:37:24,845 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-13 15:37:24,845 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2024-11-13 15:37:24,845 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [548948199] [2024-11-13 15:37:24,845 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-13 15:37:24,846 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-13 15:37:24,846 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-13 15:37:24,846 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2024-11-13 15:37:24,846 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=43, Unknown=0, NotChecked=0, Total=56 [2024-11-13 15:37:24,847 INFO L87 Difference]: Start difference. First operand 33535 states and 62482 transitions. cyclomatic complexity: 28949 Second operand has 8 states, 8 states have (on average 5.125) internal successors, (41), 8 states have internal predecessors, (41), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-13 15:37:29,873 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-13 15:37:29,873 INFO L93 Difference]: Finished difference Result 34188 states and 62875 transitions. [2024-11-13 15:37:29,873 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 34188 states and 62875 transitions. [2024-11-13 15:37:30,198 INFO L131 ngComponentsAnalysis]: Automaton has 5 accepting balls. 7000 [2024-11-13 15:37:30,308 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 34188 states to 34188 states and 62875 transitions. [2024-11-13 15:37:30,308 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 34188 [2024-11-13 15:37:30,367 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 34188 [2024-11-13 15:37:30,368 INFO L73 IsDeterministic]: Start isDeterministic. Operand 34188 states and 62875 transitions. [2024-11-13 15:37:30,393 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-13 15:37:30,394 INFO L218 hiAutomatonCegarLoop]: Abstraction has 34188 states and 62875 transitions. [2024-11-13 15:37:30,423 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 34188 states and 62875 transitions. [2024-11-13 15:37:30,821 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 34188 to 33248. [2024-11-13 15:37:30,863 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 33248 states, 33248 states have (on average 1.8628188161693937) internal successors, (61935), 33247 states have internal predecessors, (61935), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-13 15:37:30,935 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 33248 states to 33248 states and 61935 transitions. [2024-11-13 15:37:30,935 INFO L240 hiAutomatonCegarLoop]: Abstraction has 33248 states and 61935 transitions. [2024-11-13 15:37:30,935 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2024-11-13 15:37:30,936 INFO L424 stractBuchiCegarLoop]: Abstraction has 33248 states and 61935 transitions. [2024-11-13 15:37:30,937 INFO L331 stractBuchiCegarLoop]: ======== Iteration 4 ============ [2024-11-13 15:37:30,937 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 33248 states and 61935 transitions. [2024-11-13 15:37:31,196 INFO L131 ngComponentsAnalysis]: Automaton has 5 accepting balls. 6793 [2024-11-13 15:37:31,197 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-13 15:37:31,197 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-13 15:37:31,200 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-13 15:37:31,201 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-13 15:37:31,203 INFO L745 eck$LassoCheckResult]: Stem: 142042#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 142043#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret28#1, main_~retValue_acc~6#1, main_~tmp~11#1;havoc main_~retValue_acc~6#1;havoc main_~tmp~11#1;assume { :begin_inline_select_helpers } true; 147161#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 146828#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; 143330#valid_product_returnLabel#1 main_#t~ret28#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;assume { :end_inline_valid_product } true;main_~tmp~11#1 := main_#t~ret28#1;havoc main_#t~ret28#1; 143331#L692 assume 0 != main_~tmp~11#1;assume { :begin_inline_setup } true; 143506#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret21#1, bigMacCall_~tmp~8#1;havoc bigMacCall_~tmp~8#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 144971#L241 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 143743#getOrigin_returnLabel#1 bigMacCall_#t~ret21#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~8#1 := bigMacCall_#t~ret21#1;havoc bigMacCall_#t~ret21#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~8#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 146385#L1431 assume 0 == initPersonOnFloor_~floor#1; 147015#L1432 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 141547#L1539-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 146261#L1223 assume !(0 == callOnFloor_~floorID#1); 141722#L1226 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 141723#L1235-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 158133#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 158132#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret21#1, bigMacCall_~tmp~8#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 143790#L1160 assume !(0 == isFloorCalling_~floorID#1); 143792#L1164 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 145756#isFloorCalling_returnLabel#1 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 151259#isExecutiveFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret76#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 151232#L2627 assume 0 != stopRequestedAtCurrentFloor_~tmp~22#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 151230#getCurrentFloorID_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret77#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret77#1;havoc stopRequestedAtCurrentFloor_#t~ret77#1; 151226#L2631 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 151221#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret92#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret92#1;havoc timeShift_#t~ret92#1; 151198#L2779 assume !(0 != timeShift_~tmp___9~2#1); 151187#L2870 assume !(1 == ~doorState~0); 151182#L2870-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 151175#L1160-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 151176#isFloorCalling_returnLabel#4 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 167571#isExecutiveFloorCalling_returnLabel#2 stopRequestedInDirection_#t~ret70#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1; 167570#L2510 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 167516#getCurrentFloorID_returnLabel#2 stopRequestedInDirection_#t~ret71#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~19#1 := stopRequestedInDirection_#t~ret71#1;havoc stopRequestedInDirection_#t~ret71#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~19#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 167512#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret99#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret99#1;havoc timeShift_#t~ret99#1; 167513#L2878 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1; 167724#L2567 assume !(1 == ~currentHeading~0); 167718#L2577 assume !(0 == ~currentFloorID~0); 143305#L2577-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 143306#L2583-1 havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 167708#L2887-2 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 167707#L1160-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 147250#isFloorCalling_returnLabel#26 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 144822#isExecutiveFloorCalling_returnLabel#4 __utac_acc__Specification14_spec__1_#t~ret11#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret11#1;havoc __utac_acc__Specification14_spec__1_#t~ret11#1; 144823#L330 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1); 141522#L330-1 havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :end_inline___utac_acc__Specification14_spec__1 } true; 141523#timeShift_returnLabel#1 havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 167361#L1160-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 162527#isFloorCalling_returnLabel#27 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 167360#isExecutiveFloorCalling_returnLabel#5 stopRequestedAtCurrentFloor_#t~ret76#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 167359#L2627-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret74#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret75#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~21#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~21#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 167357#L1160-28 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 147797#isFloorCalling_returnLabel#29 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret74#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret74#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret74#1; 147798#L2600-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1; 162442#stopRequestedAtCurrentFloor__wrappee__empty_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret79#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret74#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret75#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~21#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := stopRequestedAtCurrentFloor_#t~ret79#1;havoc stopRequestedAtCurrentFloor_#t~ret79#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 162441#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret92#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret92#1;havoc timeShift_#t~ret92#1; 162440#L2779-2 assume !(0 != timeShift_~tmp___9~2#1); 162439#L2870-3 assume 1 == ~doorState~0;~doorState~0 := 0; 162438#L2870-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 156851#L1160-29 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 156850#isFloorCalling_returnLabel#30 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 156849#isExecutiveFloorCalling_returnLabel#6 stopRequestedInDirection_#t~ret70#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1; 156847#L2510-2 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 156837#getCurrentFloorID_returnLabel#6 stopRequestedInDirection_#t~ret71#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~19#1 := stopRequestedInDirection_#t~ret71#1;havoc stopRequestedInDirection_#t~ret71#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~19#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 156834#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret99#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret99#1;havoc timeShift_#t~ret99#1; 156307#L2878-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1; 156306#L2567-3 assume !(1 == ~currentHeading~0); 156104#L2577-9 assume !(0 == ~currentFloorID~0); 156065#L2577-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 156052#L2583-7 havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 156034#L2887-5 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 152722#L1160-51 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 152721#isFloorCalling_returnLabel#52 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 152719#isExecutiveFloorCalling_returnLabel#8 __utac_acc__Specification14_spec__1_#t~ret11#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret11#1;havoc __utac_acc__Specification14_spec__1_#t~ret11#1; 152714#L330-2 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1); 152713#L330-3 havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :end_inline___utac_acc__Specification14_spec__1 } true; 152712#timeShift_returnLabel#2 havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 152711#L1160-52 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 147837#isFloorCalling_returnLabel#53 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 152710#isExecutiveFloorCalling_returnLabel#9 stopRequestedAtCurrentFloor_#t~ret76#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 152709#L2627-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret74#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret75#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~21#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~21#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 152706#L1160-54 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 152223#isFloorCalling_returnLabel#55 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret74#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret74#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret74#1; 152215#L2600-5 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1; 152207#stopRequestedAtCurrentFloor__wrappee__empty_returnLabel#6 stopRequestedAtCurrentFloor_#t~ret79#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret74#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret75#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~21#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := stopRequestedAtCurrentFloor_#t~ret79#1;havoc stopRequestedAtCurrentFloor_#t~ret79#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 152199#stopRequestedAtCurrentFloor_returnLabel#3 timeShift_#t~ret92#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret92#1;havoc timeShift_#t~ret92#1; 152196#L2779-4 assume !(0 != timeShift_~tmp___9~2#1); 152197#L2870-6 assume !(1 == ~doorState~0); 158354#L2870-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 158347#L1160-55 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 151179#isFloorCalling_returnLabel#56 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 158344#isExecutiveFloorCalling_returnLabel#10 stopRequestedInDirection_#t~ret70#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1; 158342#L2510-4 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 158199#getCurrentFloorID_returnLabel#10 stopRequestedInDirection_#t~ret71#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~19#1 := stopRequestedInDirection_#t~ret71#1;havoc stopRequestedInDirection_#t~ret71#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~19#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 158198#stopRequestedInDirection_returnLabel#5 timeShift_#t~ret99#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret99#1;havoc timeShift_#t~ret99#1; 158196#L2878-4 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1; 158197#L2567-6 assume !(1 == ~currentHeading~0); 167702#L2577-18 assume !(0 == ~currentFloorID~0); 142065#L2577-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 145047#L2583-13 havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 144281#L2887-8 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 151486#L1160-77 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 148057#isFloorCalling_returnLabel#78 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 151485#isExecutiveFloorCalling_returnLabel#12 __utac_acc__Specification14_spec__1_#t~ret11#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret11#1;havoc __utac_acc__Specification14_spec__1_#t~ret11#1; 151481#L330-4 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1); 151406#L330-5 havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :end_inline___utac_acc__Specification14_spec__1 } true; 151405#timeShift_returnLabel#3 havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true; 151404#threeTS_returnLabel#1 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret16#1, bobCall_~tmp~3#1;havoc bobCall_~tmp~3#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 151399#L241-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 151396#getOrigin_returnLabel#2 bobCall_#t~ret16#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~3#1 := bobCall_#t~ret16#1;havoc bobCall_#t~ret16#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~3#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 151395#L1431-1 assume 0 == initPersonOnFloor_~floor#1; 151306#L1432-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 151284#L1539-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 147884#L1223-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 147874#L1235-5 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 147872#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 147870#bobCall_returnLabel#1 havoc bobCall_#t~ret16#1, bobCall_~tmp~3#1;assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret22#1, cleanup_#t~ret23#1, cleanup_~i~2#1, cleanup_~tmp~9#1, cleanup_~tmp___0~3#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~9#1;havoc cleanup_~tmp___0~3#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 147868#L1160-78 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 147866#isFloorCalling_returnLabel#79 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 147865#isExecutiveFloorCalling_returnLabel#13 stopRequestedAtCurrentFloor_#t~ret76#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 147864#L2627-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~22#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 147863#getCurrentFloorID_returnLabel#13 stopRequestedAtCurrentFloor_#t~ret77#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret77#1;havoc stopRequestedAtCurrentFloor_#t~ret77#1; 147862#L2631-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 142155#stopRequestedAtCurrentFloor_returnLabel#4 timeShift_#t~ret92#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret92#1;havoc timeShift_#t~ret92#1; 145506#L2779-6 assume !(0 != timeShift_~tmp___9~2#1); 145507#L2870-9 assume !(1 == ~doorState~0); 141675#L2870-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 141676#L1160-81 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 159622#isFloorCalling_returnLabel#82 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 159616#isExecutiveFloorCalling_returnLabel#14 stopRequestedInDirection_#t~ret70#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1; 159613#L2510-6 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 159074#getCurrentFloorID_returnLabel#14 stopRequestedInDirection_#t~ret71#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~19#1 := stopRequestedInDirection_#t~ret71#1;havoc stopRequestedInDirection_#t~ret71#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~19#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 159073#stopRequestedInDirection_returnLabel#7 timeShift_#t~ret99#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret99#1;havoc timeShift_#t~ret99#1; 159070#L2878-6 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1; 159066#L2567-9 assume !(1 == ~currentHeading~0); 159005#L2577-27 assume !(0 == ~currentFloorID~0); 159001#L2577-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 158621#L2583-19 havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 158617#L2887-11 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 158615#L1160-103 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 151257#isFloorCalling_returnLabel#104 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 158612#isExecutiveFloorCalling_returnLabel#16 __utac_acc__Specification14_spec__1_#t~ret11#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret11#1;havoc __utac_acc__Specification14_spec__1_#t~ret11#1; 158611#L330-6 assume 0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 158610#getCurrentFloorID_returnLabel#16 __utac_acc__Specification14_spec__1_#t~ret12#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification14_spec__1_~tmp~2#1 := __utac_acc__Specification14_spec__1_#t~ret12#1;havoc __utac_acc__Specification14_spec__1_#t~ret12#1;assume { :begin_inline_isExecutiveFloor } true;isExecutiveFloor_#in~floorID#1 := __utac_acc__Specification14_spec__1_~tmp~2#1;havoc isExecutiveFloor_#res#1;havoc isExecutiveFloor_~floorID#1, isExecutiveFloor_~retValue_acc~29#1;isExecutiveFloor_~floorID#1 := isExecutiveFloor_#in~floorID#1;havoc isExecutiveFloor_~retValue_acc~29#1;isExecutiveFloor_~retValue_acc~29#1 := (if ~executiveFloor~0 == isExecutiveFloor_~floorID#1 then 1 else 0);isExecutiveFloor_#res#1 := isExecutiveFloor_~retValue_acc~29#1; 158609#isExecutiveFloor_returnLabel#4 __utac_acc__Specification14_spec__1_#t~ret13#1 := isExecutiveFloor_#res#1;havoc isExecutiveFloor_~floorID#1, isExecutiveFloor_~retValue_acc~29#1;havoc isExecutiveFloor_#in~floorID#1;assume { :end_inline_isExecutiveFloor } true;__utac_acc__Specification14_spec__1_~tmp___0~2#1 := __utac_acc__Specification14_spec__1_#t~ret13#1;havoc __utac_acc__Specification14_spec__1_#t~ret13#1; 158449#L335-6 assume 0 != __utac_acc__Specification14_spec__1_~tmp___0~2#1; 158413#L330-7 havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :end_inline___utac_acc__Specification14_spec__1 } true; 158410#timeShift_returnLabel#4 havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 158312#L500-2 [2024-11-13 15:37:31,205 INFO L747 eck$LassoCheckResult]: Loop: 158312#L500-2 assume !false; 158311#L501 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 158310#L504 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 158309#isBlocked_returnLabel#1 cleanup_#t~ret22#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~3#1 := cleanup_#t~ret22#1;havoc cleanup_#t~ret22#1; 158131#L508 assume 1 != cleanup_~tmp___0~3#1; 158126#L508-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret58#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~17#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~17#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret53#1, anyStopRequested_#t~ret54#1, anyStopRequested_#t~ret55#1, anyStopRequested_#t~ret56#1, anyStopRequested_#t~ret57#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~16#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~16#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 158124#L1160-104 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 158122#isFloorCalling_returnLabel#105 anyStopRequested_#t~ret53#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret53#1;havoc anyStopRequested_#t~ret53#1; 158121#L2066 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 158120#anyStopRequested_returnLabel#1 isIdle_#t~ret58#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret53#1, anyStopRequested_#t~ret54#1, anyStopRequested_#t~ret55#1, anyStopRequested_#t~ret56#1, anyStopRequested_#t~ret57#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~16#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~17#1 := isIdle_#t~ret58#1;havoc isIdle_#t~ret58#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~17#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 158113#isIdle_returnLabel#1 cleanup_#t~ret23#1 := isIdle_#res#1;havoc isIdle_#t~ret58#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~17#1;assume { :end_inline_isIdle } true;cleanup_~tmp~9#1 := cleanup_#t~ret23#1;havoc cleanup_#t~ret23#1; 158111#L520 assume !(0 != cleanup_~tmp~9#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 158110#L1160-109 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 153460#isFloorCalling_returnLabel#110 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 158072#isExecutiveFloorCalling_returnLabel#17 stopRequestedAtCurrentFloor_#t~ret76#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 158069#L2627-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~22#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 158065#getCurrentFloorID_returnLabel#17 stopRequestedAtCurrentFloor_#t~ret77#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret77#1;havoc stopRequestedAtCurrentFloor_#t~ret77#1; 157862#L2631-4 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 147235#stopRequestedAtCurrentFloor_returnLabel#5 timeShift_#t~ret92#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret92#1;havoc timeShift_#t~ret92#1; 160258#L2779-8 assume !(0 != timeShift_~tmp___9~2#1); 160223#L2870-12 assume 1 == ~doorState~0;~doorState~0 := 0; 160220#L2870-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 160215#L1160-112 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 160203#isFloorCalling_returnLabel#113 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 160194#isExecutiveFloorCalling_returnLabel#18 stopRequestedInDirection_#t~ret70#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1; 160091#L2510-8 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 158765#getCurrentFloorID_returnLabel#18 stopRequestedInDirection_#t~ret71#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~19#1 := stopRequestedInDirection_#t~ret71#1;havoc stopRequestedInDirection_#t~ret71#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~19#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 158764#stopRequestedInDirection_returnLabel#9 timeShift_#t~ret99#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret99#1;havoc timeShift_#t~ret99#1; 158762#L2878-8 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1; 158763#L2567-12 assume !(1 == ~currentHeading~0); 160202#L2577-36 assume !(0 == ~currentFloorID~0); 160084#L2577-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 158705#L2583-25 havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 158704#L2887-14 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 158703#L1160-134 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 152728#isFloorCalling_returnLabel#135 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 158459#isExecutiveFloorCalling_returnLabel#20 __utac_acc__Specification14_spec__1_#t~ret11#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret11#1;havoc __utac_acc__Specification14_spec__1_#t~ret11#1; 158455#L330-8 assume 0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 158453#getCurrentFloorID_returnLabel#20 __utac_acc__Specification14_spec__1_#t~ret12#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification14_spec__1_~tmp~2#1 := __utac_acc__Specification14_spec__1_#t~ret12#1;havoc __utac_acc__Specification14_spec__1_#t~ret12#1;assume { :begin_inline_isExecutiveFloor } true;isExecutiveFloor_#in~floorID#1 := __utac_acc__Specification14_spec__1_~tmp~2#1;havoc isExecutiveFloor_#res#1;havoc isExecutiveFloor_~floorID#1, isExecutiveFloor_~retValue_acc~29#1;isExecutiveFloor_~floorID#1 := isExecutiveFloor_#in~floorID#1;havoc isExecutiveFloor_~retValue_acc~29#1;isExecutiveFloor_~retValue_acc~29#1 := (if ~executiveFloor~0 == isExecutiveFloor_~floorID#1 then 1 else 0);isExecutiveFloor_#res#1 := isExecutiveFloor_~retValue_acc~29#1; 158451#isExecutiveFloor_returnLabel#5 __utac_acc__Specification14_spec__1_#t~ret13#1 := isExecutiveFloor_#res#1;havoc isExecutiveFloor_~floorID#1, isExecutiveFloor_~retValue_acc~29#1;havoc isExecutiveFloor_#in~floorID#1;assume { :end_inline_isExecutiveFloor } true;__utac_acc__Specification14_spec__1_~tmp___0~2#1 := __utac_acc__Specification14_spec__1_#t~ret13#1;havoc __utac_acc__Specification14_spec__1_#t~ret13#1; 158446#L335-8 assume 0 != __utac_acc__Specification14_spec__1_~tmp___0~2#1; 158412#L330-9 havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :end_inline___utac_acc__Specification14_spec__1 } true; 158409#timeShift_returnLabel#5 havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 158312#L500-2 [2024-11-13 15:37:31,205 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-13 15:37:31,206 INFO L85 PathProgramCache]: Analyzing trace with hash 308350745, now seen corresponding path program 1 times [2024-11-13 15:37:31,206 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-13 15:37:31,206 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1482993393] [2024-11-13 15:37:31,206 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-13 15:37:31,206 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-13 15:37:31,260 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-13 15:37:31,417 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-13 15:37:31,418 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-13 15:37:31,419 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1482993393] [2024-11-13 15:37:31,419 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1482993393] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-13 15:37:31,419 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-13 15:37:31,419 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-13 15:37:31,419 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [98794841] [2024-11-13 15:37:31,419 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-13 15:37:31,420 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-13 15:37:31,420 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-13 15:37:31,420 INFO L85 PathProgramCache]: Analyzing trace with hash -860799006, now seen corresponding path program 1 times [2024-11-13 15:37:31,420 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-13 15:37:31,420 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [648633295] [2024-11-13 15:37:31,420 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-13 15:37:31,421 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-13 15:37:31,453 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2024-11-13 15:37:31,455 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2024-11-13 15:37:31,475 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2024-11-13 15:37:31,522 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2024-11-13 15:37:32,747 INFO L204 LassoAnalysis]: Preferences: [2024-11-13 15:37:32,747 INFO L125 ssoRankerPreferences]: Compute integeral hull: false [2024-11-13 15:37:32,748 INFO L126 ssoRankerPreferences]: Enable LassoPartitioneer: true [2024-11-13 15:37:32,752 INFO L127 ssoRankerPreferences]: Term annotations enabled: false [2024-11-13 15:37:32,752 INFO L128 ssoRankerPreferences]: Use exernal solver: true [2024-11-13 15:37:32,752 INFO L129 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2024-11-13 15:37:32,752 INFO L130 ssoRankerPreferences]: Dump SMT script to file: false [2024-11-13 15:37:32,753 INFO L131 ssoRankerPreferences]: Path of dumped script: [2024-11-13 15:37:32,753 INFO L132 ssoRankerPreferences]: Filename of dumped script: elevator_spec14_product11.cil.c_Iteration4_Loop [2024-11-13 15:37:32,753 INFO L133 ssoRankerPreferences]: MapElimAlgo: Frank [2024-11-13 15:37:32,753 INFO L241 LassoAnalysis]: Starting lasso preprocessing... [2024-11-13 15:37:32,787 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:32,794 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:32,797 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:32,801 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:32,803 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:32,806 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:32,808 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:32,811 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:32,815 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:32,817 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:32,821 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:32,825 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:32,829 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:32,832 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:32,834 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:32,837 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:32,840 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:32,843 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:32,847 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:32,855 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:32,857 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:32,861 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:32,865 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:32,868 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:32,871 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:32,873 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:32,876 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:32,879 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:32,883 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:32,886 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:32,890 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:32,894 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:32,897 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:32,900 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:32,902 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:32,905 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:32,911 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:32,915 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:32,917 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:32,920 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:32,923 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:32,925 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:32,928 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:32,931 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:32,934 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:32,936 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:32,939 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:32,942 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:32,944 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:32,947 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:32,949 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:32,953 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:32,960 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:32,963 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:32,966 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:32,969 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:32,972 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:32,974 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:32,977 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:32,979 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:32,982 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:32,984 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:32,987 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:32,989 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:32,992 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:32,994 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:32,997 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:33,000 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:33,003 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:33,005 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:33,008 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:33,014 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:33,016 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:33,019 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:33,022 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:33,024 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:33,027 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:33,029 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:33,032 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:33,035 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:33,037 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:33,040 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:33,042 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:33,045 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:33,047 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:33,050 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:33,053 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:33,055 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:33,058 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:33,060 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:33,063 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:33,065 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:33,068 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:33,070 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:33,072 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:33,075 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:33,078 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:33,080 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:33,083 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:33,457 INFO L259 LassoAnalysis]: Preprocessing complete. [2024-11-13 15:37:33,457 INFO L365 LassoAnalysis]: Checking for nontermination... [2024-11-13 15:37:33,461 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2024-11-13 15:37:33,461 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 [2024-11-13 15:37:33,464 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2024-11-13 15:37:33,465 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (2)] Waiting until timeout for monitored process [2024-11-13 15:37:33,467 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2024-11-13 15:37:33,467 INFO L160 nArgumentSynthesizer]: Using integer mode. [2024-11-13 15:37:33,491 INFO L398 LassoAnalysis]: Proved nontermination for one component. [2024-11-13 15:37:33,491 INFO L401 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_isExecutiveFloor_#in~floorID#1=0} Honda state: {ULTIMATE.start_isExecutiveFloor_#in~floorID#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2024-11-13 15:37:33,516 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (2)] Ended with exit code 0 [2024-11-13 15:37:33,516 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2024-11-13 15:37:33,517 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 [2024-11-13 15:37:33,520 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2024-11-13 15:37:33,525 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2024-11-13 15:37:33,525 INFO L160 nArgumentSynthesizer]: Using integer mode. [2024-11-13 15:37:33,528 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (3)] Waiting until timeout for monitored process [2024-11-13 15:37:33,545 INFO L398 LassoAnalysis]: Proved nontermination for one component. [2024-11-13 15:37:33,545 INFO L401 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_~tmp~19#1=0} Honda state: {ULTIMATE.start_stopRequestedInDirection_~tmp~19#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2024-11-13 15:37:33,563 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (3)] Ended with exit code 0 [2024-11-13 15:37:33,564 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2024-11-13 15:37:33,564 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 [2024-11-13 15:37:33,566 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2024-11-13 15:37:33,567 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (4)] Waiting until timeout for monitored process [2024-11-13 15:37:33,568 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2024-11-13 15:37:33,568 INFO L160 nArgumentSynthesizer]: Using integer mode. [2024-11-13 15:37:33,586 INFO L398 LassoAnalysis]: Proved nontermination for one component. [2024-11-13 15:37:33,586 INFO L401 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___8~2#1=0} Honda state: {ULTIMATE.start_timeShift_~tmp___8~2#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2024-11-13 15:37:33,605 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (4)] Ended with exit code 0 [2024-11-13 15:37:33,606 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2024-11-13 15:37:33,606 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 [2024-11-13 15:37:33,608 INFO L229 MonitoredProcess]: Starting monitored process 5 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2024-11-13 15:37:33,611 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (5)] Waiting until timeout for monitored process [2024-11-13 15:37:33,615 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2024-11-13 15:37:33,615 INFO L160 nArgumentSynthesizer]: Using integer mode. [2024-11-13 15:37:33,641 INFO L398 LassoAnalysis]: Proved nontermination for one component. [2024-11-13 15:37:33,641 INFO L401 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___7~2#1=0} Honda state: {ULTIMATE.start_timeShift_~tmp___7~2#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2024-11-13 15:37:33,659 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (5)] Ended with exit code 0 [2024-11-13 15:37:33,659 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2024-11-13 15:37:33,659 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 [2024-11-13 15:37:33,661 INFO L229 MonitoredProcess]: Starting monitored process 6 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2024-11-13 15:37:33,664 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (6)] Waiting until timeout for monitored process [2024-11-13 15:37:33,666 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2024-11-13 15:37:33,666 INFO L160 nArgumentSynthesizer]: Using integer mode. [2024-11-13 15:37:33,688 INFO L398 LassoAnalysis]: Proved nontermination for one component. [2024-11-13 15:37:33,688 INFO L401 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedAtCurrentFloor_#t~ret76#1=0} Honda state: {ULTIMATE.start_stopRequestedAtCurrentFloor_#t~ret76#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2024-11-13 15:37:33,701 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (6)] Ended with exit code 0 [2024-11-13 15:37:33,701 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2024-11-13 15:37:33,701 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 [2024-11-13 15:37:33,703 INFO L229 MonitoredProcess]: Starting monitored process 7 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2024-11-13 15:37:33,704 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (7)] Waiting until timeout for monitored process [2024-11-13 15:37:33,704 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2024-11-13 15:37:33,704 INFO L160 nArgumentSynthesizer]: Using integer mode. [2024-11-13 15:37:33,718 INFO L398 LassoAnalysis]: Proved nontermination for one component. [2024-11-13 15:37:33,718 INFO L401 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification14_spec__1_~tmp~2#1=0} Honda state: {ULTIMATE.start___utac_acc__Specification14_spec__1_~tmp~2#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2024-11-13 15:37:33,730 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (7)] Ended with exit code 0 [2024-11-13 15:37:33,730 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2024-11-13 15:37:33,730 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 [2024-11-13 15:37:33,732 INFO L229 MonitoredProcess]: Starting monitored process 8 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2024-11-13 15:37:33,733 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (8)] Waiting until timeout for monitored process [2024-11-13 15:37:33,733 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2024-11-13 15:37:33,733 INFO L160 nArgumentSynthesizer]: Using integer mode. [2024-11-13 15:37:33,748 INFO L398 LassoAnalysis]: Proved nontermination for one component. [2024-11-13 15:37:33,748 INFO L401 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_getCurrentFloorID_#res#1=0} Honda state: {ULTIMATE.start_getCurrentFloorID_#res#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2024-11-13 15:37:33,762 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (8)] Ended with exit code 0 [2024-11-13 15:37:33,762 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2024-11-13 15:37:33,762 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 [2024-11-13 15:37:33,764 INFO L229 MonitoredProcess]: Starting monitored process 9 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2024-11-13 15:37:33,765 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (9)] Waiting until timeout for monitored process [2024-11-13 15:37:33,766 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2024-11-13 15:37:33,766 INFO L160 nArgumentSynthesizer]: Using integer mode. [2024-11-13 15:37:33,780 INFO L398 LassoAnalysis]: Proved nontermination for one component. [2024-11-13 15:37:33,780 INFO L401 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_anyStopRequested_#t~ret55#1=0} Honda state: {ULTIMATE.start_anyStopRequested_#t~ret55#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2024-11-13 15:37:33,798 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (9)] Forceful destruction successful, exit code 0 [2024-11-13 15:37:33,799 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2024-11-13 15:37:33,799 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 [2024-11-13 15:37:33,801 INFO L229 MonitoredProcess]: Starting monitored process 10 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2024-11-13 15:37:33,802 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (10)] Waiting until timeout for monitored process [2024-11-13 15:37:33,805 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2024-11-13 15:37:33,805 INFO L160 nArgumentSynthesizer]: Using integer mode. [2024-11-13 15:37:33,825 INFO L398 LassoAnalysis]: Proved nontermination for one component. [2024-11-13 15:37:33,825 INFO L401 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification14_spec__1_#t~ret11#1=0} Honda state: {ULTIMATE.start___utac_acc__Specification14_spec__1_#t~ret11#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2024-11-13 15:37:33,844 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (10)] Forceful destruction successful, exit code 0 [2024-11-13 15:37:33,844 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2024-11-13 15:37:33,844 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 [2024-11-13 15:37:33,847 INFO L229 MonitoredProcess]: Starting monitored process 11 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2024-11-13 15:37:33,849 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (11)] Waiting until timeout for monitored process [2024-11-13 15:37:33,850 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2024-11-13 15:37:33,850 INFO L160 nArgumentSynthesizer]: Using integer mode. [2024-11-13 15:37:33,870 INFO L398 LassoAnalysis]: Proved nontermination for one component. [2024-11-13 15:37:33,870 INFO L401 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_anyStopRequested_#res#1=0} Honda state: {ULTIMATE.start_anyStopRequested_#res#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2024-11-13 15:37:33,890 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (11)] Ended with exit code 0 [2024-11-13 15:37:33,891 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2024-11-13 15:37:33,891 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 [2024-11-13 15:37:33,896 INFO L229 MonitoredProcess]: Starting monitored process 12 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2024-11-13 15:37:33,899 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (12)] Waiting until timeout for monitored process [2024-11-13 15:37:33,900 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2024-11-13 15:37:33,901 INFO L160 nArgumentSynthesizer]: Using integer mode. [2024-11-13 15:37:33,918 INFO L398 LassoAnalysis]: Proved nontermination for one component. [2024-11-13 15:37:33,919 INFO L401 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___4~2#1=0} Honda state: {ULTIMATE.start_timeShift_~tmp___4~2#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2024-11-13 15:37:33,937 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (12)] Ended with exit code 0 [2024-11-13 15:37:33,938 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2024-11-13 15:37:33,938 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 [2024-11-13 15:37:33,940 INFO L229 MonitoredProcess]: Starting monitored process 13 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2024-11-13 15:37:33,942 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (13)] Waiting until timeout for monitored process [2024-11-13 15:37:33,943 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2024-11-13 15:37:33,943 INFO L160 nArgumentSynthesizer]: Using integer mode. [2024-11-13 15:37:33,960 INFO L398 LassoAnalysis]: Proved nontermination for one component. [2024-11-13 15:37:33,960 INFO L401 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_cleanup_~tmp___0~3#1=0} Honda state: {ULTIMATE.start_cleanup_~tmp___0~3#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2024-11-13 15:37:33,979 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (13)] Ended with exit code 0 [2024-11-13 15:37:33,979 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2024-11-13 15:37:33,980 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 [2024-11-13 15:37:33,982 INFO L229 MonitoredProcess]: Starting monitored process 14 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2024-11-13 15:37:33,983 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (14)] Waiting until timeout for monitored process [2024-11-13 15:37:33,984 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2024-11-13 15:37:33,984 INFO L160 nArgumentSynthesizer]: Using integer mode. [2024-11-13 15:37:33,997 INFO L398 LassoAnalysis]: Proved nontermination for one component. [2024-11-13 15:37:33,997 INFO L401 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___2~5#1=0} Honda state: {ULTIMATE.start_timeShift_~tmp___2~5#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2024-11-13 15:37:34,009 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (14)] Ended with exit code 0 [2024-11-13 15:37:34,009 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2024-11-13 15:37:34,009 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 [2024-11-13 15:37:34,011 INFO L229 MonitoredProcess]: Starting monitored process 15 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2024-11-13 15:37:34,012 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (15)] Waiting until timeout for monitored process [2024-11-13 15:37:34,012 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2024-11-13 15:37:34,012 INFO L160 nArgumentSynthesizer]: Using integer mode. [2024-11-13 15:37:34,025 INFO L398 LassoAnalysis]: Proved nontermination for one component. [2024-11-13 15:37:34,025 INFO L401 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_isExecutiveFloorCalling_#t~ret129#1=0} Honda state: {ULTIMATE.start_isExecutiveFloorCalling_#t~ret129#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2024-11-13 15:37:34,038 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (15)] Ended with exit code 0 [2024-11-13 15:37:34,038 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2024-11-13 15:37:34,038 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 [2024-11-13 15:37:34,040 INFO L229 MonitoredProcess]: Starting monitored process 16 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2024-11-13 15:37:34,041 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (16)] Waiting until timeout for monitored process [2024-11-13 15:37:34,041 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2024-11-13 15:37:34,041 INFO L160 nArgumentSynthesizer]: Using integer mode. [2024-11-13 15:37:34,054 INFO L398 LassoAnalysis]: Proved nontermination for one component. [2024-11-13 15:37:34,054 INFO L401 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification14_spec__1_#t~ret12#1=0} Honda state: {ULTIMATE.start___utac_acc__Specification14_spec__1_#t~ret12#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2024-11-13 15:37:34,066 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (16)] Ended with exit code 0 [2024-11-13 15:37:34,066 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2024-11-13 15:37:34,066 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 [2024-11-13 15:37:34,068 INFO L229 MonitoredProcess]: Starting monitored process 17 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2024-11-13 15:37:34,069 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (17)] Waiting until timeout for monitored process [2024-11-13 15:37:34,070 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2024-11-13 15:37:34,070 INFO L160 nArgumentSynthesizer]: Using integer mode. [2024-11-13 15:37:34,082 INFO L398 LassoAnalysis]: Proved nontermination for one component. [2024-11-13 15:37:34,082 INFO L401 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedAtCurrentFloor_~retValue_acc~25#1=0} Honda state: {ULTIMATE.start_stopRequestedAtCurrentFloor_~retValue_acc~25#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2024-11-13 15:37:34,097 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (17)] Forceful destruction successful, exit code 0 [2024-11-13 15:37:34,097 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2024-11-13 15:37:34,097 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 [2024-11-13 15:37:34,099 INFO L229 MonitoredProcess]: Starting monitored process 18 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2024-11-13 15:37:34,100 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (18)] Waiting until timeout for monitored process [2024-11-13 15:37:34,100 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2024-11-13 15:37:34,100 INFO L160 nArgumentSynthesizer]: Using integer mode. [2024-11-13 15:37:34,112 INFO L398 LassoAnalysis]: Proved nontermination for one component. [2024-11-13 15:37:34,113 INFO L401 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_#in~respectInLiftCalls#1=0} Honda state: {ULTIMATE.start_stopRequestedInDirection_#in~respectInLiftCalls#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2024-11-13 15:37:34,124 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (18)] Ended with exit code 0 [2024-11-13 15:37:34,124 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2024-11-13 15:37:34,124 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 [2024-11-13 15:37:34,126 INFO L229 MonitoredProcess]: Starting monitored process 19 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2024-11-13 15:37:34,127 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (19)] Waiting until timeout for monitored process [2024-11-13 15:37:34,128 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2024-11-13 15:37:34,128 INFO L160 nArgumentSynthesizer]: Using integer mode. [2024-11-13 15:37:34,140 INFO L398 LassoAnalysis]: Proved nontermination for one component. [2024-11-13 15:37:34,140 INFO L401 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification14_spec__1_~tmp___2~0#1=0} Honda state: {ULTIMATE.start___utac_acc__Specification14_spec__1_~tmp___2~0#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2024-11-13 15:37:34,153 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (19)] Ended with exit code 0 [2024-11-13 15:37:34,153 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2024-11-13 15:37:34,153 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 [2024-11-13 15:37:34,155 INFO L229 MonitoredProcess]: Starting monitored process 20 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2024-11-13 15:37:34,156 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (20)] Waiting until timeout for monitored process [2024-11-13 15:37:34,157 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2024-11-13 15:37:34,157 INFO L160 nArgumentSynthesizer]: Using integer mode. [2024-11-13 15:37:34,181 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (20)] Forceful destruction successful, exit code 0 [2024-11-13 15:37:34,182 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2024-11-13 15:37:34,182 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 [2024-11-13 15:37:34,183 INFO L229 MonitoredProcess]: Starting monitored process 21 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2024-11-13 15:37:34,184 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (21)] Waiting until timeout for monitored process [2024-11-13 15:37:34,185 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 3 Nilpotent components: true [2024-11-13 15:37:34,185 INFO L160 nArgumentSynthesizer]: Using integer mode. [2024-11-13 15:37:34,200 INFO L405 LassoAnalysis]: Proving nontermination failed: No geometric nontermination argument exists. [2024-11-13 15:37:34,218 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (21)] Ended with exit code 0 [2024-11-13 15:37:34,218 INFO L204 LassoAnalysis]: Preferences: [2024-11-13 15:37:34,218 INFO L125 ssoRankerPreferences]: Compute integeral hull: false [2024-11-13 15:37:34,218 INFO L126 ssoRankerPreferences]: Enable LassoPartitioneer: true [2024-11-13 15:37:34,218 INFO L127 ssoRankerPreferences]: Term annotations enabled: false [2024-11-13 15:37:34,218 INFO L128 ssoRankerPreferences]: Use exernal solver: false [2024-11-13 15:37:34,219 INFO L129 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2024-11-13 15:37:34,219 INFO L130 ssoRankerPreferences]: Dump SMT script to file: false [2024-11-13 15:37:34,219 INFO L131 ssoRankerPreferences]: Path of dumped script: [2024-11-13 15:37:34,219 INFO L132 ssoRankerPreferences]: Filename of dumped script: elevator_spec14_product11.cil.c_Iteration4_Loop [2024-11-13 15:37:34,219 INFO L133 ssoRankerPreferences]: MapElimAlgo: Frank [2024-11-13 15:37:34,219 INFO L241 LassoAnalysis]: Starting lasso preprocessing... [2024-11-13 15:37:34,222 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:34,225 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:34,228 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:34,230 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:34,233 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:34,235 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:34,238 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:34,240 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:34,243 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:34,245 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:34,247 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:34,250 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:34,252 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:34,255 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:34,257 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:34,260 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:34,262 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:34,265 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:34,267 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:34,269 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:34,272 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:34,274 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:34,276 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:34,279 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:34,281 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:34,283 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:34,289 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:34,291 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:34,294 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:34,296 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:34,300 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:34,302 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:34,304 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:34,307 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:34,309 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:34,311 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:34,317 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:34,319 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:34,322 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:34,324 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:34,327 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:34,329 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:34,332 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:34,335 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:34,337 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:34,339 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:34,341 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:34,344 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:34,346 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:34,349 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:34,351 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:34,354 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:34,356 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:34,359 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:34,361 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:34,364 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:34,366 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:34,369 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:34,371 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:34,373 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:34,376 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:34,378 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:34,381 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:34,383 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:34,385 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:34,388 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:34,390 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:34,393 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:34,396 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:34,398 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:34,404 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:34,406 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:34,409 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:34,411 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:34,413 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:34,416 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:34,418 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:34,420 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:34,423 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:34,425 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:34,427 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:34,430 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:34,433 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:34,435 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:34,438 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:34,441 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:34,444 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:34,446 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:34,449 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:34,451 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:34,453 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:34,456 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:34,458 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:34,461 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:34,463 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:34,466 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:34,468 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:34,471 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:34,473 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 15:37:34,832 INFO L259 LassoAnalysis]: Preprocessing complete. [2024-11-13 15:37:34,836 INFO L451 LassoAnalysis]: Using template 'affine'. [2024-11-13 15:37:34,837 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2024-11-13 15:37:34,838 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 [2024-11-13 15:37:34,840 INFO L229 MonitoredProcess]: Starting monitored process 22 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2024-11-13 15:37:34,848 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2024-11-13 15:37:34,852 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (22)] Waiting until timeout for monitored process [2024-11-13 15:37:34,865 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2024-11-13 15:37:34,866 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2024-11-13 15:37:34,867 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2024-11-13 15:37:34,867 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2024-11-13 15:37:34,868 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2024-11-13 15:37:34,874 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2024-11-13 15:37:34,875 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2024-11-13 15:37:34,878 INFO L488 LassoAnalysis]: Proving termination failed for this template and these settings. [2024-11-13 15:37:34,896 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (22)] Ended with exit code 0 [2024-11-13 15:37:34,896 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2024-11-13 15:37:34,896 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 [2024-11-13 15:37:34,898 INFO L229 MonitoredProcess]: Starting monitored process 23 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2024-11-13 15:37:34,900 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (23)] Waiting until timeout for monitored process [2024-11-13 15:37:34,901 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2024-11-13 15:37:34,916 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2024-11-13 15:37:34,917 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2024-11-13 15:37:34,917 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2024-11-13 15:37:34,917 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2024-11-13 15:37:34,917 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2024-11-13 15:37:34,918 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2024-11-13 15:37:34,918 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2024-11-13 15:37:34,922 INFO L488 LassoAnalysis]: Proving termination failed for this template and these settings. [2024-11-13 15:37:34,941 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (23)] Ended with exit code 0 [2024-11-13 15:37:34,941 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2024-11-13 15:37:34,942 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 [2024-11-13 15:37:34,944 INFO L229 MonitoredProcess]: Starting monitored process 24 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2024-11-13 15:37:34,950 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (24)] Waiting until timeout for monitored process [2024-11-13 15:37:34,951 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2024-11-13 15:37:34,966 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2024-11-13 15:37:34,967 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2024-11-13 15:37:34,967 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2024-11-13 15:37:34,967 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2024-11-13 15:37:34,967 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2024-11-13 15:37:34,967 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2024-11-13 15:37:34,967 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2024-11-13 15:37:34,972 INFO L488 LassoAnalysis]: Proving termination failed for this template and these settings. [2024-11-13 15:37:34,992 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (24)] Forceful destruction successful, exit code 0 [2024-11-13 15:37:34,992 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2024-11-13 15:37:34,992 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 [2024-11-13 15:37:34,994 INFO L229 MonitoredProcess]: Starting monitored process 25 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2024-11-13 15:37:34,996 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (25)] Waiting until timeout for monitored process [2024-11-13 15:37:34,997 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2024-11-13 15:37:35,013 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2024-11-13 15:37:35,013 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2024-11-13 15:37:35,013 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2024-11-13 15:37:35,013 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2024-11-13 15:37:35,013 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2024-11-13 15:37:35,014 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2024-11-13 15:37:35,014 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2024-11-13 15:37:35,018 INFO L488 LassoAnalysis]: Proving termination failed for this template and these settings. [2024-11-13 15:37:35,038 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (25)] Forceful destruction successful, exit code 0 [2024-11-13 15:37:35,038 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2024-11-13 15:37:35,038 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 [2024-11-13 15:37:35,041 INFO L229 MonitoredProcess]: Starting monitored process 26 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2024-11-13 15:37:35,044 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (26)] Waiting until timeout for monitored process [2024-11-13 15:37:35,045 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2024-11-13 15:37:35,061 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2024-11-13 15:37:35,061 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2024-11-13 15:37:35,061 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2024-11-13 15:37:35,061 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2024-11-13 15:37:35,061 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2024-11-13 15:37:35,062 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2024-11-13 15:37:35,062 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2024-11-13 15:37:35,064 INFO L488 LassoAnalysis]: Proving termination failed for this template and these settings. [2024-11-13 15:37:35,082 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (26)] Forceful destruction successful, exit code 0 [2024-11-13 15:37:35,083 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2024-11-13 15:37:35,083 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 [2024-11-13 15:37:35,085 INFO L229 MonitoredProcess]: Starting monitored process 27 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2024-11-13 15:37:35,087 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (27)] Waiting until timeout for monitored process [2024-11-13 15:37:35,088 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2024-11-13 15:37:35,103 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2024-11-13 15:37:35,103 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2024-11-13 15:37:35,104 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2024-11-13 15:37:35,104 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2024-11-13 15:37:35,104 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2024-11-13 15:37:35,104 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2024-11-13 15:37:35,104 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2024-11-13 15:37:35,107 INFO L488 LassoAnalysis]: Proving termination failed for this template and these settings. [2024-11-13 15:37:35,126 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (27)] Ended with exit code 0 [2024-11-13 15:37:35,127 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2024-11-13 15:37:35,127 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 [2024-11-13 15:37:35,129 INFO L229 MonitoredProcess]: Starting monitored process 28 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2024-11-13 15:37:35,131 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (28)] Waiting until timeout for monitored process [2024-11-13 15:37:35,132 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2024-11-13 15:37:35,148 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2024-11-13 15:37:35,149 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2024-11-13 15:37:35,149 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2024-11-13 15:37:35,149 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2024-11-13 15:37:35,149 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2024-11-13 15:37:35,150 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2024-11-13 15:37:35,150 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2024-11-13 15:37:35,153 INFO L488 LassoAnalysis]: Proving termination failed for this template and these settings. [2024-11-13 15:37:35,172 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (28)] Ended with exit code 0 [2024-11-13 15:37:35,173 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2024-11-13 15:37:35,173 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 [2024-11-13 15:37:35,175 INFO L229 MonitoredProcess]: Starting monitored process 29 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2024-11-13 15:37:35,177 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (29)] Waiting until timeout for monitored process [2024-11-13 15:37:35,179 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2024-11-13 15:37:35,194 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2024-11-13 15:37:35,194 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2024-11-13 15:37:35,195 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2024-11-13 15:37:35,195 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2024-11-13 15:37:35,195 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2024-11-13 15:37:35,196 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2024-11-13 15:37:35,196 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2024-11-13 15:37:35,200 INFO L488 LassoAnalysis]: Proving termination failed for this template and these settings. [2024-11-13 15:37:35,219 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (29)] Ended with exit code 0 [2024-11-13 15:37:35,220 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2024-11-13 15:37:35,220 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 [2024-11-13 15:37:35,222 INFO L229 MonitoredProcess]: Starting monitored process 30 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2024-11-13 15:37:35,223 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (30)] Waiting until timeout for monitored process [2024-11-13 15:37:35,226 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2024-11-13 15:37:35,242 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2024-11-13 15:37:35,242 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2024-11-13 15:37:35,242 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2024-11-13 15:37:35,242 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2024-11-13 15:37:35,242 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2024-11-13 15:37:35,243 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2024-11-13 15:37:35,244 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2024-11-13 15:37:35,245 INFO L488 LassoAnalysis]: Proving termination failed for this template and these settings. [2024-11-13 15:37:35,264 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (30)] Forceful destruction successful, exit code 0 [2024-11-13 15:37:35,265 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2024-11-13 15:37:35,265 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 [2024-11-13 15:37:35,267 INFO L229 MonitoredProcess]: Starting monitored process 31 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2024-11-13 15:37:35,315 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (31)] Waiting until timeout for monitored process [2024-11-13 15:37:35,316 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2024-11-13 15:37:35,332 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2024-11-13 15:37:35,332 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2024-11-13 15:37:35,332 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2024-11-13 15:37:35,332 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2024-11-13 15:37:35,332 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2024-11-13 15:37:35,333 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2024-11-13 15:37:35,333 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2024-11-13 15:37:35,336 INFO L488 LassoAnalysis]: Proving termination failed for this template and these settings. [2024-11-13 15:37:35,354 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (31)] Forceful destruction successful, exit code 0 [2024-11-13 15:37:35,354 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2024-11-13 15:37:35,355 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 [2024-11-13 15:37:35,357 INFO L229 MonitoredProcess]: Starting monitored process 32 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2024-11-13 15:37:35,359 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (32)] Waiting until timeout for monitored process [2024-11-13 15:37:35,360 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2024-11-13 15:37:35,374 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2024-11-13 15:37:35,375 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2024-11-13 15:37:35,375 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2024-11-13 15:37:35,375 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2024-11-13 15:37:35,375 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2024-11-13 15:37:35,375 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2024-11-13 15:37:35,375 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2024-11-13 15:37:35,380 INFO L488 LassoAnalysis]: Proving termination failed for this template and these settings. [2024-11-13 15:37:35,392 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (32)] Ended with exit code 0 [2024-11-13 15:37:35,392 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2024-11-13 15:37:35,392 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 [2024-11-13 15:37:35,394 INFO L229 MonitoredProcess]: Starting monitored process 33 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2024-11-13 15:37:35,395 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (33)] Waiting until timeout for monitored process [2024-11-13 15:37:35,396 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2024-11-13 15:37:35,411 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2024-11-13 15:37:35,411 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2024-11-13 15:37:35,411 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2024-11-13 15:37:35,411 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2024-11-13 15:37:35,411 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2024-11-13 15:37:35,412 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2024-11-13 15:37:35,412 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2024-11-13 15:37:35,415 INFO L488 LassoAnalysis]: Proving termination failed for this template and these settings. [2024-11-13 15:37:35,433 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (33)] Ended with exit code 0 [2024-11-13 15:37:35,433 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2024-11-13 15:37:35,434 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 [2024-11-13 15:37:35,436 INFO L229 MonitoredProcess]: Starting monitored process 34 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2024-11-13 15:37:35,439 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2024-11-13 15:37:35,441 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (34)] Waiting until timeout for monitored process [2024-11-13 15:37:35,455 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2024-11-13 15:37:35,455 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2024-11-13 15:37:35,455 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2024-11-13 15:37:35,455 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2024-11-13 15:37:35,455 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2024-11-13 15:37:35,456 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2024-11-13 15:37:35,457 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2024-11-13 15:37:35,458 INFO L488 LassoAnalysis]: Proving termination failed for this template and these settings. [2024-11-13 15:37:35,476 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (34)] Forceful destruction successful, exit code 0 [2024-11-13 15:37:35,476 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2024-11-13 15:37:35,477 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 [2024-11-13 15:37:35,478 INFO L229 MonitoredProcess]: Starting monitored process 35 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2024-11-13 15:37:35,480 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (35)] Waiting until timeout for monitored process [2024-11-13 15:37:35,481 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2024-11-13 15:37:35,496 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2024-11-13 15:37:35,496 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2024-11-13 15:37:35,496 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2024-11-13 15:37:35,497 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2024-11-13 15:37:35,497 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2024-11-13 15:37:35,497 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2024-11-13 15:37:35,497 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2024-11-13 15:37:35,501 INFO L488 LassoAnalysis]: Proving termination failed for this template and these settings. [2024-11-13 15:37:35,514 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (35)] Ended with exit code 0 [2024-11-13 15:37:35,514 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2024-11-13 15:37:35,514 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 [2024-11-13 15:37:35,516 INFO L229 MonitoredProcess]: Starting monitored process 36 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2024-11-13 15:37:35,517 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (36)] Waiting until timeout for monitored process [2024-11-13 15:37:35,518 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2024-11-13 15:37:35,529 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2024-11-13 15:37:35,530 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2024-11-13 15:37:35,530 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2024-11-13 15:37:35,530 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2024-11-13 15:37:35,530 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2024-11-13 15:37:35,530 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2024-11-13 15:37:35,530 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2024-11-13 15:37:35,534 INFO L488 LassoAnalysis]: Proving termination failed for this template and these settings. [2024-11-13 15:37:35,546 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (36)] Ended with exit code 0 [2024-11-13 15:37:35,547 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2024-11-13 15:37:35,547 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 [2024-11-13 15:37:35,548 INFO L229 MonitoredProcess]: Starting monitored process 37 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2024-11-13 15:37:35,549 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (37)] Waiting until timeout for monitored process [2024-11-13 15:37:35,550 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2024-11-13 15:37:35,562 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2024-11-13 15:37:35,562 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2024-11-13 15:37:35,562 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2024-11-13 15:37:35,562 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2024-11-13 15:37:35,562 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2024-11-13 15:37:35,562 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2024-11-13 15:37:35,562 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2024-11-13 15:37:35,564 INFO L488 LassoAnalysis]: Proving termination failed for this template and these settings. [2024-11-13 15:37:35,581 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (37)] Ended with exit code 0 [2024-11-13 15:37:35,581 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2024-11-13 15:37:35,581 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 [2024-11-13 15:37:35,582 INFO L229 MonitoredProcess]: Starting monitored process 38 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2024-11-13 15:37:35,584 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (38)] Waiting until timeout for monitored process [2024-11-13 15:37:35,584 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2024-11-13 15:37:35,596 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2024-11-13 15:37:35,597 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2024-11-13 15:37:35,597 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2024-11-13 15:37:35,597 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2024-11-13 15:37:35,597 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2024-11-13 15:37:35,597 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2024-11-13 15:37:35,597 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2024-11-13 15:37:35,599 INFO L488 LassoAnalysis]: Proving termination failed for this template and these settings. [2024-11-13 15:37:35,612 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (38)] Ended with exit code 0 [2024-11-13 15:37:35,612 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2024-11-13 15:37:35,612 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 [2024-11-13 15:37:35,614 INFO L229 MonitoredProcess]: Starting monitored process 39 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2024-11-13 15:37:35,616 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (39)] Waiting until timeout for monitored process [2024-11-13 15:37:35,617 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2024-11-13 15:37:35,629 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2024-11-13 15:37:35,629 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2024-11-13 15:37:35,629 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2024-11-13 15:37:35,629 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2024-11-13 15:37:35,629 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2024-11-13 15:37:35,630 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2024-11-13 15:37:35,630 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2024-11-13 15:37:35,633 INFO L488 LassoAnalysis]: Proving termination failed for this template and these settings. [2024-11-13 15:37:35,652 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (39)] Ended with exit code 0 [2024-11-13 15:37:35,653 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2024-11-13 15:37:35,653 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 [2024-11-13 15:37:35,655 INFO L229 MonitoredProcess]: Starting monitored process 40 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2024-11-13 15:37:35,657 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (40)] Waiting until timeout for monitored process [2024-11-13 15:37:35,659 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2024-11-13 15:37:35,675 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2024-11-13 15:37:35,675 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2024-11-13 15:37:35,675 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2024-11-13 15:37:35,675 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2024-11-13 15:37:35,675 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2024-11-13 15:37:35,677 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2024-11-13 15:37:35,677 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2024-11-13 15:37:35,681 INFO L488 LassoAnalysis]: Proving termination failed for this template and these settings. [2024-11-13 15:37:35,696 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (40)] Forceful destruction successful, exit code 0 [2024-11-13 15:37:35,696 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2024-11-13 15:37:35,696 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 [2024-11-13 15:37:35,697 INFO L229 MonitoredProcess]: Starting monitored process 41 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2024-11-13 15:37:35,699 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (41)] Waiting until timeout for monitored process [2024-11-13 15:37:35,699 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2024-11-13 15:37:35,711 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2024-11-13 15:37:35,711 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2024-11-13 15:37:35,711 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2024-11-13 15:37:35,711 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2024-11-13 15:37:35,711 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2024-11-13 15:37:35,712 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2024-11-13 15:37:35,712 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2024-11-13 15:37:35,713 INFO L488 LassoAnalysis]: Proving termination failed for this template and these settings. [2024-11-13 15:37:35,725 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (41)] Ended with exit code 0 [2024-11-13 15:37:35,725 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2024-11-13 15:37:35,725 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 [2024-11-13 15:37:35,727 INFO L229 MonitoredProcess]: Starting monitored process 42 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2024-11-13 15:37:35,728 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (42)] Waiting until timeout for monitored process [2024-11-13 15:37:35,729 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2024-11-13 15:37:35,741 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2024-11-13 15:37:35,741 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2024-11-13 15:37:35,741 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2024-11-13 15:37:35,741 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2024-11-13 15:37:35,741 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2024-11-13 15:37:35,741 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2024-11-13 15:37:35,741 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2024-11-13 15:37:35,745 INFO L488 LassoAnalysis]: Proving termination failed for this template and these settings. [2024-11-13 15:37:35,763 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (42)] Ended with exit code 0 [2024-11-13 15:37:35,764 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2024-11-13 15:37:35,764 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 [2024-11-13 15:37:35,766 INFO L229 MonitoredProcess]: Starting monitored process 43 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2024-11-13 15:37:35,770 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2024-11-13 15:37:35,774 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (43)] Waiting until timeout for monitored process [2024-11-13 15:37:35,786 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2024-11-13 15:37:35,786 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2024-11-13 15:37:35,786 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2024-11-13 15:37:35,786 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2024-11-13 15:37:35,786 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2024-11-13 15:37:35,787 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2024-11-13 15:37:35,787 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2024-11-13 15:37:35,790 INFO L488 LassoAnalysis]: Proving termination failed for this template and these settings. [2024-11-13 15:37:35,804 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (43)] Ended with exit code 0 [2024-11-13 15:37:35,804 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2024-11-13 15:37:35,804 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 [2024-11-13 15:37:35,806 INFO L229 MonitoredProcess]: Starting monitored process 44 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2024-11-13 15:37:35,809 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (44)] Waiting until timeout for monitored process [2024-11-13 15:37:35,809 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2024-11-13 15:37:35,824 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2024-11-13 15:37:35,824 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2024-11-13 15:37:35,825 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2024-11-13 15:37:35,825 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2024-11-13 15:37:35,825 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2024-11-13 15:37:35,825 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2024-11-13 15:37:35,825 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2024-11-13 15:37:35,827 INFO L488 LassoAnalysis]: Proving termination failed for this template and these settings. [2024-11-13 15:37:35,843 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (44)] Ended with exit code 0 [2024-11-13 15:37:35,843 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2024-11-13 15:37:35,843 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 [2024-11-13 15:37:35,845 INFO L229 MonitoredProcess]: Starting monitored process 45 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2024-11-13 15:37:35,846 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (45)] Waiting until timeout for monitored process [2024-11-13 15:37:35,847 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2024-11-13 15:37:35,859 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2024-11-13 15:37:35,859 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2024-11-13 15:37:35,859 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2024-11-13 15:37:35,859 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2024-11-13 15:37:35,859 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2024-11-13 15:37:35,859 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2024-11-13 15:37:35,860 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2024-11-13 15:37:35,861 INFO L488 LassoAnalysis]: Proving termination failed for this template and these settings. [2024-11-13 15:37:35,873 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (45)] Ended with exit code 0 [2024-11-13 15:37:35,873 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2024-11-13 15:37:35,873 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 [2024-11-13 15:37:35,875 INFO L229 MonitoredProcess]: Starting monitored process 46 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2024-11-13 15:37:35,876 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (46)] Waiting until timeout for monitored process [2024-11-13 15:37:35,876 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2024-11-13 15:37:35,888 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2024-11-13 15:37:35,888 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2024-11-13 15:37:35,888 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2024-11-13 15:37:35,888 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2024-11-13 15:37:35,888 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2024-11-13 15:37:35,889 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2024-11-13 15:37:35,889 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2024-11-13 15:37:35,890 INFO L488 LassoAnalysis]: Proving termination failed for this template and these settings. [2024-11-13 15:37:35,902 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (46)] Ended with exit code 0 [2024-11-13 15:37:35,903 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2024-11-13 15:37:35,903 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 [2024-11-13 15:37:35,904 INFO L229 MonitoredProcess]: Starting monitored process 47 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2024-11-13 15:37:35,905 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (47)] Waiting until timeout for monitored process [2024-11-13 15:37:35,906 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2024-11-13 15:37:35,921 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2024-11-13 15:37:35,921 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2024-11-13 15:37:35,922 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2024-11-13 15:37:35,922 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2024-11-13 15:37:35,922 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2024-11-13 15:37:35,923 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2024-11-13 15:37:35,923 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2024-11-13 15:37:35,925 INFO L420 nArgumentSynthesizer]: Found a termination argument, trying to simplify. [2024-11-13 15:37:35,930 INFO L443 ModelExtractionUtils]: Simplification made 3 calls to the SMT solver. [2024-11-13 15:37:35,933 INFO L444 ModelExtractionUtils]: 0 out of 3 variables were initially zero. Simplification set additionally 1 variables to zero. [2024-11-13 15:37:35,935 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2024-11-13 15:37:35,935 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 [2024-11-13 15:37:35,941 INFO L229 MonitoredProcess]: Starting monitored process 48 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2024-11-13 15:37:35,945 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (48)] Waiting until timeout for monitored process [2024-11-13 15:37:35,946 INFO L435 nArgumentSynthesizer]: Simplifying supporting invariants... [2024-11-13 15:37:35,946 INFO L438 nArgumentSynthesizer]: Removed 0 redundant supporting invariants from a total of 0. [2024-11-13 15:37:35,946 INFO L474 LassoAnalysis]: Proved termination. [2024-11-13 15:37:35,947 INFO L476 LassoAnalysis]: Termination argument consisting of: Ranking function f(~currentFloorID~0) = 1*~currentFloorID~0 Supporting invariants [] [2024-11-13 15:37:35,967 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (47)] Ended with exit code 0 [2024-11-13 15:37:35,969 INFO L156 tatePredicateManager]: 0 out of 0 supporting invariants were superfluous and have been removed [2024-11-13 15:37:35,992 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-13 15:37:36,255 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-13 15:37:36,260 INFO L255 TraceCheckSpWp]: Trace formula consists of 984 conjuncts, 2 conjuncts are in the unsatisfiable core [2024-11-13 15:37:36,267 INFO L278 TraceCheckSpWp]: Computing forward predicates... [2024-11-13 15:37:36,590 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-13 15:37:36,592 INFO L255 TraceCheckSpWp]: Trace formula consists of 171 conjuncts, 18 conjuncts are in the unsatisfiable core [2024-11-13 15:37:36,594 INFO L278 TraceCheckSpWp]: Computing forward predicates... [2024-11-13 15:37:37,026 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-13 15:37:37,035 INFO L141 lantAutomatonBouncer]: Defining deterministic Buchi interpolant automaton with honda bouncer for stem and without honda bouncer for loop.1 stem predicates 8 loop predicates [2024-11-13 15:37:37,037 INFO L71 iDifferenceNCSBLazy3]: Start buchiDifferenceNCSBLazy3. First operand 33248 states and 61935 transitions. cyclomatic complexity: 28692 Second operand has 10 states, 10 states have (on average 19.0) internal successors, (190), 10 states have internal predecessors, (190), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-13 15:37:39,011 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (48)] Ended with exit code 0 [2024-11-13 15:37:41,790 INFO L75 iDifferenceNCSBLazy3]: Finished buchiDifferenceNCSBLazy3. First operand 33248 states and 61935 transitions. cyclomatic complexity: 28692. Second operand has 10 states, 10 states have (on average 19.0) internal successors, (190), 10 states have internal predecessors, (190), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Result 66272 states and 123211 transitions. Complement of second has 21 states. [2024-11-13 15:37:41,793 INFO L141 InterpolantAutomaton]: Switched to read-only mode: Buchi interpolant automaton has 11 states 1 stem states 9 non-accepting loop states 1 accepting loop states [2024-11-13 15:37:41,794 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 10 states, 10 states have (on average 19.0) internal successors, (190), 10 states have internal predecessors, (190), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-13 15:37:41,931 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 11 states to 11 states and 15136 transitions. [2024-11-13 15:37:41,936 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 11 states and 15136 transitions. Stem has 147 letters. Loop has 43 letters. [2024-11-13 15:37:41,938 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2024-11-13 15:37:41,938 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 11 states and 15136 transitions. Stem has 190 letters. Loop has 43 letters. [2024-11-13 15:37:41,939 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2024-11-13 15:37:41,939 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 11 states and 15136 transitions. Stem has 147 letters. Loop has 86 letters. [2024-11-13 15:37:41,941 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2024-11-13 15:37:41,941 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 66272 states and 123211 transitions. [2024-11-13 15:37:42,309 INFO L131 ngComponentsAnalysis]: Automaton has 13 accepting balls. 22187 [2024-11-13 15:37:42,577 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 66272 states to 66272 states and 123211 transitions. [2024-11-13 15:37:42,577 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 49482 [2024-11-13 15:37:42,632 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 49836 [2024-11-13 15:37:42,632 INFO L73 IsDeterministic]: Start isDeterministic. Operand 66272 states and 123211 transitions. [2024-11-13 15:37:42,659 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2024-11-13 15:37:42,659 INFO L218 hiAutomatonCegarLoop]: Abstraction has 66272 states and 123211 transitions. [2024-11-13 15:37:42,706 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 66272 states and 123211 transitions. [2024-11-13 15:37:43,614 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 66272 to 64656. [2024-11-13 15:37:43,695 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 64656 states, 64656 states have (on average 1.8620700321702548) internal successors, (120394), 64655 states have internal predecessors, (120394), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-13 15:37:43,842 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 64656 states to 64656 states and 120394 transitions. [2024-11-13 15:37:43,842 INFO L240 hiAutomatonCegarLoop]: Abstraction has 64656 states and 120394 transitions. [2024-11-13 15:37:43,843 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-13 15:37:43,843 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-11-13 15:37:43,843 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-11-13 15:37:43,843 INFO L87 Difference]: Start difference. First operand 64656 states and 120394 transitions. Second operand has 3 states, 3 states have (on average 49.0) internal successors, (147), 3 states have internal predecessors, (147), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-13 15:37:44,612 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-13 15:37:44,612 INFO L93 Difference]: Finished difference Result 64656 states and 120388 transitions. [2024-11-13 15:37:44,612 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 64656 states and 120388 transitions. [2024-11-13 15:37:44,987 INFO L131 ngComponentsAnalysis]: Automaton has 12 accepting balls. 21209 [2024-11-13 15:37:45,389 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 64656 states to 64656 states and 120388 transitions. [2024-11-13 15:37:45,390 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 48364 [2024-11-13 15:37:45,739 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 48364 [2024-11-13 15:37:45,740 INFO L73 IsDeterministic]: Start isDeterministic. Operand 64656 states and 120388 transitions. [2024-11-13 15:37:45,758 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2024-11-13 15:37:45,758 INFO L218 hiAutomatonCegarLoop]: Abstraction has 64656 states and 120388 transitions. [2024-11-13 15:37:45,797 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 64656 states and 120388 transitions. [2024-11-13 15:37:46,703 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 64656 to 64656. [2024-11-13 15:37:46,754 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 64656 states, 64656 states have (on average 1.8619772333580797) internal successors, (120388), 64655 states have internal predecessors, (120388), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-13 15:37:46,898 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 64656 states to 64656 states and 120388 transitions. [2024-11-13 15:37:46,898 INFO L240 hiAutomatonCegarLoop]: Abstraction has 64656 states and 120388 transitions. [2024-11-13 15:37:46,898 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2024-11-13 15:37:46,901 INFO L424 stractBuchiCegarLoop]: Abstraction has 64656 states and 120388 transitions. [2024-11-13 15:37:46,901 INFO L331 stractBuchiCegarLoop]: ======== Iteration 5 ============ [2024-11-13 15:37:46,901 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 64656 states and 120388 transitions. [2024-11-13 15:37:47,082 INFO L131 ngComponentsAnalysis]: Automaton has 12 accepting balls. 21209 [2024-11-13 15:37:47,082 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-13 15:37:47,082 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-13 15:37:47,088 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-13 15:37:47,089 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-13 15:37:47,089 INFO L745 eck$LassoCheckResult]: Stem: 371612#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 371613#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret28#1, main_~retValue_acc~6#1, main_~tmp~11#1;havoc main_~retValue_acc~6#1;havoc main_~tmp~11#1;assume { :begin_inline_select_helpers } true; 377827#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 377388#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; 373191#valid_product_returnLabel#1 main_#t~ret28#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;assume { :end_inline_valid_product } true;main_~tmp~11#1 := main_#t~ret28#1;havoc main_#t~ret28#1; 373192#L692 assume 0 != main_~tmp~11#1;assume { :begin_inline_setup } true; 373406#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret21#1, bigMacCall_~tmp~8#1;havoc bigMacCall_~tmp~8#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 375148#L241 assume !(0 == getOrigin_~person#1); 377051#L245 assume !(1 == getOrigin_~person#1); 373700#L249 assume !(2 == getOrigin_~person#1); 373701#L253 assume !(3 == getOrigin_~person#1); 376055#L257 assume !(4 == getOrigin_~person#1); 377938#L261 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 376843#getOrigin_returnLabel#1 bigMacCall_#t~ret21#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~8#1 := bigMacCall_#t~ret21#1;havoc bigMacCall_#t~ret21#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~8#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 376844#L1431 assume 0 == initPersonOnFloor_~floor#1; 377632#L1432 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 371013#L1539-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 376697#L1223 assume !(0 == callOnFloor_~floorID#1); 371221#L1226 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 371222#L1235-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 373948#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 372461#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret21#1, bigMacCall_~tmp~8#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 372462#L1160 assume !(0 == isFloorCalling_~floorID#1); 373757#L1164 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 376080#isFloorCalling_returnLabel#1 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 394226#isExecutiveFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret76#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 394167#L2627 assume 0 != stopRequestedAtCurrentFloor_~tmp~22#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 377960#getCurrentFloorID_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret77#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret77#1;havoc stopRequestedAtCurrentFloor_#t~ret77#1; 376846#L2631 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 376600#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret92#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret92#1;havoc timeShift_#t~ret92#1; 393743#L2779 assume !(0 != timeShift_~tmp___9~2#1); 393742#L2870 assume !(1 == ~doorState~0); 393257#L2870-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 391859#L1160-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 374305#isFloorCalling_returnLabel#4 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 373894#isExecutiveFloorCalling_returnLabel#2 stopRequestedInDirection_#t~ret70#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1; 373895#L2510 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 376935#getCurrentFloorID_returnLabel#2 stopRequestedInDirection_#t~ret71#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~19#1 := stopRequestedInDirection_#t~ret71#1;havoc stopRequestedInDirection_#t~ret71#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~19#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 378188#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret99#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret99#1;havoc timeShift_#t~ret99#1; 394533#L2878 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1; 377173#L2567 assume !(1 == ~currentHeading~0); 377174#L2577 assume !(0 == ~currentFloorID~0); 373158#L2577-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 373159#L2583-1 havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 373321#L2887-2 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 377801#L1160-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 377941#isFloorCalling_returnLabel#26 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 374971#isExecutiveFloorCalling_returnLabel#4 __utac_acc__Specification14_spec__1_#t~ret11#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret11#1;havoc __utac_acc__Specification14_spec__1_#t~ret11#1; 374972#L330 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1); 370974#L330-1 havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :end_inline___utac_acc__Specification14_spec__1 } true; 370975#timeShift_returnLabel#1 havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 377762#L1160-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 377763#isFloorCalling_returnLabel#27 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 371455#isExecutiveFloorCalling_returnLabel#5 stopRequestedAtCurrentFloor_#t~ret76#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 371456#L2627-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret74#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret75#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~21#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~21#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 378007#L1160-28 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 371974#isFloorCalling_returnLabel#29 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret74#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret74#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret74#1; 374541#L2600-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1; 373271#stopRequestedAtCurrentFloor__wrappee__empty_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret79#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret74#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret75#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~21#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := stopRequestedAtCurrentFloor_#t~ret79#1;havoc stopRequestedAtCurrentFloor_#t~ret79#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 376115#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret92#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret92#1;havoc timeShift_#t~ret92#1; 374291#L2779-2 assume !(0 != timeShift_~tmp___9~2#1); 374292#L2870-3 assume 1 == ~doorState~0;~doorState~0 := 0; 390861#L2870-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 385044#L1160-29 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 385043#isFloorCalling_returnLabel#30 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 385042#isExecutiveFloorCalling_returnLabel#6 stopRequestedInDirection_#t~ret70#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1; 385041#L2510-2 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 385018#getCurrentFloorID_returnLabel#6 stopRequestedInDirection_#t~ret71#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~19#1 := stopRequestedInDirection_#t~ret71#1;havoc stopRequestedInDirection_#t~ret71#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~19#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 385016#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret99#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret99#1;havoc timeShift_#t~ret99#1; 385014#L2878-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1; 385012#L2567-3 assume !(1 == ~currentHeading~0); 385006#L2577-9 assume !(0 == ~currentFloorID~0); 385004#L2577-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 381941#L2583-7 havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 381940#L2887-5 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 381939#L1160-51 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 378708#isFloorCalling_returnLabel#52 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 381938#isExecutiveFloorCalling_returnLabel#8 __utac_acc__Specification14_spec__1_#t~ret11#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret11#1;havoc __utac_acc__Specification14_spec__1_#t~ret11#1; 381932#L330-2 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1); 381927#L330-3 havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :end_inline___utac_acc__Specification14_spec__1 } true; 381925#timeShift_returnLabel#2 havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 381924#L1160-52 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 378712#isFloorCalling_returnLabel#53 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 381922#isExecutiveFloorCalling_returnLabel#9 stopRequestedAtCurrentFloor_#t~ret76#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 381921#L2627-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret74#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret75#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~21#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~21#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 381914#L1160-54 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 381910#isFloorCalling_returnLabel#55 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret74#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret74#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret74#1; 381908#L2600-5 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1; 381905#stopRequestedAtCurrentFloor__wrappee__empty_returnLabel#6 stopRequestedAtCurrentFloor_#t~ret79#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret74#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret75#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~21#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := stopRequestedAtCurrentFloor_#t~ret79#1;havoc stopRequestedAtCurrentFloor_#t~ret79#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 381902#stopRequestedAtCurrentFloor_returnLabel#3 timeShift_#t~ret92#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret92#1;havoc timeShift_#t~ret92#1; 381900#L2779-4 assume !(0 != timeShift_~tmp___9~2#1); 381898#L2870-6 assume !(1 == ~doorState~0); 381897#L2870-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 381895#L1160-55 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 381892#isFloorCalling_returnLabel#56 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 381889#isExecutiveFloorCalling_returnLabel#10 stopRequestedInDirection_#t~ret70#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1; 381888#L2510-4 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 381853#getCurrentFloorID_returnLabel#10 stopRequestedInDirection_#t~ret71#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~19#1 := stopRequestedInDirection_#t~ret71#1;havoc stopRequestedInDirection_#t~ret71#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~19#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 381852#stopRequestedInDirection_returnLabel#5 timeShift_#t~ret99#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret99#1;havoc timeShift_#t~ret99#1; 381850#L2878-4 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1; 381545#L2567-6 assume !(1 == ~currentHeading~0); 381539#L2577-18 assume !(0 == ~currentFloorID~0); 381535#L2577-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 381532#L2583-13 havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 381529#L2887-8 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 381528#L1160-77 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 378985#isFloorCalling_returnLabel#78 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 381526#isExecutiveFloorCalling_returnLabel#12 __utac_acc__Specification14_spec__1_#t~ret11#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret11#1;havoc __utac_acc__Specification14_spec__1_#t~ret11#1; 381524#L330-4 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1); 381520#L330-5 havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :end_inline___utac_acc__Specification14_spec__1 } true; 381519#timeShift_returnLabel#3 havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true; 381518#threeTS_returnLabel#1 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret16#1, bobCall_~tmp~3#1;havoc bobCall_~tmp~3#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 381507#L241-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 381503#getOrigin_returnLabel#2 bobCall_#t~ret16#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~3#1 := bobCall_#t~ret16#1;havoc bobCall_#t~ret16#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~3#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 379612#L1431-1 assume 0 == initPersonOnFloor_~floor#1; 378894#L1432-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 378795#L1539-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 378751#L1223-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 378741#L1235-5 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 378739#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 378737#bobCall_returnLabel#1 havoc bobCall_#t~ret16#1, bobCall_~tmp~3#1;assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret22#1, cleanup_#t~ret23#1, cleanup_~i~2#1, cleanup_~tmp~9#1, cleanup_~tmp___0~3#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~9#1;havoc cleanup_~tmp___0~3#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 378735#L1160-78 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 378732#isFloorCalling_returnLabel#79 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 378731#isExecutiveFloorCalling_returnLabel#13 stopRequestedAtCurrentFloor_#t~ret76#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 378729#L2627-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~22#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 378728#getCurrentFloorID_returnLabel#13 stopRequestedAtCurrentFloor_#t~ret77#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret77#1;havoc stopRequestedAtCurrentFloor_#t~ret77#1; 378727#L2631-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 371753#stopRequestedAtCurrentFloor_returnLabel#4 timeShift_#t~ret92#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret92#1;havoc timeShift_#t~ret92#1; 378069#L2779-6 assume !(0 != timeShift_~tmp___9~2#1); 376072#L2870-9 assume !(1 == ~doorState~0); 371162#L2870-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 371163#L1160-81 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 371547#isFloorCalling_returnLabel#82 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 376301#isExecutiveFloorCalling_returnLabel#14 stopRequestedInDirection_#t~ret70#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1; 371321#L2510-6 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 371323#getCurrentFloorID_returnLabel#14 stopRequestedInDirection_#t~ret71#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~19#1 := stopRequestedInDirection_#t~ret71#1;havoc stopRequestedInDirection_#t~ret71#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~19#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 397520#stopRequestedInDirection_returnLabel#7 timeShift_#t~ret99#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret99#1;havoc timeShift_#t~ret99#1; 397519#L2878-6 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1; 397518#L2567-9 assume !(1 == ~currentHeading~0); 373205#L2577-27 assume !(0 == ~currentFloorID~0); 373206#L2577-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 375341#L2583-19 havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 370989#L2887-11 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 376761#L1160-103 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 376762#isFloorCalling_returnLabel#104 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 398670#isExecutiveFloorCalling_returnLabel#16 __utac_acc__Specification14_spec__1_#t~ret11#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret11#1;havoc __utac_acc__Specification14_spec__1_#t~ret11#1; 398669#L330-6 assume 0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 398668#getCurrentFloorID_returnLabel#16 __utac_acc__Specification14_spec__1_#t~ret12#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification14_spec__1_~tmp~2#1 := __utac_acc__Specification14_spec__1_#t~ret12#1;havoc __utac_acc__Specification14_spec__1_#t~ret12#1;assume { :begin_inline_isExecutiveFloor } true;isExecutiveFloor_#in~floorID#1 := __utac_acc__Specification14_spec__1_~tmp~2#1;havoc isExecutiveFloor_#res#1;havoc isExecutiveFloor_~floorID#1, isExecutiveFloor_~retValue_acc~29#1;isExecutiveFloor_~floorID#1 := isExecutiveFloor_#in~floorID#1;havoc isExecutiveFloor_~retValue_acc~29#1;isExecutiveFloor_~retValue_acc~29#1 := (if ~executiveFloor~0 == isExecutiveFloor_~floorID#1 then 1 else 0);isExecutiveFloor_#res#1 := isExecutiveFloor_~retValue_acc~29#1; 398667#isExecutiveFloor_returnLabel#4 __utac_acc__Specification14_spec__1_#t~ret13#1 := isExecutiveFloor_#res#1;havoc isExecutiveFloor_~floorID#1, isExecutiveFloor_~retValue_acc~29#1;havoc isExecutiveFloor_#in~floorID#1;assume { :end_inline_isExecutiveFloor } true;__utac_acc__Specification14_spec__1_~tmp___0~2#1 := __utac_acc__Specification14_spec__1_#t~ret13#1;havoc __utac_acc__Specification14_spec__1_#t~ret13#1; 398665#L335-6 assume 0 != __utac_acc__Specification14_spec__1_~tmp___0~2#1; 398663#L330-7 havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :end_inline___utac_acc__Specification14_spec__1 } true; 398662#timeShift_returnLabel#4 havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 398660#L500-2 assume !false; 398661#L501 [2024-11-13 15:37:47,092 INFO L747 eck$LassoCheckResult]: Loop: 398661#L501 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 427581#L504 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 427580#isBlocked_returnLabel#1 cleanup_#t~ret22#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~3#1 := cleanup_#t~ret22#1;havoc cleanup_#t~ret22#1; 427579#L508 assume 1 != cleanup_~tmp___0~3#1; 427578#L508-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret58#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~17#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~17#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret53#1, anyStopRequested_#t~ret54#1, anyStopRequested_#t~ret55#1, anyStopRequested_#t~ret56#1, anyStopRequested_#t~ret57#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~16#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~16#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 427577#L1160-104 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 427576#isFloorCalling_returnLabel#105 anyStopRequested_#t~ret53#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret53#1;havoc anyStopRequested_#t~ret53#1; 427575#L2066 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 427574#anyStopRequested_returnLabel#1 isIdle_#t~ret58#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret53#1, anyStopRequested_#t~ret54#1, anyStopRequested_#t~ret55#1, anyStopRequested_#t~ret56#1, anyStopRequested_#t~ret57#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~16#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~17#1 := isIdle_#t~ret58#1;havoc isIdle_#t~ret58#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~17#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 427573#isIdle_returnLabel#1 cleanup_#t~ret23#1 := isIdle_#res#1;havoc isIdle_#t~ret58#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~17#1;assume { :end_inline_isIdle } true;cleanup_~tmp~9#1 := cleanup_#t~ret23#1;havoc cleanup_#t~ret23#1; 427572#L520 assume !(0 != cleanup_~tmp~9#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 427571#L1160-109 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 419348#isFloorCalling_returnLabel#110 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 427570#isExecutiveFloorCalling_returnLabel#17 stopRequestedAtCurrentFloor_#t~ret76#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 427568#L2627-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret74#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret75#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~21#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~21#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 427569#L1160-111 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 428451#isFloorCalling_returnLabel#112 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret74#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret74#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret74#1; 428439#L2600-9 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1; 428437#stopRequestedAtCurrentFloor__wrappee__empty_returnLabel#10 stopRequestedAtCurrentFloor_#t~ret79#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret74#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret75#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~21#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := stopRequestedAtCurrentFloor_#t~ret79#1;havoc stopRequestedAtCurrentFloor_#t~ret79#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 372746#stopRequestedAtCurrentFloor_returnLabel#5 timeShift_#t~ret92#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret92#1;havoc timeShift_#t~ret92#1; 428435#L2779-8 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 428436#L2781-8 assume !(0 != ~persons_0~0); 428770#L2781-9 assume !(0 != ~persons_1~0); 428760#L2795-4 assume !(0 != ~persons_2~0); 428754#L2809-4 assume !(0 != ~persons_3~0); 428728#L2823-4 assume !(0 != ~persons_4~0); 428724#L2837-4 assume !(0 != ~persons_5~0); 428720#L2851-4 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret80#1, processWaitingOnFloor_#t~ret81#1, processWaitingOnFloor_#t~ret82#1, processWaitingOnFloor_#t~ret83#1, processWaitingOnFloor_#t~ret84#1, processWaitingOnFloor_#t~ret85#1, processWaitingOnFloor_#t~ret86#1, processWaitingOnFloor_#t~ret87#1, processWaitingOnFloor_#t~ret88#1, processWaitingOnFloor_#t~ret89#1, processWaitingOnFloor_#t~ret90#1, processWaitingOnFloor_#t~ret91#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~23#1, processWaitingOnFloor_~tmp___0~10#1, processWaitingOnFloor_~tmp___1~6#1, processWaitingOnFloor_~tmp___2~4#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~23#1;havoc processWaitingOnFloor_~tmp___0~10#1;havoc processWaitingOnFloor_~tmp___1~6#1;havoc processWaitingOnFloor_~tmp___2~4#1;havoc processWaitingOnFloor_~tmp___3~2#1;havoc processWaitingOnFloor_~tmp___4~1#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~11#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~11#1; 428719#L1251-48 assume 0 == isPersonOnFloor_~floor#1; 428709#L1252-24 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~11#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~11#1; 428677#isPersonOnFloor_returnLabel#25 processWaitingOnFloor_#t~ret80#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~11#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~10#1 := processWaitingOnFloor_#t~ret80#1;havoc processWaitingOnFloor_#t~ret80#1; 428675#L2681-12 assume !(0 != processWaitingOnFloor_~tmp___0~10#1); 428673#L2681-14 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~11#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~11#1; 428672#L1251-50 assume 0 == isPersonOnFloor_~floor#1; 428646#L1252-25 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~11#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~11#1; 428626#isPersonOnFloor_returnLabel#26 processWaitingOnFloor_#t~ret82#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~11#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~4#1 := processWaitingOnFloor_#t~ret82#1;havoc processWaitingOnFloor_#t~ret82#1; 428624#L2694-12 assume !(0 != processWaitingOnFloor_~tmp___2~4#1); 428622#L2694-14 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~11#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~11#1; 428621#L1251-52 assume 0 == isPersonOnFloor_~floor#1; 428590#L1252-26 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~11#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~11#1; 428579#isPersonOnFloor_returnLabel#27 processWaitingOnFloor_#t~ret84#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~11#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~1#1 := processWaitingOnFloor_#t~ret84#1;havoc processWaitingOnFloor_#t~ret84#1; 428577#L2707-12 assume !(0 != processWaitingOnFloor_~tmp___4~1#1); 428575#L2707-14 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~11#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~11#1; 428574#L1251-54 assume 0 == isPersonOnFloor_~floor#1; 427774#L1252-27 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~11#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~11#1; 427748#isPersonOnFloor_returnLabel#28 processWaitingOnFloor_#t~ret86#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~11#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret86#1;havoc processWaitingOnFloor_#t~ret86#1; 427746#L2720-12 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 427744#L2720-14 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~11#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~11#1; 427743#L1251-56 assume 0 == isPersonOnFloor_~floor#1; 427722#L1252-28 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~11#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~11#1; 427702#isPersonOnFloor_returnLabel#29 processWaitingOnFloor_#t~ret88#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~11#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret88#1;havoc processWaitingOnFloor_#t~ret88#1; 427692#L2733-12 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 427691#L2733-14 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~11#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~11#1; 427690#L1251-58 assume 0 == isPersonOnFloor_~floor#1; 427614#L1252-29 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~11#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~11#1; 427608#isPersonOnFloor_returnLabel#30 processWaitingOnFloor_#t~ret90#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~11#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret90#1;havoc processWaitingOnFloor_#t~ret90#1; 427606#L2746-12 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 427605#L2746-14 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 427603#L1195-68 assume !(0 == resetCallOnFloor_~floorID#1); 427600#L1198-68 assume 1 == resetCallOnFloor_~floorID#1;~calls_1~0 := 0; 427598#L1207-104 havoc resetCallOnFloor_~floorID#1;havoc resetCallOnFloor_#in~floorID#1;assume { :end_inline_resetCallOnFloor } true; 427597#processWaitingOnFloor_returnLabel#5 havoc processWaitingOnFloor_#t~ret80#1, processWaitingOnFloor_#t~ret81#1, processWaitingOnFloor_#t~ret82#1, processWaitingOnFloor_#t~ret83#1, processWaitingOnFloor_#t~ret84#1, processWaitingOnFloor_#t~ret85#1, processWaitingOnFloor_#t~ret86#1, processWaitingOnFloor_#t~ret87#1, processWaitingOnFloor_#t~ret88#1, processWaitingOnFloor_#t~ret89#1, processWaitingOnFloor_#t~ret90#1, processWaitingOnFloor_#t~ret91#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~23#1, processWaitingOnFloor_~tmp___0~10#1, processWaitingOnFloor_~tmp___1~6#1, processWaitingOnFloor_~tmp___2~4#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;havoc processWaitingOnFloor_#in~floorID#1;assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 427596#L1929-8 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 427591#L1941-14 havoc resetFloorButton_~floorID#1;havoc resetFloorButton_#in~floorID#1;assume { :end_inline_resetFloorButton } true; 427590#L2887-14 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 427589#L1160-134 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 419472#isFloorCalling_returnLabel#135 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 427588#isExecutiveFloorCalling_returnLabel#20 __utac_acc__Specification14_spec__1_#t~ret11#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret11#1;havoc __utac_acc__Specification14_spec__1_#t~ret11#1; 427587#L330-8 assume 0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 427586#getCurrentFloorID_returnLabel#20 __utac_acc__Specification14_spec__1_#t~ret12#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification14_spec__1_~tmp~2#1 := __utac_acc__Specification14_spec__1_#t~ret12#1;havoc __utac_acc__Specification14_spec__1_#t~ret12#1;assume { :begin_inline_isExecutiveFloor } true;isExecutiveFloor_#in~floorID#1 := __utac_acc__Specification14_spec__1_~tmp~2#1;havoc isExecutiveFloor_#res#1;havoc isExecutiveFloor_~floorID#1, isExecutiveFloor_~retValue_acc~29#1;isExecutiveFloor_~floorID#1 := isExecutiveFloor_#in~floorID#1;havoc isExecutiveFloor_~retValue_acc~29#1;isExecutiveFloor_~retValue_acc~29#1 := (if ~executiveFloor~0 == isExecutiveFloor_~floorID#1 then 1 else 0);isExecutiveFloor_#res#1 := isExecutiveFloor_~retValue_acc~29#1; 427585#isExecutiveFloor_returnLabel#5 __utac_acc__Specification14_spec__1_#t~ret13#1 := isExecutiveFloor_#res#1;havoc isExecutiveFloor_~floorID#1, isExecutiveFloor_~retValue_acc~29#1;havoc isExecutiveFloor_#in~floorID#1;assume { :end_inline_isExecutiveFloor } true;__utac_acc__Specification14_spec__1_~tmp___0~2#1 := __utac_acc__Specification14_spec__1_#t~ret13#1;havoc __utac_acc__Specification14_spec__1_#t~ret13#1; 427584#L335-8 assume 0 != __utac_acc__Specification14_spec__1_~tmp___0~2#1; 427583#L330-9 havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :end_inline___utac_acc__Specification14_spec__1 } true; 416046#timeShift_returnLabel#5 havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 427582#L500-2 assume !false; 398661#L501 [2024-11-13 15:37:47,096 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-13 15:37:47,096 INFO L85 PathProgramCache]: Analyzing trace with hash 102036757, now seen corresponding path program 1 times [2024-11-13 15:37:47,096 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-13 15:37:47,097 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [685973950] [2024-11-13 15:37:47,097 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-13 15:37:47,097 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-13 15:37:47,454 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-13 15:37:47,994 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-13 15:37:47,994 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-13 15:37:47,994 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [685973950] [2024-11-13 15:37:47,995 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [685973950] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-13 15:37:47,995 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-13 15:37:47,995 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2024-11-13 15:37:47,995 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1075662472] [2024-11-13 15:37:47,995 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-13 15:37:47,995 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-13 15:37:47,996 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-13 15:37:47,996 INFO L85 PathProgramCache]: Analyzing trace with hash 1805036544, now seen corresponding path program 1 times [2024-11-13 15:37:47,996 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-13 15:37:47,996 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [719663707] [2024-11-13 15:37:47,996 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-13 15:37:47,996 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-13 15:37:48,019 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-13 15:37:48,182 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-13 15:37:48,186 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-13 15:37:48,186 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [719663707] [2024-11-13 15:37:48,186 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [719663707] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-13 15:37:48,186 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-13 15:37:48,186 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2024-11-13 15:37:48,187 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1896213688] [2024-11-13 15:37:48,187 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-13 15:37:48,187 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-13 15:37:48,187 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-13 15:37:48,188 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2024-11-13 15:37:48,188 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=43, Unknown=0, NotChecked=0, Total=56 [2024-11-13 15:37:48,189 INFO L87 Difference]: Start difference. First operand 64656 states and 120388 transitions. cyclomatic complexity: 55750 Second operand has 8 states, 8 states have (on average 9.375) internal successors, (75), 8 states have internal predecessors, (75), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-13 15:37:52,554 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-13 15:37:52,554 INFO L93 Difference]: Finished difference Result 65571 states and 121082 transitions. [2024-11-13 15:37:52,554 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 65571 states and 121082 transitions. [2024-11-13 15:37:52,852 INFO L131 ngComponentsAnalysis]: Automaton has 12 accepting balls. 21498 [2024-11-13 15:37:53,103 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 65571 states to 65571 states and 121082 transitions. [2024-11-13 15:37:53,104 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 49035 [2024-11-13 15:37:53,143 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 49035 [2024-11-13 15:37:53,143 INFO L73 IsDeterministic]: Start isDeterministic. Operand 65571 states and 121082 transitions. [2024-11-13 15:37:53,167 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2024-11-13 15:37:53,168 INFO L218 hiAutomatonCegarLoop]: Abstraction has 65571 states and 121082 transitions. [2024-11-13 15:37:53,212 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 65571 states and 121082 transitions. [2024-11-13 15:37:53,988 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 65571 to 64401. [2024-11-13 15:37:54,027 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 64401 states, 64401 states have (on average 1.8619586652381175) internal successors, (119912), 64400 states have internal predecessors, (119912), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-13 15:37:54,117 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 64401 states to 64401 states and 119912 transitions. [2024-11-13 15:37:54,118 INFO L240 hiAutomatonCegarLoop]: Abstraction has 64401 states and 119912 transitions. [2024-11-13 15:37:54,118 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2024-11-13 15:37:54,119 INFO L424 stractBuchiCegarLoop]: Abstraction has 64401 states and 119912 transitions. [2024-11-13 15:37:54,119 INFO L331 stractBuchiCegarLoop]: ======== Iteration 6 ============ [2024-11-13 15:37:54,119 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 64401 states and 119912 transitions. [2024-11-13 15:37:54,450 INFO L131 ngComponentsAnalysis]: Automaton has 12 accepting balls. 21119 [2024-11-13 15:37:54,450 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-13 15:37:54,450 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-13 15:37:54,455 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-13 15:37:54,455 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-13 15:37:54,455 INFO L745 eck$LassoCheckResult]: Stem: 501860#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 501861#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret28#1, main_~retValue_acc~6#1, main_~tmp~11#1;havoc main_~retValue_acc~6#1;havoc main_~tmp~11#1;assume { :begin_inline_select_helpers } true; 508123#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 507689#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; 503445#valid_product_returnLabel#1 main_#t~ret28#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;assume { :end_inline_valid_product } true;main_~tmp~11#1 := main_#t~ret28#1;havoc main_#t~ret28#1; 503446#L692 assume 0 != main_~tmp~11#1;assume { :begin_inline_setup } true; 503662#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret21#1, bigMacCall_~tmp~8#1;havoc bigMacCall_~tmp~8#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 505395#L241 assume !(0 == getOrigin_~person#1); 507345#L245 assume !(1 == getOrigin_~person#1); 503953#L249 assume !(2 == getOrigin_~person#1); 503954#L253 assume !(3 == getOrigin_~person#1); 506311#L257 assume !(4 == getOrigin_~person#1); 508231#L261 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 507123#getOrigin_returnLabel#1 bigMacCall_#t~ret21#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~8#1 := bigMacCall_#t~ret21#1;havoc bigMacCall_#t~ret21#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~8#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 507124#L1431 assume 0 == initPersonOnFloor_~floor#1; 507929#L1432 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 501263#L1539-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 506968#L1223 assume !(0 == callOnFloor_~floorID#1); 501472#L1226 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 501473#L1235-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 509882#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 509881#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret21#1, bigMacCall_~tmp~8#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 509880#L1160 assume !(0 == isFloorCalling_~floorID#1); 509879#L1164 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 509874#isFloorCalling_returnLabel#1 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 509869#isExecutiveFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret76#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 509866#L2627 assume 0 != stopRequestedAtCurrentFloor_~tmp~22#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 509862#getCurrentFloorID_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret77#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret77#1;havoc stopRequestedAtCurrentFloor_#t~ret77#1; 509860#L2631 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 509857#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret92#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret92#1;havoc timeShift_#t~ret92#1; 509855#L2779 assume !(0 != timeShift_~tmp___9~2#1); 509854#L2870 assume !(1 == ~doorState~0); 509853#L2870-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 509852#L1160-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 504559#isFloorCalling_returnLabel#4 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 504146#isExecutiveFloorCalling_returnLabel#2 stopRequestedInDirection_#t~ret70#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1; 504147#L2510 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 507225#getCurrentFloorID_returnLabel#2 stopRequestedInDirection_#t~ret71#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~19#1 := stopRequestedInDirection_#t~ret71#1;havoc stopRequestedInDirection_#t~ret71#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~19#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 508481#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret99#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret99#1;havoc timeShift_#t~ret99#1; 521485#L2878 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1; 507466#L2567 assume !(1 == ~currentHeading~0); 507467#L2577 assume !(0 == ~currentFloorID~0); 503411#L2577-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 503412#L2583-1 havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 503574#L2887-2 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 508099#L1160-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 508234#isFloorCalling_returnLabel#26 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 505226#isExecutiveFloorCalling_returnLabel#4 __utac_acc__Specification14_spec__1_#t~ret11#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret11#1;havoc __utac_acc__Specification14_spec__1_#t~ret11#1; 505227#L330 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1); 501224#L330-1 havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :end_inline___utac_acc__Specification14_spec__1 } true; 501225#timeShift_returnLabel#1 havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 508059#L1160-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 508060#isFloorCalling_returnLabel#27 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 501704#isExecutiveFloorCalling_returnLabel#5 stopRequestedAtCurrentFloor_#t~ret76#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 501705#L2627-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret74#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret75#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~21#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~21#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 508304#L1160-28 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 502226#isFloorCalling_returnLabel#29 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret74#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret74#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret74#1; 504790#L2600-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1; 503524#stopRequestedAtCurrentFloor__wrappee__empty_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret79#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret74#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret75#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~21#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := stopRequestedAtCurrentFloor_#t~ret79#1;havoc stopRequestedAtCurrentFloor_#t~ret79#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 506370#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret92#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret92#1;havoc timeShift_#t~ret92#1; 504545#L2779-2 assume !(0 != timeShift_~tmp___9~2#1); 504546#L2870-3 assume 1 == ~doorState~0;~doorState~0 := 0; 507152#L2870-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 507153#L1160-29 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 502718#isFloorCalling_returnLabel#30 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 502167#isExecutiveFloorCalling_returnLabel#6 stopRequestedInDirection_#t~ret70#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1; 502168#L2510-2 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 504333#getCurrentFloorID_returnLabel#6 stopRequestedInDirection_#t~ret71#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~19#1 := stopRequestedInDirection_#t~ret71#1;havoc stopRequestedInDirection_#t~ret71#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~19#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 504334#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret99#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret99#1;havoc timeShift_#t~ret99#1; 504056#L2878-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1; 504058#L2567-3 assume !(1 == ~currentHeading~0); 526246#L2577-9 assume !(0 == ~currentFloorID~0); 503587#L2577-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 506289#L2583-7 havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 506290#L2887-5 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 523024#L1160-51 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 509023#isFloorCalling_returnLabel#52 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 523023#isExecutiveFloorCalling_returnLabel#8 __utac_acc__Specification14_spec__1_#t~ret11#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret11#1;havoc __utac_acc__Specification14_spec__1_#t~ret11#1; 523017#L330-2 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1); 523016#L330-3 havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :end_inline___utac_acc__Specification14_spec__1 } true; 523011#timeShift_returnLabel#2 havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 523010#L1160-52 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 509027#isFloorCalling_returnLabel#53 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 523009#isExecutiveFloorCalling_returnLabel#9 stopRequestedAtCurrentFloor_#t~ret76#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 523008#L2627-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret74#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret75#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~21#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~21#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 523005#L1160-54 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 519505#isFloorCalling_returnLabel#55 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret74#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret74#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret74#1; 519502#L2600-5 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1; 519500#stopRequestedAtCurrentFloor__wrappee__empty_returnLabel#6 stopRequestedAtCurrentFloor_#t~ret79#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret74#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret75#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~21#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := stopRequestedAtCurrentFloor_#t~ret79#1;havoc stopRequestedAtCurrentFloor_#t~ret79#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 519499#stopRequestedAtCurrentFloor_returnLabel#3 timeShift_#t~ret92#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret92#1;havoc timeShift_#t~ret92#1; 519491#L2779-4 assume !(0 != timeShift_~tmp___9~2#1); 519492#L2870-6 assume !(1 == ~doorState~0); 525050#L2870-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 502627#L1160-55 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 502628#isFloorCalling_returnLabel#56 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 515324#isExecutiveFloorCalling_returnLabel#10 stopRequestedInDirection_#t~ret70#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1; 515325#L2510-4 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 508980#getCurrentFloorID_returnLabel#10 stopRequestedInDirection_#t~ret71#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~19#1 := stopRequestedInDirection_#t~ret71#1;havoc stopRequestedInDirection_#t~ret71#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~19#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 506285#stopRequestedInDirection_returnLabel#5 timeShift_#t~ret99#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret99#1;havoc timeShift_#t~ret99#1; 506286#L2878-4 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1; 502719#L2567-6 assume !(1 == ~currentHeading~0); 502720#L2577-18 assume !(0 == ~currentFloorID~0); 501886#L2577-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 505503#L2583-13 havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 504584#L2887-8 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 509295#L1160-77 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 509294#isFloorCalling_returnLabel#78 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 509289#isExecutiveFloorCalling_returnLabel#12 __utac_acc__Specification14_spec__1_#t~ret11#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret11#1;havoc __utac_acc__Specification14_spec__1_#t~ret11#1; 509286#L330-4 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1); 509281#L330-5 havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :end_inline___utac_acc__Specification14_spec__1 } true; 509275#timeShift_returnLabel#3 havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true; 509273#threeTS_returnLabel#1 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret16#1, bobCall_~tmp~3#1;havoc bobCall_~tmp~3#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 509257#L241-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 509254#getOrigin_returnLabel#2 bobCall_#t~ret16#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~3#1 := bobCall_#t~ret16#1;havoc bobCall_#t~ret16#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~3#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 509253#L1431-1 assume 0 == initPersonOnFloor_~floor#1; 509130#L1432-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 509066#L1539-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 509056#L1223-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 509051#L1235-5 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 509049#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 509047#bobCall_returnLabel#1 havoc bobCall_#t~ret16#1, bobCall_~tmp~3#1;assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret22#1, cleanup_#t~ret23#1, cleanup_~i~2#1, cleanup_~tmp~9#1, cleanup_~tmp___0~3#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~9#1;havoc cleanup_~tmp___0~3#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 509044#L1160-78 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 509043#isFloorCalling_returnLabel#79 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 509042#isExecutiveFloorCalling_returnLabel#13 stopRequestedAtCurrentFloor_#t~ret76#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 509041#L2627-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~22#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 509040#getCurrentFloorID_returnLabel#13 stopRequestedAtCurrentFloor_#t~ret77#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret77#1;havoc stopRequestedAtCurrentFloor_#t~ret77#1; 509039#L2631-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 503892#stopRequestedAtCurrentFloor_returnLabel#4 timeShift_#t~ret92#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret92#1;havoc timeShift_#t~ret92#1; 527653#L2779-6 assume !(0 != timeShift_~tmp___9~2#1); 527652#L2870-9 assume !(1 == ~doorState~0); 527651#L2870-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 527650#L1160-81 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 527649#isFloorCalling_returnLabel#82 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 527648#isExecutiveFloorCalling_returnLabel#14 stopRequestedInDirection_#t~ret70#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1; 527646#L2510-6 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 506562#getCurrentFloorID_returnLabel#14 stopRequestedInDirection_#t~ret71#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~19#1 := stopRequestedInDirection_#t~ret71#1;havoc stopRequestedInDirection_#t~ret71#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~19#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 506563#stopRequestedInDirection_returnLabel#7 timeShift_#t~ret99#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret99#1;havoc timeShift_#t~ret99#1; 506103#L2878-6 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1; 506104#L2567-9 assume !(1 == ~currentHeading~0); 503458#L2577-27 assume !(0 == ~currentFloorID~0); 503459#L2577-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 505593#L2583-19 havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 501239#L2887-11 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 527571#L1160-103 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 526589#isFloorCalling_returnLabel#104 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 526590#isExecutiveFloorCalling_returnLabel#16 __utac_acc__Specification14_spec__1_#t~ret11#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret11#1;havoc __utac_acc__Specification14_spec__1_#t~ret11#1; 501686#L330-6 assume 0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 501687#getCurrentFloorID_returnLabel#16 __utac_acc__Specification14_spec__1_#t~ret12#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification14_spec__1_~tmp~2#1 := __utac_acc__Specification14_spec__1_#t~ret12#1;havoc __utac_acc__Specification14_spec__1_#t~ret12#1;assume { :begin_inline_isExecutiveFloor } true;isExecutiveFloor_#in~floorID#1 := __utac_acc__Specification14_spec__1_~tmp~2#1;havoc isExecutiveFloor_#res#1;havoc isExecutiveFloor_~floorID#1, isExecutiveFloor_~retValue_acc~29#1;isExecutiveFloor_~floorID#1 := isExecutiveFloor_#in~floorID#1;havoc isExecutiveFloor_~retValue_acc~29#1;isExecutiveFloor_~retValue_acc~29#1 := (if ~executiveFloor~0 == isExecutiveFloor_~floorID#1 then 1 else 0);isExecutiveFloor_#res#1 := isExecutiveFloor_~retValue_acc~29#1; 537834#isExecutiveFloor_returnLabel#4 __utac_acc__Specification14_spec__1_#t~ret13#1 := isExecutiveFloor_#res#1;havoc isExecutiveFloor_~floorID#1, isExecutiveFloor_~retValue_acc~29#1;havoc isExecutiveFloor_#in~floorID#1;assume { :end_inline_isExecutiveFloor } true;__utac_acc__Specification14_spec__1_~tmp___0~2#1 := __utac_acc__Specification14_spec__1_#t~ret13#1;havoc __utac_acc__Specification14_spec__1_#t~ret13#1; 537832#L335-6 assume 0 != __utac_acc__Specification14_spec__1_~tmp___0~2#1; 537830#L330-7 havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :end_inline___utac_acc__Specification14_spec__1 } true; 537829#timeShift_returnLabel#4 havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 537826#L500-2 assume !false; 537827#L501 [2024-11-13 15:37:54,456 INFO L747 eck$LassoCheckResult]: Loop: 537827#L501 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 554395#L504 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 554057#isBlocked_returnLabel#1 cleanup_#t~ret22#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~3#1 := cleanup_#t~ret22#1;havoc cleanup_#t~ret22#1; 554056#L508 assume 1 != cleanup_~tmp___0~3#1; 554017#L508-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret58#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~17#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~17#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret53#1, anyStopRequested_#t~ret54#1, anyStopRequested_#t~ret55#1, anyStopRequested_#t~ret56#1, anyStopRequested_#t~ret57#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~16#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~16#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 553994#L1160-104 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 553986#isFloorCalling_returnLabel#105 anyStopRequested_#t~ret53#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret53#1;havoc anyStopRequested_#t~ret53#1; 553982#L2066 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 553981#anyStopRequested_returnLabel#1 isIdle_#t~ret58#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret53#1, anyStopRequested_#t~ret54#1, anyStopRequested_#t~ret55#1, anyStopRequested_#t~ret56#1, anyStopRequested_#t~ret57#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~16#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~17#1 := isIdle_#t~ret58#1;havoc isIdle_#t~ret58#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~17#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 553970#isIdle_returnLabel#1 cleanup_#t~ret23#1 := isIdle_#res#1;havoc isIdle_#t~ret58#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~17#1;assume { :end_inline_isIdle } true;cleanup_~tmp~9#1 := cleanup_#t~ret23#1;havoc cleanup_#t~ret23#1; 553873#L520 assume !(0 != cleanup_~tmp~9#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 545146#L1160-109 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 545143#isFloorCalling_returnLabel#110 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 545144#isExecutiveFloorCalling_returnLabel#17 stopRequestedAtCurrentFloor_#t~ret76#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 548306#L2627-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~22#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 548303#getCurrentFloorID_returnLabel#17 stopRequestedAtCurrentFloor_#t~ret77#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret77#1;havoc stopRequestedAtCurrentFloor_#t~ret77#1; 548277#L2631-4 assume ~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret74#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret75#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~21#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~21#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 548278#L1160-110 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 548466#isFloorCalling_returnLabel#111 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret74#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret74#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret74#1; 548463#L2600-8 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1; 548462#stopRequestedAtCurrentFloor__wrappee__empty_returnLabel#9 stopRequestedAtCurrentFloor_#t~ret78#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret74#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret75#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~21#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := stopRequestedAtCurrentFloor_#t~ret78#1;havoc stopRequestedAtCurrentFloor_#t~ret78#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 548461#stopRequestedAtCurrentFloor_returnLabel#5 timeShift_#t~ret92#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret92#1;havoc timeShift_#t~ret92#1; 548459#L2779-8 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 548460#L2781-8 assume !(0 != ~persons_0~0); 555638#L2781-9 assume !(0 != ~persons_1~0); 555577#L2795-4 assume !(0 != ~persons_2~0); 555545#L2809-4 assume !(0 != ~persons_3~0); 555533#L2823-4 assume !(0 != ~persons_4~0); 555480#L2837-4 assume !(0 != ~persons_5~0); 555471#L2851-4 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret80#1, processWaitingOnFloor_#t~ret81#1, processWaitingOnFloor_#t~ret82#1, processWaitingOnFloor_#t~ret83#1, processWaitingOnFloor_#t~ret84#1, processWaitingOnFloor_#t~ret85#1, processWaitingOnFloor_#t~ret86#1, processWaitingOnFloor_#t~ret87#1, processWaitingOnFloor_#t~ret88#1, processWaitingOnFloor_#t~ret89#1, processWaitingOnFloor_#t~ret90#1, processWaitingOnFloor_#t~ret91#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~23#1, processWaitingOnFloor_~tmp___0~10#1, processWaitingOnFloor_~tmp___1~6#1, processWaitingOnFloor_~tmp___2~4#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~23#1;havoc processWaitingOnFloor_~tmp___0~10#1;havoc processWaitingOnFloor_~tmp___1~6#1;havoc processWaitingOnFloor_~tmp___2~4#1;havoc processWaitingOnFloor_~tmp___3~2#1;havoc processWaitingOnFloor_~tmp___4~1#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~11#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~11#1; 555469#L1251-48 assume 0 == isPersonOnFloor_~floor#1; 555452#L1252-24 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~11#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~11#1; 555398#isPersonOnFloor_returnLabel#25 processWaitingOnFloor_#t~ret80#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~11#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~10#1 := processWaitingOnFloor_#t~ret80#1;havoc processWaitingOnFloor_#t~ret80#1; 554734#L2681-12 assume !(0 != processWaitingOnFloor_~tmp___0~10#1); 554727#L2681-14 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~11#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~11#1; 554725#L1251-50 assume 0 == isPersonOnFloor_~floor#1; 554699#L1252-25 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~11#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~11#1; 554679#isPersonOnFloor_returnLabel#26 processWaitingOnFloor_#t~ret82#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~11#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~4#1 := processWaitingOnFloor_#t~ret82#1;havoc processWaitingOnFloor_#t~ret82#1; 554677#L2694-12 assume !(0 != processWaitingOnFloor_~tmp___2~4#1); 554675#L2694-14 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~11#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~11#1; 554673#L1251-52 assume 0 == isPersonOnFloor_~floor#1; 554640#L1252-26 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~11#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~11#1; 554629#isPersonOnFloor_returnLabel#27 processWaitingOnFloor_#t~ret84#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~11#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~1#1 := processWaitingOnFloor_#t~ret84#1;havoc processWaitingOnFloor_#t~ret84#1; 554627#L2707-12 assume !(0 != processWaitingOnFloor_~tmp___4~1#1); 554625#L2707-14 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~11#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~11#1; 554624#L1251-54 assume 0 == isPersonOnFloor_~floor#1; 554614#L1252-27 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~11#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~11#1; 554582#isPersonOnFloor_returnLabel#28 processWaitingOnFloor_#t~ret86#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~11#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret86#1;havoc processWaitingOnFloor_#t~ret86#1; 554580#L2720-12 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 554577#L2720-14 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~11#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~11#1; 554576#L1251-56 assume 0 == isPersonOnFloor_~floor#1; 554491#L1252-28 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~11#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~11#1; 554476#isPersonOnFloor_returnLabel#29 processWaitingOnFloor_#t~ret88#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~11#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret88#1;havoc processWaitingOnFloor_#t~ret88#1; 554467#L2733-12 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 554466#L2733-14 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~11#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~11#1; 554465#L1251-58 assume 0 == isPersonOnFloor_~floor#1; 554437#L1252-29 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~11#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~11#1; 554425#isPersonOnFloor_returnLabel#30 processWaitingOnFloor_#t~ret90#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~11#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret90#1;havoc processWaitingOnFloor_#t~ret90#1; 554423#L2746-12 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 554421#L2746-14 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 554420#L1195-68 assume !(0 == resetCallOnFloor_~floorID#1); 554417#L1198-68 assume 1 == resetCallOnFloor_~floorID#1;~calls_1~0 := 0; 554415#L1207-104 havoc resetCallOnFloor_~floorID#1;havoc resetCallOnFloor_#in~floorID#1;assume { :end_inline_resetCallOnFloor } true; 554414#processWaitingOnFloor_returnLabel#5 havoc processWaitingOnFloor_#t~ret80#1, processWaitingOnFloor_#t~ret81#1, processWaitingOnFloor_#t~ret82#1, processWaitingOnFloor_#t~ret83#1, processWaitingOnFloor_#t~ret84#1, processWaitingOnFloor_#t~ret85#1, processWaitingOnFloor_#t~ret86#1, processWaitingOnFloor_#t~ret87#1, processWaitingOnFloor_#t~ret88#1, processWaitingOnFloor_#t~ret89#1, processWaitingOnFloor_#t~ret90#1, processWaitingOnFloor_#t~ret91#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~23#1, processWaitingOnFloor_~tmp___0~10#1, processWaitingOnFloor_~tmp___1~6#1, processWaitingOnFloor_~tmp___2~4#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;havoc processWaitingOnFloor_#in~floorID#1;assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 554413#L1929-8 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 554408#L1941-14 havoc resetFloorButton_~floorID#1;havoc resetFloorButton_#in~floorID#1;assume { :end_inline_resetFloorButton } true; 554407#L2887-14 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 554406#L1160-134 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 550011#isFloorCalling_returnLabel#135 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 554405#isExecutiveFloorCalling_returnLabel#20 __utac_acc__Specification14_spec__1_#t~ret11#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret11#1;havoc __utac_acc__Specification14_spec__1_#t~ret11#1; 554404#L330-8 assume 0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 554403#getCurrentFloorID_returnLabel#20 __utac_acc__Specification14_spec__1_#t~ret12#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification14_spec__1_~tmp~2#1 := __utac_acc__Specification14_spec__1_#t~ret12#1;havoc __utac_acc__Specification14_spec__1_#t~ret12#1;assume { :begin_inline_isExecutiveFloor } true;isExecutiveFloor_#in~floorID#1 := __utac_acc__Specification14_spec__1_~tmp~2#1;havoc isExecutiveFloor_#res#1;havoc isExecutiveFloor_~floorID#1, isExecutiveFloor_~retValue_acc~29#1;isExecutiveFloor_~floorID#1 := isExecutiveFloor_#in~floorID#1;havoc isExecutiveFloor_~retValue_acc~29#1;isExecutiveFloor_~retValue_acc~29#1 := (if ~executiveFloor~0 == isExecutiveFloor_~floorID#1 then 1 else 0);isExecutiveFloor_#res#1 := isExecutiveFloor_~retValue_acc~29#1; 554402#isExecutiveFloor_returnLabel#5 __utac_acc__Specification14_spec__1_#t~ret13#1 := isExecutiveFloor_#res#1;havoc isExecutiveFloor_~floorID#1, isExecutiveFloor_~retValue_acc~29#1;havoc isExecutiveFloor_#in~floorID#1;assume { :end_inline_isExecutiveFloor } true;__utac_acc__Specification14_spec__1_~tmp___0~2#1 := __utac_acc__Specification14_spec__1_#t~ret13#1;havoc __utac_acc__Specification14_spec__1_#t~ret13#1; 554400#L335-8 assume 0 != __utac_acc__Specification14_spec__1_~tmp___0~2#1; 554398#L330-9 havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :end_inline___utac_acc__Specification14_spec__1 } true; 554397#timeShift_returnLabel#5 havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 554396#L500-2 assume !false; 537827#L501 [2024-11-13 15:37:54,457 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-13 15:37:54,457 INFO L85 PathProgramCache]: Analyzing trace with hash 102036757, now seen corresponding path program 2 times [2024-11-13 15:37:54,457 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-13 15:37:54,457 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1404708886] [2024-11-13 15:37:54,457 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-13 15:37:54,458 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-13 15:37:54,501 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-13 15:37:54,756 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-13 15:37:54,756 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-13 15:37:54,756 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1404708886] [2024-11-13 15:37:54,757 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1404708886] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-13 15:37:54,757 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-13 15:37:54,757 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2024-11-13 15:37:54,757 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1446366561] [2024-11-13 15:37:54,757 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-13 15:37:54,757 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-13 15:37:54,758 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-13 15:37:54,758 INFO L85 PathProgramCache]: Analyzing trace with hash -895242184, now seen corresponding path program 1 times [2024-11-13 15:37:54,758 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-13 15:37:54,758 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [451565342] [2024-11-13 15:37:54,758 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-13 15:37:54,758 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-13 15:37:54,783 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-13 15:37:54,880 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-13 15:37:54,880 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-13 15:37:54,880 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [451565342] [2024-11-13 15:37:54,880 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [451565342] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-13 15:37:54,880 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-13 15:37:54,881 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2024-11-13 15:37:54,881 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [755927188] [2024-11-13 15:37:54,881 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-13 15:37:54,881 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-13 15:37:54,882 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-13 15:37:54,882 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2024-11-13 15:37:54,882 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2024-11-13 15:37:54,882 INFO L87 Difference]: Start difference. First operand 64401 states and 119912 transitions. cyclomatic complexity: 55529 Second operand has 6 states, 6 states have (on average 12.833333333333334) internal successors, (77), 6 states have internal predecessors, (77), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-13 15:38:00,134 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-13 15:38:00,134 INFO L93 Difference]: Finished difference Result 65130 states and 119216 transitions. [2024-11-13 15:38:00,134 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 65130 states and 119216 transitions. [2024-11-13 15:38:00,606 INFO L131 ngComponentsAnalysis]: Automaton has 12 accepting balls. 21363 [2024-11-13 15:38:00,803 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 65130 states to 65130 states and 119216 transitions. [2024-11-13 15:38:00,803 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 48718 [2024-11-13 15:38:00,843 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 48718 [2024-11-13 15:38:00,844 INFO L73 IsDeterministic]: Start isDeterministic. Operand 65130 states and 119216 transitions. [2024-11-13 15:38:00,862 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2024-11-13 15:38:00,862 INFO L218 hiAutomatonCegarLoop]: Abstraction has 65130 states and 119216 transitions. [2024-11-13 15:38:00,909 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 65130 states and 119216 transitions. [2024-11-13 15:38:01,795 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 65130 to 64560. [2024-11-13 15:38:01,849 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 64560 states, 64560 states have (on average 1.8377633209417596) internal successors, (118646), 64559 states have internal predecessors, (118646), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-13 15:38:01,980 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 64560 states to 64560 states and 118646 transitions. [2024-11-13 15:38:01,980 INFO L240 hiAutomatonCegarLoop]: Abstraction has 64560 states and 118646 transitions. [2024-11-13 15:38:01,981 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2024-11-13 15:38:01,984 INFO L424 stractBuchiCegarLoop]: Abstraction has 64560 states and 118646 transitions. [2024-11-13 15:38:01,984 INFO L331 stractBuchiCegarLoop]: ======== Iteration 7 ============ [2024-11-13 15:38:01,984 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 64560 states and 118646 transitions. [2024-11-13 15:38:02,113 INFO L131 ngComponentsAnalysis]: Automaton has 12 accepting balls. 21173 [2024-11-13 15:38:02,114 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-13 15:38:02,114 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-13 15:38:02,117 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-13 15:38:02,117 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-13 15:38:02,118 INFO L745 eck$LassoCheckResult]: Stem: 631407#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 631408#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret28#1, main_~retValue_acc~6#1, main_~tmp~11#1;havoc main_~retValue_acc~6#1;havoc main_~tmp~11#1;assume { :begin_inline_select_helpers } true; 637685#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 637241#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; 632987#valid_product_returnLabel#1 main_#t~ret28#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;assume { :end_inline_valid_product } true;main_~tmp~11#1 := main_#t~ret28#1;havoc main_#t~ret28#1; 632988#L692 assume 0 != main_~tmp~11#1;assume { :begin_inline_setup } true; 633209#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret21#1, bigMacCall_~tmp~8#1;havoc bigMacCall_~tmp~8#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 634953#L241 assume !(0 == getOrigin_~person#1); 636907#L245 assume !(1 == getOrigin_~person#1); 633503#L249 assume !(2 == getOrigin_~person#1); 633504#L253 assume !(3 == getOrigin_~person#1); 635874#L257 assume !(4 == getOrigin_~person#1); 637807#L261 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 636687#getOrigin_returnLabel#1 bigMacCall_#t~ret21#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~8#1 := bigMacCall_#t~ret21#1;havoc bigMacCall_#t~ret21#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~8#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 636688#L1431 assume 0 == initPersonOnFloor_~floor#1; 637492#L1432 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 630806#L1539-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 636531#L1223 assume !(0 == callOnFloor_~floorID#1); 631016#L1226 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 631017#L1235-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 633750#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 632261#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret21#1, bigMacCall_~tmp~8#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 632262#L1160 assume !(0 == isFloorCalling_~floorID#1); 633560#L1164 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 635900#isFloorCalling_returnLabel#1 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 647649#isExecutiveFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret76#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 644297#L2627 assume 0 != stopRequestedAtCurrentFloor_~tmp~22#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 644298#getCurrentFloorID_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret77#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret77#1;havoc stopRequestedAtCurrentFloor_#t~ret77#1; 643281#L2631 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 643282#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret92#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret92#1;havoc timeShift_#t~ret92#1; 643343#L2779 assume !(0 != timeShift_~tmp___9~2#1); 643342#L2870 assume !(1 == ~doorState~0); 643341#L2870-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 643340#L1160-3 assume !(0 == isFloorCalling_~floorID#1); 636331#L1164-3 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 636332#isFloorCalling_returnLabel#4 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 638674#isExecutiveFloorCalling_returnLabel#2 stopRequestedInDirection_#t~ret70#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1; 638670#L2510 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 638671#getCurrentFloorID_returnLabel#2 stopRequestedInDirection_#t~ret71#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~19#1 := stopRequestedInDirection_#t~ret71#1;havoc stopRequestedInDirection_#t~ret71#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~19#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 641610#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret99#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret99#1;havoc timeShift_#t~ret99#1; 641608#L2878 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1; 641609#L2567 assume !(1 == ~currentHeading~0); 641874#L2577 assume !(0 == ~currentFloorID~0); 641844#L2577-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 641503#L2583-1 havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 641501#L2887-2 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 641498#L1160-25 assume !(0 == isFloorCalling_~floorID#1); 636498#L1164-25 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 636499#isFloorCalling_returnLabel#26 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 642374#isExecutiveFloorCalling_returnLabel#4 __utac_acc__Specification14_spec__1_#t~ret11#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret11#1;havoc __utac_acc__Specification14_spec__1_#t~ret11#1; 642334#L330 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1); 642056#L330-1 havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :end_inline___utac_acc__Specification14_spec__1 } true; 639263#timeShift_returnLabel#1 havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 638587#L1160-26 assume !(0 == isFloorCalling_~floorID#1); 638588#L1164-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 640391#isFloorCalling_returnLabel#27 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 640385#isExecutiveFloorCalling_returnLabel#5 stopRequestedAtCurrentFloor_#t~ret76#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 640383#L2627-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~22#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 640380#getCurrentFloorID_returnLabel#5 stopRequestedAtCurrentFloor_#t~ret77#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret77#1;havoc stopRequestedAtCurrentFloor_#t~ret77#1; 640332#L2631-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 640329#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret92#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret92#1;havoc timeShift_#t~ret92#1; 640327#L2779-2 assume !(0 != timeShift_~tmp___9~2#1); 640326#L2870-3 assume 1 == ~doorState~0;~doorState~0 := 0; 640325#L2870-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 640324#L1160-29 assume !(0 == isFloorCalling_~floorID#1); 640322#L1164-29 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 640319#isFloorCalling_returnLabel#30 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 640317#isExecutiveFloorCalling_returnLabel#6 stopRequestedInDirection_#t~ret70#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1; 640314#L2510-2 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 640315#getCurrentFloorID_returnLabel#6 stopRequestedInDirection_#t~ret71#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~19#1 := stopRequestedInDirection_#t~ret71#1;havoc stopRequestedInDirection_#t~ret71#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~19#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 641162#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret99#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret99#1;havoc timeShift_#t~ret99#1; 641159#L2878-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1; 641160#L2567-3 assume !(1 == ~currentHeading~0); 641348#L2577-9 assume !(0 == ~currentFloorID~0); 641343#L2577-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 639124#L2583-7 havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 639123#L2887-5 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 639122#L1160-51 assume !(0 == isFloorCalling_~floorID#1); 639121#L1164-51 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 639117#isFloorCalling_returnLabel#52 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 639116#isExecutiveFloorCalling_returnLabel#8 __utac_acc__Specification14_spec__1_#t~ret11#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret11#1;havoc __utac_acc__Specification14_spec__1_#t~ret11#1; 639096#L330-2 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1); 639095#L330-3 havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :end_inline___utac_acc__Specification14_spec__1 } true; 639094#timeShift_returnLabel#2 havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 638596#L1160-52 assume !(0 == isFloorCalling_~floorID#1); 635268#L1164-52 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 632890#isFloorCalling_returnLabel#53 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 650762#isExecutiveFloorCalling_returnLabel#9 stopRequestedAtCurrentFloor_#t~ret76#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 650763#L2627-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~22#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 634369#getCurrentFloorID_returnLabel#9 stopRequestedAtCurrentFloor_#t~ret77#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret77#1;havoc stopRequestedAtCurrentFloor_#t~ret77#1; 634370#L2631-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 635913#stopRequestedAtCurrentFloor_returnLabel#3 timeShift_#t~ret92#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret92#1;havoc timeShift_#t~ret92#1; 647100#L2779-4 assume !(0 != timeShift_~tmp___9~2#1); 646938#L2870-6 assume !(1 == ~doorState~0); 643283#L2870-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 638680#L1160-55 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 632174#isFloorCalling_returnLabel#56 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 644287#isExecutiveFloorCalling_returnLabel#10 stopRequestedInDirection_#t~ret70#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1; 644286#L2510-4 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 644127#getCurrentFloorID_returnLabel#10 stopRequestedInDirection_#t~ret71#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~19#1 := stopRequestedInDirection_#t~ret71#1;havoc stopRequestedInDirection_#t~ret71#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~19#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 644125#stopRequestedInDirection_returnLabel#5 timeShift_#t~ret99#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret99#1;havoc timeShift_#t~ret99#1; 644122#L2878-4 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1; 644120#L2567-6 assume !(1 == ~currentHeading~0); 644115#L2577-18 assume !(0 == ~currentFloorID~0); 643825#L2577-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 635063#L2583-13 havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 634127#L2887-8 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 638869#L1160-77 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 638868#isFloorCalling_returnLabel#78 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 638863#isExecutiveFloorCalling_returnLabel#12 __utac_acc__Specification14_spec__1_#t~ret11#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret11#1;havoc __utac_acc__Specification14_spec__1_#t~ret11#1; 638860#L330-4 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1); 638855#L330-5 havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :end_inline___utac_acc__Specification14_spec__1 } true; 638849#timeShift_returnLabel#3 havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true; 638847#threeTS_returnLabel#1 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret16#1, bobCall_~tmp~3#1;havoc bobCall_~tmp~3#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 638831#L241-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 638828#getOrigin_returnLabel#2 bobCall_#t~ret16#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~3#1 := bobCall_#t~ret16#1;havoc bobCall_#t~ret16#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~3#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 638827#L1431-1 assume 0 == initPersonOnFloor_~floor#1; 638705#L1432-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 638638#L1539-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 638628#L1223-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 638623#L1235-5 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 638621#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 638619#bobCall_returnLabel#1 havoc bobCall_#t~ret16#1, bobCall_~tmp~3#1;assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret22#1, cleanup_#t~ret23#1, cleanup_~i~2#1, cleanup_~tmp~9#1, cleanup_~tmp___0~3#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~9#1;havoc cleanup_~tmp___0~3#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 638617#L1160-78 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 638616#isFloorCalling_returnLabel#79 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 638615#isExecutiveFloorCalling_returnLabel#13 stopRequestedAtCurrentFloor_#t~ret76#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 638614#L2627-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~22#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 638613#getCurrentFloorID_returnLabel#13 stopRequestedAtCurrentFloor_#t~ret77#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret77#1;havoc stopRequestedAtCurrentFloor_#t~ret77#1; 638612#L2631-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 633443#stopRequestedAtCurrentFloor_returnLabel#4 timeShift_#t~ret92#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret92#1;havoc timeShift_#t~ret92#1; 650680#L2779-6 assume !(0 != timeShift_~tmp___9~2#1); 650678#L2870-9 assume !(1 == ~doorState~0); 650677#L2870-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 650676#L1160-81 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 650674#isFloorCalling_returnLabel#82 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 650670#isExecutiveFloorCalling_returnLabel#14 stopRequestedInDirection_#t~ret70#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1; 650671#L2510-6 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 636131#getCurrentFloorID_returnLabel#14 stopRequestedInDirection_#t~ret71#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~19#1 := stopRequestedInDirection_#t~ret71#1;havoc stopRequestedInDirection_#t~ret71#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~19#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 635600#stopRequestedInDirection_returnLabel#7 timeShift_#t~ret99#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret99#1;havoc timeShift_#t~ret99#1; 635601#L2878-6 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1; 635663#L2567-9 assume !(1 == ~currentHeading~0); 656309#L2577-27 assume !(0 == ~currentFloorID~0); 638583#L2577-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 638584#L2583-19 havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 656306#L2887-11 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 636598#L1160-103 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 636599#isFloorCalling_returnLabel#104 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 638508#isExecutiveFloorCalling_returnLabel#16 __utac_acc__Specification14_spec__1_#t~ret11#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret11#1;havoc __utac_acc__Specification14_spec__1_#t~ret11#1; 638509#L330-6 assume 0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 661731#getCurrentFloorID_returnLabel#16 __utac_acc__Specification14_spec__1_#t~ret12#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification14_spec__1_~tmp~2#1 := __utac_acc__Specification14_spec__1_#t~ret12#1;havoc __utac_acc__Specification14_spec__1_#t~ret12#1;assume { :begin_inline_isExecutiveFloor } true;isExecutiveFloor_#in~floorID#1 := __utac_acc__Specification14_spec__1_~tmp~2#1;havoc isExecutiveFloor_#res#1;havoc isExecutiveFloor_~floorID#1, isExecutiveFloor_~retValue_acc~29#1;isExecutiveFloor_~floorID#1 := isExecutiveFloor_#in~floorID#1;havoc isExecutiveFloor_~retValue_acc~29#1;isExecutiveFloor_~retValue_acc~29#1 := (if ~executiveFloor~0 == isExecutiveFloor_~floorID#1 then 1 else 0);isExecutiveFloor_#res#1 := isExecutiveFloor_~retValue_acc~29#1; 661730#isExecutiveFloor_returnLabel#4 __utac_acc__Specification14_spec__1_#t~ret13#1 := isExecutiveFloor_#res#1;havoc isExecutiveFloor_~floorID#1, isExecutiveFloor_~retValue_acc~29#1;havoc isExecutiveFloor_#in~floorID#1;assume { :end_inline_isExecutiveFloor } true;__utac_acc__Specification14_spec__1_~tmp___0~2#1 := __utac_acc__Specification14_spec__1_#t~ret13#1;havoc __utac_acc__Specification14_spec__1_#t~ret13#1; 661728#L335-6 assume 0 != __utac_acc__Specification14_spec__1_~tmp___0~2#1; 661726#L330-7 havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :end_inline___utac_acc__Specification14_spec__1 } true; 661725#timeShift_returnLabel#4 havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 661724#L500-2 assume !false; 637641#L501 [2024-11-13 15:38:02,119 INFO L747 eck$LassoCheckResult]: Loop: 637641#L501 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 690455#L504 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 637674#isBlocked_returnLabel#1 cleanup_#t~ret22#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~3#1 := cleanup_#t~ret22#1;havoc cleanup_#t~ret22#1; 637675#L508 assume 1 != cleanup_~tmp___0~3#1; 631916#L508-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret58#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~17#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~17#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret53#1, anyStopRequested_#t~ret54#1, anyStopRequested_#t~ret55#1, anyStopRequested_#t~ret56#1, anyStopRequested_#t~ret57#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~16#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~16#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 631917#L1160-104 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 636007#isFloorCalling_returnLabel#105 anyStopRequested_#t~ret53#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret53#1;havoc anyStopRequested_#t~ret53#1; 635631#L2066 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 631333#anyStopRequested_returnLabel#1 isIdle_#t~ret58#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret53#1, anyStopRequested_#t~ret54#1, anyStopRequested_#t~ret55#1, anyStopRequested_#t~ret56#1, anyStopRequested_#t~ret57#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~16#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~17#1 := isIdle_#t~ret58#1;havoc isIdle_#t~ret58#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~17#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 631334#isIdle_returnLabel#1 cleanup_#t~ret23#1 := isIdle_#res#1;havoc isIdle_#t~ret58#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~17#1;assume { :end_inline_isIdle } true;cleanup_~tmp~9#1 := cleanup_#t~ret23#1;havoc cleanup_#t~ret23#1; 634058#L520 assume !(0 != cleanup_~tmp~9#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 638070#L1160-109 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 675171#isFloorCalling_returnLabel#110 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 675165#isExecutiveFloorCalling_returnLabel#17 stopRequestedAtCurrentFloor_#t~ret76#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 675166#L2627-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~22#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 674830#getCurrentFloorID_returnLabel#17 stopRequestedAtCurrentFloor_#t~ret77#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret77#1;havoc stopRequestedAtCurrentFloor_#t~ret77#1; 674831#L2631-4 assume ~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret74#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret75#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~21#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~21#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 635514#L1160-110 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 635515#isFloorCalling_returnLabel#111 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret74#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret74#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret74#1; 678253#L2600-8 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1; 678254#stopRequestedAtCurrentFloor__wrappee__empty_returnLabel#9 stopRequestedAtCurrentFloor_#t~ret78#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret74#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret75#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~21#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := stopRequestedAtCurrentFloor_#t~ret78#1;havoc stopRequestedAtCurrentFloor_#t~ret78#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 683687#stopRequestedAtCurrentFloor_returnLabel#5 timeShift_#t~ret92#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret92#1;havoc timeShift_#t~ret92#1; 683685#L2779-8 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 681118#L2781-8 assume !(0 != ~persons_0~0); 683666#L2781-9 assume !(0 != ~persons_1~0); 683656#L2795-4 assume !(0 != ~persons_2~0); 683650#L2809-4 assume !(0 != ~persons_3~0); 683624#L2823-4 assume !(0 != ~persons_4~0); 683620#L2837-4 assume !(0 != ~persons_5~0); 683616#L2851-4 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret80#1, processWaitingOnFloor_#t~ret81#1, processWaitingOnFloor_#t~ret82#1, processWaitingOnFloor_#t~ret83#1, processWaitingOnFloor_#t~ret84#1, processWaitingOnFloor_#t~ret85#1, processWaitingOnFloor_#t~ret86#1, processWaitingOnFloor_#t~ret87#1, processWaitingOnFloor_#t~ret88#1, processWaitingOnFloor_#t~ret89#1, processWaitingOnFloor_#t~ret90#1, processWaitingOnFloor_#t~ret91#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~23#1, processWaitingOnFloor_~tmp___0~10#1, processWaitingOnFloor_~tmp___1~6#1, processWaitingOnFloor_~tmp___2~4#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~23#1;havoc processWaitingOnFloor_~tmp___0~10#1;havoc processWaitingOnFloor_~tmp___1~6#1;havoc processWaitingOnFloor_~tmp___2~4#1;havoc processWaitingOnFloor_~tmp___3~2#1;havoc processWaitingOnFloor_~tmp___4~1#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~11#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~11#1; 683615#L1251-48 assume 0 == isPersonOnFloor_~floor#1; 683605#L1252-24 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~11#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~11#1; 683573#isPersonOnFloor_returnLabel#25 processWaitingOnFloor_#t~ret80#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~11#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~10#1 := processWaitingOnFloor_#t~ret80#1;havoc processWaitingOnFloor_#t~ret80#1; 683571#L2681-12 assume !(0 != processWaitingOnFloor_~tmp___0~10#1); 683569#L2681-14 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~11#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~11#1; 683567#L1251-50 assume 0 == isPersonOnFloor_~floor#1; 683568#L1252-25 assume !(0 == isPersonOnFloor_~person#1); 683489#L1256-25 assume 1 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~11#1 := ~personOnFloor_1_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~11#1; 683470#isPersonOnFloor_returnLabel#26 processWaitingOnFloor_#t~ret82#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~11#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~4#1 := processWaitingOnFloor_#t~ret82#1;havoc processWaitingOnFloor_#t~ret82#1; 683468#L2694-12 assume !(0 != processWaitingOnFloor_~tmp___2~4#1); 683466#L2694-14 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~11#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~11#1; 683465#L1251-52 assume 0 == isPersonOnFloor_~floor#1; 683462#L1252-26 assume !(0 == isPersonOnFloor_~person#1); 683434#L1256-26 assume 1 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~11#1 := ~personOnFloor_1_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~11#1; 683423#isPersonOnFloor_returnLabel#27 processWaitingOnFloor_#t~ret84#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~11#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~1#1 := processWaitingOnFloor_#t~ret84#1;havoc processWaitingOnFloor_#t~ret84#1; 683421#L2707-12 assume !(0 != processWaitingOnFloor_~tmp___4~1#1); 683419#L2707-14 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~11#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~11#1; 683417#L1251-54 assume 0 == isPersonOnFloor_~floor#1; 683418#L1252-27 assume !(0 == isPersonOnFloor_~person#1); 683407#L1256-27 assume 1 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~11#1 := ~personOnFloor_1_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~11#1; 683382#isPersonOnFloor_returnLabel#28 processWaitingOnFloor_#t~ret86#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~11#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret86#1;havoc processWaitingOnFloor_#t~ret86#1; 683380#L2720-12 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 683378#L2720-14 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~11#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~11#1; 683376#L1251-56 assume 0 == isPersonOnFloor_~floor#1; 683377#L1252-28 assume !(0 == isPersonOnFloor_~person#1); 683357#L1256-28 assume 1 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~11#1 := ~personOnFloor_1_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~11#1; 683317#isPersonOnFloor_returnLabel#29 processWaitingOnFloor_#t~ret88#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~11#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret88#1;havoc processWaitingOnFloor_#t~ret88#1; 683308#L2733-12 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 683307#L2733-14 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~11#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~11#1; 683305#L1251-58 assume 0 == isPersonOnFloor_~floor#1; 683306#L1252-29 assume !(0 == isPersonOnFloor_~person#1); 683279#L1256-29 assume 1 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~11#1 := ~personOnFloor_1_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~11#1; 680425#isPersonOnFloor_returnLabel#30 processWaitingOnFloor_#t~ret90#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~11#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret90#1;havoc processWaitingOnFloor_#t~ret90#1; 680422#L2746-12 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 680417#L2746-14 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 680408#L1195-68 assume !(0 == resetCallOnFloor_~floorID#1); 680409#L1198-68 assume 1 == resetCallOnFloor_~floorID#1;~calls_1~0 := 0; 694543#L1207-104 havoc resetCallOnFloor_~floorID#1;havoc resetCallOnFloor_#in~floorID#1;assume { :end_inline_resetCallOnFloor } true; 694541#processWaitingOnFloor_returnLabel#5 havoc processWaitingOnFloor_#t~ret80#1, processWaitingOnFloor_#t~ret81#1, processWaitingOnFloor_#t~ret82#1, processWaitingOnFloor_#t~ret83#1, processWaitingOnFloor_#t~ret84#1, processWaitingOnFloor_#t~ret85#1, processWaitingOnFloor_#t~ret86#1, processWaitingOnFloor_#t~ret87#1, processWaitingOnFloor_#t~ret88#1, processWaitingOnFloor_#t~ret89#1, processWaitingOnFloor_#t~ret90#1, processWaitingOnFloor_#t~ret91#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~23#1, processWaitingOnFloor_~tmp___0~10#1, processWaitingOnFloor_~tmp___1~6#1, processWaitingOnFloor_~tmp___2~4#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;havoc processWaitingOnFloor_#in~floorID#1;assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 694540#L1929-8 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 694535#L1941-14 havoc resetFloorButton_~floorID#1;havoc resetFloorButton_#in~floorID#1;assume { :end_inline_resetFloorButton } true; 632577#L2887-14 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 694529#L1160-134 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 676002#isFloorCalling_returnLabel#135 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 694528#isExecutiveFloorCalling_returnLabel#20 __utac_acc__Specification14_spec__1_#t~ret11#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret11#1;havoc __utac_acc__Specification14_spec__1_#t~ret11#1; 694527#L330-8 assume 0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 694526#getCurrentFloorID_returnLabel#20 __utac_acc__Specification14_spec__1_#t~ret12#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification14_spec__1_~tmp~2#1 := __utac_acc__Specification14_spec__1_#t~ret12#1;havoc __utac_acc__Specification14_spec__1_#t~ret12#1;assume { :begin_inline_isExecutiveFloor } true;isExecutiveFloor_#in~floorID#1 := __utac_acc__Specification14_spec__1_~tmp~2#1;havoc isExecutiveFloor_#res#1;havoc isExecutiveFloor_~floorID#1, isExecutiveFloor_~retValue_acc~29#1;isExecutiveFloor_~floorID#1 := isExecutiveFloor_#in~floorID#1;havoc isExecutiveFloor_~retValue_acc~29#1;isExecutiveFloor_~retValue_acc~29#1 := (if ~executiveFloor~0 == isExecutiveFloor_~floorID#1 then 1 else 0);isExecutiveFloor_#res#1 := isExecutiveFloor_~retValue_acc~29#1; 694524#isExecutiveFloor_returnLabel#5 __utac_acc__Specification14_spec__1_#t~ret13#1 := isExecutiveFloor_#res#1;havoc isExecutiveFloor_~floorID#1, isExecutiveFloor_~retValue_acc~29#1;havoc isExecutiveFloor_#in~floorID#1;assume { :end_inline_isExecutiveFloor } true;__utac_acc__Specification14_spec__1_~tmp___0~2#1 := __utac_acc__Specification14_spec__1_#t~ret13#1;havoc __utac_acc__Specification14_spec__1_#t~ret13#1; 694522#L335-8 assume 0 != __utac_acc__Specification14_spec__1_~tmp___0~2#1; 694520#L330-9 havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :end_inline___utac_acc__Specification14_spec__1 } true; 694515#timeShift_returnLabel#5 havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 637640#L500-2 assume !false; 637641#L501 [2024-11-13 15:38:02,120 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-13 15:38:02,120 INFO L85 PathProgramCache]: Analyzing trace with hash -1544056064, now seen corresponding path program 1 times [2024-11-13 15:38:02,120 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-13 15:38:02,120 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [11974222] [2024-11-13 15:38:02,120 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-13 15:38:02,120 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-13 15:38:02,162 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-13 15:38:02,390 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-13 15:38:02,390 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-13 15:38:02,390 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [11974222] [2024-11-13 15:38:02,390 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [11974222] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-13 15:38:02,390 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-13 15:38:02,391 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2024-11-13 15:38:02,391 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1724553529] [2024-11-13 15:38:02,391 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-13 15:38:02,391 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-13 15:38:02,391 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-13 15:38:02,392 INFO L85 PathProgramCache]: Analyzing trace with hash 1007364281, now seen corresponding path program 1 times [2024-11-13 15:38:02,392 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-13 15:38:02,392 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [448457218] [2024-11-13 15:38:02,392 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-13 15:38:02,392 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-13 15:38:02,414 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-13 15:38:02,457 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-13 15:38:02,457 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-13 15:38:02,457 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [448457218] [2024-11-13 15:38:02,457 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [448457218] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-13 15:38:02,458 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-13 15:38:02,458 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-13 15:38:02,458 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1759450462] [2024-11-13 15:38:02,458 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-13 15:38:02,458 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-13 15:38:02,458 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-13 15:38:02,459 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-11-13 15:38:02,459 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-11-13 15:38:02,459 INFO L87 Difference]: Start difference. First operand 64560 states and 118646 transitions. cyclomatic complexity: 54104 Second operand has 3 states, 3 states have (on average 27.333333333333332) internal successors, (82), 3 states have internal predecessors, (82), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-13 15:38:04,990 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-13 15:38:04,991 INFO L93 Difference]: Finished difference Result 63762 states and 116423 transitions. [2024-11-13 15:38:04,991 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 63762 states and 116423 transitions. [2024-11-13 15:38:05,178 INFO L131 ngComponentsAnalysis]: Automaton has 12 accepting balls. 20907 [2024-11-13 15:38:05,659 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 63762 states to 63762 states and 116423 transitions. [2024-11-13 15:38:05,659 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 47686 [2024-11-13 15:38:05,685 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 47686 [2024-11-13 15:38:05,685 INFO L73 IsDeterministic]: Start isDeterministic. Operand 63762 states and 116423 transitions. [2024-11-13 15:38:05,699 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2024-11-13 15:38:05,700 INFO L218 hiAutomatonCegarLoop]: Abstraction has 63762 states and 116423 transitions. [2024-11-13 15:38:05,737 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 63762 states and 116423 transitions. [2024-11-13 15:38:06,179 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 63762 to 63705. [2024-11-13 15:38:06,226 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 63705 states, 63705 states have (on average 1.8266384114276744) internal successors, (116366), 63704 states have internal predecessors, (116366), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-13 15:38:06,618 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 63705 states to 63705 states and 116366 transitions. [2024-11-13 15:38:06,618 INFO L240 hiAutomatonCegarLoop]: Abstraction has 63705 states and 116366 transitions. [2024-11-13 15:38:06,618 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2024-11-13 15:38:06,619 INFO L424 stractBuchiCegarLoop]: Abstraction has 63705 states and 116366 transitions. [2024-11-13 15:38:06,619 INFO L331 stractBuchiCegarLoop]: ======== Iteration 8 ============ [2024-11-13 15:38:06,619 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 63705 states and 116366 transitions. [2024-11-13 15:38:06,735 INFO L131 ngComponentsAnalysis]: Automaton has 12 accepting balls. 20888 [2024-11-13 15:38:06,735 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-13 15:38:06,735 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-13 15:38:06,739 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-13 15:38:06,739 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-13 15:38:06,739 INFO L745 eck$LassoCheckResult]: Stem: 759722#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 759723#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret28#1, main_~retValue_acc~6#1, main_~tmp~11#1;havoc main_~retValue_acc~6#1;havoc main_~tmp~11#1;assume { :begin_inline_select_helpers } true; 765894#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 765447#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; 761282#valid_product_returnLabel#1 main_#t~ret28#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;assume { :end_inline_valid_product } true;main_~tmp~11#1 := main_#t~ret28#1;havoc main_#t~ret28#1; 761283#L692 assume 0 != main_~tmp~11#1;assume { :begin_inline_setup } true; 761498#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret21#1, bigMacCall_~tmp~8#1;havoc bigMacCall_~tmp~8#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 763228#L241 assume !(0 == getOrigin_~person#1); 765119#L245 assume !(1 == getOrigin_~person#1); 761785#L249 assume !(2 == getOrigin_~person#1); 761786#L253 assume !(3 == getOrigin_~person#1); 764123#L257 assume !(4 == getOrigin_~person#1); 766009#L261 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 764911#getOrigin_returnLabel#1 bigMacCall_#t~ret21#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~8#1 := bigMacCall_#t~ret21#1;havoc bigMacCall_#t~ret21#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~8#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 764912#L1431 assume 0 == initPersonOnFloor_~floor#1; 765704#L1432 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 759132#L1539-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 764761#L1223 assume !(0 == callOnFloor_~floorID#1); 759337#L1226 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 759338#L1235-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 762032#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 760563#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret21#1, bigMacCall_~tmp~8#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 760564#L1160 assume !(0 == isFloorCalling_~floorID#1); 761842#L1164 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 764149#isFloorCalling_returnLabel#1 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 773176#isExecutiveFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret76#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 772173#L2627 assume 0 != stopRequestedAtCurrentFloor_~tmp~22#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 766038#getCurrentFloorID_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret77#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret77#1;havoc stopRequestedAtCurrentFloor_#t~ret77#1; 764914#L2631 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 764916#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret92#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret92#1;havoc timeShift_#t~ret92#1; 771332#L2779 assume !(0 != timeShift_~tmp___9~2#1); 771329#L2870 assume !(1 == ~doorState~0); 771319#L2870-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 767836#L1160-3 assume !(0 == isFloorCalling_~floorID#1); 764571#L1164-3 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 764572#isFloorCalling_returnLabel#4 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 768039#isExecutiveFloorCalling_returnLabel#2 stopRequestedInDirection_#t~ret70#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1; 768035#L2510 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 768036#getCurrentFloorID_returnLabel#2 stopRequestedInDirection_#t~ret71#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~19#1 := stopRequestedInDirection_#t~ret71#1;havoc stopRequestedInDirection_#t~ret71#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~19#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 769270#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret99#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret99#1;havoc timeShift_#t~ret99#1; 769267#L2878 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1; 769264#L2567 assume !(1 == ~currentHeading~0); 769259#L2577 assume !(0 == ~currentFloorID~0); 769258#L2577-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 769237#L2583-1 havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 769228#L2887-2 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 769154#L1160-25 assume !(0 == isFloorCalling_~floorID#1); 764730#L1164-25 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 764731#isFloorCalling_returnLabel#26 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 766910#isExecutiveFloorCalling_returnLabel#4 __utac_acc__Specification14_spec__1_#t~ret11#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret11#1;havoc __utac_acc__Specification14_spec__1_#t~ret11#1; 766895#L330 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1); 766891#L330-1 havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :end_inline___utac_acc__Specification14_spec__1 } true; 766889#timeShift_returnLabel#1 havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 766793#L1160-26 assume !(0 == isFloorCalling_~floorID#1); 761372#L1164-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 761373#isFloorCalling_returnLabel#27 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 772431#isExecutiveFloorCalling_returnLabel#5 stopRequestedAtCurrentFloor_#t~ret76#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 772432#L2627-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~22#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 762243#getCurrentFloorID_returnLabel#5 stopRequestedAtCurrentFloor_#t~ret77#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret77#1;havoc stopRequestedAtCurrentFloor_#t~ret77#1; 762244#L2631-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 762727#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret92#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret92#1;havoc timeShift_#t~ret92#1; 779875#L2779-2 assume !(0 != timeShift_~tmp___9~2#1); 779876#L2870-3 assume 1 == ~doorState~0;~doorState~0 := 0; 779871#L2870-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 779872#L1160-29 assume !(0 == isFloorCalling_~floorID#1); 765039#L1164-29 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 759211#isFloorCalling_returnLabel#30 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 768019#isExecutiveFloorCalling_returnLabel#6 stopRequestedInDirection_#t~ret70#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1; 768017#L2510-2 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 768018#getCurrentFloorID_returnLabel#6 stopRequestedInDirection_#t~ret71#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~19#1 := stopRequestedInDirection_#t~ret71#1;havoc stopRequestedInDirection_#t~ret71#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~19#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 772991#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret99#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret99#1;havoc timeShift_#t~ret99#1; 772986#L2878-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1; 772980#L2567-3 assume !(1 == ~currentHeading~0); 772972#L2577-9 assume !(0 == ~currentFloorID~0); 772966#L2577-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 771374#L2583-7 havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 767402#L2887-5 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 766798#L1160-51 assume !(0 == isFloorCalling_~floorID#1); 765593#L1164-51 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 761024#isFloorCalling_returnLabel#52 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 768065#isExecutiveFloorCalling_returnLabel#8 __utac_acc__Specification14_spec__1_#t~ret11#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret11#1;havoc __utac_acc__Specification14_spec__1_#t~ret11#1; 768059#L330-2 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1); 768053#L330-3 havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :end_inline___utac_acc__Specification14_spec__1 } true; 768051#timeShift_returnLabel#2 havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 766803#L1160-52 assume !(0 == isFloorCalling_~floorID#1); 763530#L1164-52 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 761183#isFloorCalling_returnLabel#53 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 773211#isExecutiveFloorCalling_returnLabel#9 stopRequestedAtCurrentFloor_#t~ret76#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 773208#L2627-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~22#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 773206#getCurrentFloorID_returnLabel#9 stopRequestedAtCurrentFloor_#t~ret77#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret77#1;havoc stopRequestedAtCurrentFloor_#t~ret77#1; 772174#L2631-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 772175#stopRequestedAtCurrentFloor_returnLabel#3 timeShift_#t~ret92#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret92#1;havoc timeShift_#t~ret92#1; 772819#L2779-4 assume !(0 != timeShift_~tmp___9~2#1); 772815#L2870-6 assume !(1 == ~doorState~0); 772813#L2870-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 772811#L1160-55 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 772812#isFloorCalling_returnLabel#56 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 778278#isExecutiveFloorCalling_returnLabel#10 stopRequestedInDirection_#t~ret70#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1; 778275#L2510-4 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 778276#getCurrentFloorID_returnLabel#10 stopRequestedInDirection_#t~ret71#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~19#1 := stopRequestedInDirection_#t~ret71#1;havoc stopRequestedInDirection_#t~ret71#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~19#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 778212#stopRequestedInDirection_returnLabel#5 timeShift_#t~ret99#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret99#1;havoc timeShift_#t~ret99#1; 777995#L2878-4 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1; 777948#L2567-6 assume !(1 == ~currentHeading~0); 777933#L2577-18 assume !(0 == ~currentFloorID~0); 777923#L2577-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 777916#L2583-13 havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 777914#L2887-8 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 777909#L1160-77 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 777234#isFloorCalling_returnLabel#78 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 777908#isExecutiveFloorCalling_returnLabel#12 __utac_acc__Specification14_spec__1_#t~ret11#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret11#1;havoc __utac_acc__Specification14_spec__1_#t~ret11#1; 777901#L330-4 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1); 777897#L330-5 havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :end_inline___utac_acc__Specification14_spec__1 } true; 777896#timeShift_returnLabel#3 havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true; 777895#threeTS_returnLabel#1 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret16#1, bobCall_~tmp~3#1;havoc bobCall_~tmp~3#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 777889#L241-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 777733#getOrigin_returnLabel#2 bobCall_#t~ret16#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~3#1 := bobCall_#t~ret16#1;havoc bobCall_#t~ret16#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~3#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 777426#L1431-1 assume 0 == initPersonOnFloor_~floor#1; 777202#L1432-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 777155#L1539-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 777153#L1223-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 777154#L1235-5 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 780584#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 780583#bobCall_returnLabel#1 havoc bobCall_#t~ret16#1, bobCall_~tmp~3#1;assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret22#1, cleanup_#t~ret23#1, cleanup_~i~2#1, cleanup_~tmp~9#1, cleanup_~tmp___0~3#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~9#1;havoc cleanup_~tmp___0~3#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 780582#L1160-78 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 766810#isFloorCalling_returnLabel#79 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 780581#isExecutiveFloorCalling_returnLabel#13 stopRequestedAtCurrentFloor_#t~ret76#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 763057#L2627-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~22#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 763058#getCurrentFloorID_returnLabel#13 stopRequestedAtCurrentFloor_#t~ret77#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret77#1;havoc stopRequestedAtCurrentFloor_#t~ret77#1; 779379#L2631-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 761723#stopRequestedAtCurrentFloor_returnLabel#4 timeShift_#t~ret92#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret92#1;havoc timeShift_#t~ret92#1; 783669#L2779-6 assume !(0 != timeShift_~tmp___9~2#1); 783670#L2870-9 assume !(1 == ~doorState~0); 792078#L2870-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 792077#L1160-81 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 792076#isFloorCalling_returnLabel#82 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 792075#isExecutiveFloorCalling_returnLabel#14 stopRequestedInDirection_#t~ret70#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1; 759435#L2510-6 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 759437#getCurrentFloorID_returnLabel#14 stopRequestedInDirection_#t~ret71#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~19#1 := stopRequestedInDirection_#t~ret71#1;havoc stopRequestedInDirection_#t~ret71#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~19#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 763855#stopRequestedInDirection_returnLabel#7 timeShift_#t~ret99#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret99#1;havoc timeShift_#t~ret99#1; 763856#L2878-6 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1; 763920#L2567-9 assume !(1 == ~currentHeading~0); 761293#L2577-27 assume !(0 == ~currentFloorID~0); 761294#L2577-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 766792#L2583-19 havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 790638#L2887-11 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 790635#L1160-103 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 766818#isFloorCalling_returnLabel#104 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 790631#isExecutiveFloorCalling_returnLabel#16 __utac_acc__Specification14_spec__1_#t~ret11#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret11#1;havoc __utac_acc__Specification14_spec__1_#t~ret11#1; 790632#L330-6 assume 0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 793854#getCurrentFloorID_returnLabel#16 __utac_acc__Specification14_spec__1_#t~ret12#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification14_spec__1_~tmp~2#1 := __utac_acc__Specification14_spec__1_#t~ret12#1;havoc __utac_acc__Specification14_spec__1_#t~ret12#1;assume { :begin_inline_isExecutiveFloor } true;isExecutiveFloor_#in~floorID#1 := __utac_acc__Specification14_spec__1_~tmp~2#1;havoc isExecutiveFloor_#res#1;havoc isExecutiveFloor_~floorID#1, isExecutiveFloor_~retValue_acc~29#1;isExecutiveFloor_~floorID#1 := isExecutiveFloor_#in~floorID#1;havoc isExecutiveFloor_~retValue_acc~29#1;isExecutiveFloor_~retValue_acc~29#1 := (if ~executiveFloor~0 == isExecutiveFloor_~floorID#1 then 1 else 0);isExecutiveFloor_#res#1 := isExecutiveFloor_~retValue_acc~29#1; 793853#isExecutiveFloor_returnLabel#4 __utac_acc__Specification14_spec__1_#t~ret13#1 := isExecutiveFloor_#res#1;havoc isExecutiveFloor_~floorID#1, isExecutiveFloor_~retValue_acc~29#1;havoc isExecutiveFloor_#in~floorID#1;assume { :end_inline_isExecutiveFloor } true;__utac_acc__Specification14_spec__1_~tmp___0~2#1 := __utac_acc__Specification14_spec__1_#t~ret13#1;havoc __utac_acc__Specification14_spec__1_#t~ret13#1; 793851#L335-6 assume 0 != __utac_acc__Specification14_spec__1_~tmp___0~2#1; 793849#L330-7 havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :end_inline___utac_acc__Specification14_spec__1 } true; 793848#timeShift_returnLabel#4 havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 793845#L500-2 assume !false; 793846#L501 [2024-11-13 15:38:06,740 INFO L747 eck$LassoCheckResult]: Loop: 793846#L501 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 803510#L504 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 803494#isBlocked_returnLabel#1 cleanup_#t~ret22#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~3#1 := cleanup_#t~ret22#1;havoc cleanup_#t~ret22#1; 803491#L508 assume 1 != cleanup_~tmp___0~3#1; 803488#L508-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret58#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~17#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~17#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret53#1, anyStopRequested_#t~ret54#1, anyStopRequested_#t~ret55#1, anyStopRequested_#t~ret56#1, anyStopRequested_#t~ret57#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~16#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~16#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 803485#L1160-104 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 803482#isFloorCalling_returnLabel#105 anyStopRequested_#t~ret53#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret53#1;havoc anyStopRequested_#t~ret53#1; 803477#L2066 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 803459#anyStopRequested_returnLabel#1 isIdle_#t~ret58#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret53#1, anyStopRequested_#t~ret54#1, anyStopRequested_#t~ret55#1, anyStopRequested_#t~ret56#1, anyStopRequested_#t~ret57#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~16#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~17#1 := isIdle_#t~ret58#1;havoc isIdle_#t~ret58#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~17#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 803453#isIdle_returnLabel#1 cleanup_#t~ret23#1 := isIdle_#res#1;havoc isIdle_#t~ret58#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~17#1;assume { :end_inline_isIdle } true;cleanup_~tmp~9#1 := cleanup_#t~ret23#1;havoc cleanup_#t~ret23#1; 803438#L520 assume !(0 != cleanup_~tmp~9#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 803436#L1160-109 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 803431#isFloorCalling_returnLabel#110 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 803432#isExecutiveFloorCalling_returnLabel#17 stopRequestedAtCurrentFloor_#t~ret76#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 803425#L2627-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~22#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 803422#getCurrentFloorID_returnLabel#17 stopRequestedAtCurrentFloor_#t~ret77#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret77#1;havoc stopRequestedAtCurrentFloor_#t~ret77#1; 803415#L2631-4 assume ~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret74#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret75#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~21#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~21#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 803407#L1160-110 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 803405#isFloorCalling_returnLabel#111 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret74#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret74#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret74#1; 803404#L2600-8 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1; 803383#stopRequestedAtCurrentFloor__wrappee__empty_returnLabel#9 stopRequestedAtCurrentFloor_#t~ret78#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret74#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret75#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~21#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := stopRequestedAtCurrentFloor_#t~ret78#1;havoc stopRequestedAtCurrentFloor_#t~ret78#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 809916#stopRequestedAtCurrentFloor_returnLabel#5 timeShift_#t~ret92#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret92#1;havoc timeShift_#t~ret92#1; 809907#L2779-8 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 803352#L2781-8 assume !(0 != ~persons_0~0); 809849#L2781-9 assume !(0 != ~persons_1~0); 809839#L2795-4 assume !(0 != ~persons_2~0); 809812#L2809-4 assume !(0 != ~persons_3~0); 809799#L2823-4 assume !(0 != ~persons_4~0); 809793#L2837-4 assume !(0 != ~persons_5~0); 809789#L2851-4 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret80#1, processWaitingOnFloor_#t~ret81#1, processWaitingOnFloor_#t~ret82#1, processWaitingOnFloor_#t~ret83#1, processWaitingOnFloor_#t~ret84#1, processWaitingOnFloor_#t~ret85#1, processWaitingOnFloor_#t~ret86#1, processWaitingOnFloor_#t~ret87#1, processWaitingOnFloor_#t~ret88#1, processWaitingOnFloor_#t~ret89#1, processWaitingOnFloor_#t~ret90#1, processWaitingOnFloor_#t~ret91#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~23#1, processWaitingOnFloor_~tmp___0~10#1, processWaitingOnFloor_~tmp___1~6#1, processWaitingOnFloor_~tmp___2~4#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~23#1;havoc processWaitingOnFloor_~tmp___0~10#1;havoc processWaitingOnFloor_~tmp___1~6#1;havoc processWaitingOnFloor_~tmp___2~4#1;havoc processWaitingOnFloor_~tmp___3~2#1;havoc processWaitingOnFloor_~tmp___4~1#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~11#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~11#1; 809783#L1251-48 assume 0 == isPersonOnFloor_~floor#1; 809666#L1252-24 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~11#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~11#1; 809640#isPersonOnFloor_returnLabel#25 processWaitingOnFloor_#t~ret80#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~11#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~10#1 := processWaitingOnFloor_#t~ret80#1;havoc processWaitingOnFloor_#t~ret80#1; 809638#L2681-12 assume !(0 != processWaitingOnFloor_~tmp___0~10#1); 809636#L2681-14 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~11#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~11#1; 809634#L1251-50 assume 0 == isPersonOnFloor_~floor#1; 809635#L1252-25 assume !(0 == isPersonOnFloor_~person#1); 809607#L1256-25 assume 1 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~11#1 := ~personOnFloor_1_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~11#1; 809593#isPersonOnFloor_returnLabel#26 processWaitingOnFloor_#t~ret82#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~11#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~4#1 := processWaitingOnFloor_#t~ret82#1;havoc processWaitingOnFloor_#t~ret82#1; 809585#L2694-12 assume !(0 != processWaitingOnFloor_~tmp___2~4#1); 809583#L2694-14 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~11#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~11#1; 809580#L1251-52 assume 0 == isPersonOnFloor_~floor#1; 809575#L1252-26 assume !(0 == isPersonOnFloor_~person#1); 809568#L1256-26 assume !(1 == isPersonOnFloor_~person#1); 809562#L1260-26 assume 2 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~11#1 := ~personOnFloor_2_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~11#1; 806499#isPersonOnFloor_returnLabel#27 processWaitingOnFloor_#t~ret84#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~11#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~1#1 := processWaitingOnFloor_#t~ret84#1;havoc processWaitingOnFloor_#t~ret84#1; 806497#L2707-12 assume !(0 != processWaitingOnFloor_~tmp___4~1#1); 806495#L2707-14 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~11#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~11#1; 806493#L1251-54 assume 0 == isPersonOnFloor_~floor#1; 806494#L1252-27 assume !(0 == isPersonOnFloor_~person#1); 806479#L1256-27 assume 1 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~11#1 := ~personOnFloor_1_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~11#1; 806454#isPersonOnFloor_returnLabel#28 processWaitingOnFloor_#t~ret86#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~11#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret86#1;havoc processWaitingOnFloor_#t~ret86#1; 806452#L2720-12 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 806449#L2720-14 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~11#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~11#1; 806446#L1251-56 assume 0 == isPersonOnFloor_~floor#1; 806447#L1252-28 assume !(0 == isPersonOnFloor_~person#1); 806412#L1256-28 assume 1 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~11#1 := ~personOnFloor_1_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~11#1; 806394#isPersonOnFloor_returnLabel#29 processWaitingOnFloor_#t~ret88#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~11#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret88#1;havoc processWaitingOnFloor_#t~ret88#1; 806383#L2733-12 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 806380#L2733-14 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~11#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~11#1; 806377#L1251-58 assume 0 == isPersonOnFloor_~floor#1; 806376#L1252-29 assume !(0 == isPersonOnFloor_~person#1); 806299#L1256-29 assume 1 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~11#1 := ~personOnFloor_1_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~11#1; 806287#isPersonOnFloor_returnLabel#30 processWaitingOnFloor_#t~ret90#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~11#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret90#1;havoc processWaitingOnFloor_#t~ret90#1; 806278#L2746-12 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 806274#L2746-14 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 806272#L1195-68 assume !(0 == resetCallOnFloor_~floorID#1); 806267#L1198-68 assume 1 == resetCallOnFloor_~floorID#1;~calls_1~0 := 0; 805440#L1207-104 havoc resetCallOnFloor_~floorID#1;havoc resetCallOnFloor_#in~floorID#1;assume { :end_inline_resetCallOnFloor } true; 805439#processWaitingOnFloor_returnLabel#5 havoc processWaitingOnFloor_#t~ret80#1, processWaitingOnFloor_#t~ret81#1, processWaitingOnFloor_#t~ret82#1, processWaitingOnFloor_#t~ret83#1, processWaitingOnFloor_#t~ret84#1, processWaitingOnFloor_#t~ret85#1, processWaitingOnFloor_#t~ret86#1, processWaitingOnFloor_#t~ret87#1, processWaitingOnFloor_#t~ret88#1, processWaitingOnFloor_#t~ret89#1, processWaitingOnFloor_#t~ret90#1, processWaitingOnFloor_#t~ret91#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~23#1, processWaitingOnFloor_~tmp___0~10#1, processWaitingOnFloor_~tmp___1~6#1, processWaitingOnFloor_~tmp___2~4#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;havoc processWaitingOnFloor_#in~floorID#1;assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 805245#L1929-8 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 805232#L1941-14 havoc resetFloorButton_~floorID#1;havoc resetFloorButton_#in~floorID#1;assume { :end_inline_resetFloorButton } true; 805178#L2887-14 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 803571#L1160-134 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 802597#isFloorCalling_returnLabel#135 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 802598#isExecutiveFloorCalling_returnLabel#20 __utac_acc__Specification14_spec__1_#t~ret11#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret11#1;havoc __utac_acc__Specification14_spec__1_#t~ret11#1; 802593#L330-8 assume 0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 802594#getCurrentFloorID_returnLabel#20 __utac_acc__Specification14_spec__1_#t~ret12#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification14_spec__1_~tmp~2#1 := __utac_acc__Specification14_spec__1_#t~ret12#1;havoc __utac_acc__Specification14_spec__1_#t~ret12#1;assume { :begin_inline_isExecutiveFloor } true;isExecutiveFloor_#in~floorID#1 := __utac_acc__Specification14_spec__1_~tmp~2#1;havoc isExecutiveFloor_#res#1;havoc isExecutiveFloor_~floorID#1, isExecutiveFloor_~retValue_acc~29#1;isExecutiveFloor_~floorID#1 := isExecutiveFloor_#in~floorID#1;havoc isExecutiveFloor_~retValue_acc~29#1;isExecutiveFloor_~retValue_acc~29#1 := (if ~executiveFloor~0 == isExecutiveFloor_~floorID#1 then 1 else 0);isExecutiveFloor_#res#1 := isExecutiveFloor_~retValue_acc~29#1; 802589#isExecutiveFloor_returnLabel#5 __utac_acc__Specification14_spec__1_#t~ret13#1 := isExecutiveFloor_#res#1;havoc isExecutiveFloor_~floorID#1, isExecutiveFloor_~retValue_acc~29#1;havoc isExecutiveFloor_#in~floorID#1;assume { :end_inline_isExecutiveFloor } true;__utac_acc__Specification14_spec__1_~tmp___0~2#1 := __utac_acc__Specification14_spec__1_#t~ret13#1;havoc __utac_acc__Specification14_spec__1_#t~ret13#1; 802590#L335-8 assume 0 != __utac_acc__Specification14_spec__1_~tmp___0~2#1; 803537#L330-9 havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :end_inline___utac_acc__Specification14_spec__1 } true; 802584#timeShift_returnLabel#5 havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 803521#L500-2 assume !false; 793846#L501 [2024-11-13 15:38:06,741 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-13 15:38:06,741 INFO L85 PathProgramCache]: Analyzing trace with hash -1544056064, now seen corresponding path program 2 times [2024-11-13 15:38:06,741 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-13 15:38:06,741 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [527245985] [2024-11-13 15:38:06,741 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-13 15:38:06,742 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-13 15:38:06,781 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-13 15:38:06,989 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-13 15:38:06,990 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-13 15:38:06,990 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [527245985] [2024-11-13 15:38:06,990 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [527245985] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-13 15:38:06,990 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-13 15:38:06,990 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2024-11-13 15:38:06,990 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [438886332] [2024-11-13 15:38:06,990 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-13 15:38:06,991 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-13 15:38:06,991 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-13 15:38:06,991 INFO L85 PathProgramCache]: Analyzing trace with hash -1756798102, now seen corresponding path program 1 times [2024-11-13 15:38:06,991 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-13 15:38:06,991 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [960908459] [2024-11-13 15:38:06,992 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-13 15:38:06,992 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-13 15:38:07,019 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-13 15:38:07,057 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-13 15:38:07,057 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-13 15:38:07,057 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [960908459] [2024-11-13 15:38:07,058 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [960908459] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-13 15:38:07,058 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-13 15:38:07,058 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-13 15:38:07,059 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [429910399] [2024-11-13 15:38:07,059 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-13 15:38:07,060 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-13 15:38:07,060 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-13 15:38:07,060 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-11-13 15:38:07,061 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-11-13 15:38:07,061 INFO L87 Difference]: Start difference. First operand 63705 states and 116366 transitions. cyclomatic complexity: 52679 Second operand has 3 states, 3 states have (on average 27.666666666666668) internal successors, (83), 3 states have internal predecessors, (83), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-13 15:38:09,321 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-13 15:38:09,321 INFO L93 Difference]: Finished difference Result 63192 states and 114428 transitions. [2024-11-13 15:38:09,322 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 63192 states and 114428 transitions. [2024-11-13 15:38:09,635 INFO L131 ngComponentsAnalysis]: Automaton has 12 accepting balls. 20717 [2024-11-13 15:38:09,811 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 63192 states to 63192 states and 114428 transitions. [2024-11-13 15:38:09,811 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 47256 [2024-11-13 15:38:09,856 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 47256 [2024-11-13 15:38:09,857 INFO L73 IsDeterministic]: Start isDeterministic. Operand 63192 states and 114428 transitions. [2024-11-13 15:38:09,880 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2024-11-13 15:38:09,880 INFO L218 hiAutomatonCegarLoop]: Abstraction has 63192 states and 114428 transitions. [2024-11-13 15:38:09,930 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 63192 states and 114428 transitions. [2024-11-13 15:38:10,783 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 63192 to 63135. [2024-11-13 15:38:10,829 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 63135 states, 63135 states have (on average 1.8115308465985587) internal successors, (114371), 63134 states have internal predecessors, (114371), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-13 15:38:10,917 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 63135 states to 63135 states and 114371 transitions. [2024-11-13 15:38:10,917 INFO L240 hiAutomatonCegarLoop]: Abstraction has 63135 states and 114371 transitions. [2024-11-13 15:38:10,918 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2024-11-13 15:38:10,918 INFO L424 stractBuchiCegarLoop]: Abstraction has 63135 states and 114371 transitions. [2024-11-13 15:38:10,918 INFO L331 stractBuchiCegarLoop]: ======== Iteration 9 ============ [2024-11-13 15:38:10,918 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 63135 states and 114371 transitions. [2024-11-13 15:38:11,047 INFO L131 ngComponentsAnalysis]: Automaton has 12 accepting balls. 20698 [2024-11-13 15:38:11,047 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-13 15:38:11,047 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-13 15:38:11,050 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-13 15:38:11,050 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-13 15:38:11,050 INFO L745 eck$LassoCheckResult]: Stem: 886629#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 886630#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret28#1, main_~retValue_acc~6#1, main_~tmp~11#1;havoc main_~retValue_acc~6#1;havoc main_~tmp~11#1;assume { :begin_inline_select_helpers } true; 892815#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 892386#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; 888175#valid_product_returnLabel#1 main_#t~ret28#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;assume { :end_inline_valid_product } true;main_~tmp~11#1 := main_#t~ret28#1;havoc main_#t~ret28#1; 888176#L692 assume 0 != main_~tmp~11#1;assume { :begin_inline_setup } true; 888391#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret21#1, bigMacCall_~tmp~8#1;havoc bigMacCall_~tmp~8#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 890126#L241 assume !(0 == getOrigin_~person#1); 892047#L245 assume !(1 == getOrigin_~person#1); 888682#L249 assume !(2 == getOrigin_~person#1); 888683#L253 assume !(3 == getOrigin_~person#1); 891025#L257 assume !(4 == getOrigin_~person#1); 892932#L261 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 891832#getOrigin_returnLabel#1 bigMacCall_#t~ret21#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~8#1 := bigMacCall_#t~ret21#1;havoc bigMacCall_#t~ret21#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~8#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 891833#L1431 assume 0 == initPersonOnFloor_~floor#1; 892629#L1432 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 886039#L1539-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 891674#L1223 assume !(0 == callOnFloor_~floorID#1); 886246#L1226 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 886247#L1235-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 888925#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 887464#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret21#1, bigMacCall_~tmp~8#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 887465#L1160 assume !(0 == isFloorCalling_~floorID#1); 888738#L1164 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 891050#isFloorCalling_returnLabel#1 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 898270#isExecutiveFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret76#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 896069#L2627 assume 0 != stopRequestedAtCurrentFloor_~tmp~22#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 892959#getCurrentFloorID_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret77#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret77#1;havoc stopRequestedAtCurrentFloor_#t~ret77#1; 891836#L2631 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 891838#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret92#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret92#1;havoc timeShift_#t~ret92#1; 897862#L2779 assume !(0 != timeShift_~tmp___9~2#1); 898088#L2870 assume !(1 == ~doorState~0); 898086#L2870-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 898080#L1160-3 assume !(0 == isFloorCalling_~floorID#1); 891475#L1164-3 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 891476#isFloorCalling_returnLabel#4 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 895163#isExecutiveFloorCalling_returnLabel#2 stopRequestedInDirection_#t~ret70#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1; 895160#L2510 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 893200#getCurrentFloorID_returnLabel#2 stopRequestedInDirection_#t~ret71#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~19#1 := stopRequestedInDirection_#t~ret71#1;havoc stopRequestedInDirection_#t~ret71#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~19#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 893201#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret99#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret99#1;havoc timeShift_#t~ret99#1; 895330#L2878 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1; 895331#L2567 assume !(1 == ~currentHeading~0); 895448#L2577 assume !(0 == ~currentFloorID~0); 895445#L2577-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 895202#L2583-1 havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 895196#L2887-2 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 894968#L1160-25 assume !(0 == isFloorCalling_~floorID#1); 891641#L1164-25 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 891642#isFloorCalling_returnLabel#26 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 894898#isExecutiveFloorCalling_returnLabel#4 __utac_acc__Specification14_spec__1_#t~ret11#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret11#1;havoc __utac_acc__Specification14_spec__1_#t~ret11#1; 894892#L330 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1); 894883#L330-1 havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :end_inline___utac_acc__Specification14_spec__1 } true; 894383#timeShift_returnLabel#1 havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 893749#L1160-26 assume !(0 == isFloorCalling_~floorID#1); 888268#L1164-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 888269#isFloorCalling_returnLabel#27 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 895105#isExecutiveFloorCalling_returnLabel#5 stopRequestedAtCurrentFloor_#t~ret76#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 895104#L2627-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~22#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 895103#getCurrentFloorID_returnLabel#5 stopRequestedAtCurrentFloor_#t~ret77#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret77#1;havoc stopRequestedAtCurrentFloor_#t~ret77#1; 895101#L2631-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 891087#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret92#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret92#1;havoc timeShift_#t~ret92#1; 891088#L2779-2 assume !(0 != timeShift_~tmp___9~2#1); 893045#L2870-3 assume 1 == ~doorState~0;~doorState~0 := 0; 891860#L2870-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 891861#L1160-29 assume !(0 == isFloorCalling_~floorID#1); 891967#L1164-29 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 886119#isFloorCalling_returnLabel#30 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 899324#isExecutiveFloorCalling_returnLabel#6 stopRequestedInDirection_#t~ret70#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1; 899320#L2510-2 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 899321#getCurrentFloorID_returnLabel#6 stopRequestedInDirection_#t~ret71#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~19#1 := stopRequestedInDirection_#t~ret71#1;havoc stopRequestedInDirection_#t~ret71#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~19#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 902616#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret99#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret99#1;havoc timeShift_#t~ret99#1; 902612#L2878-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1; 902610#L2567-3 assume !(1 == ~currentHeading~0); 902611#L2577-9 assume !(0 == ~currentFloorID~0); 899296#L2577-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 899297#L2583-7 havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 899257#L2887-5 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 899258#L1160-51 assume !(0 == isFloorCalling_~floorID#1); 892526#L1164-51 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 887919#isFloorCalling_returnLabel#52 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 897375#isExecutiveFloorCalling_returnLabel#8 __utac_acc__Specification14_spec__1_#t~ret11#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret11#1;havoc __utac_acc__Specification14_spec__1_#t~ret11#1; 897376#L330-2 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1); 897362#L330-3 havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :end_inline___utac_acc__Specification14_spec__1 } true; 897363#timeShift_returnLabel#2 havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 893758#L1160-52 assume !(0 == isFloorCalling_~floorID#1); 890433#L1164-52 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 888077#isFloorCalling_returnLabel#53 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 897382#isExecutiveFloorCalling_returnLabel#9 stopRequestedAtCurrentFloor_#t~ret76#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 897380#L2627-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~22#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 897377#getCurrentFloorID_returnLabel#9 stopRequestedAtCurrentFloor_#t~ret77#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret77#1;havoc stopRequestedAtCurrentFloor_#t~ret77#1; 893764#L2631-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 893765#stopRequestedAtCurrentFloor_returnLabel#3 timeShift_#t~ret92#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret92#1;havoc timeShift_#t~ret92#1; 899298#L2779-4 assume !(0 != timeShift_~tmp___9~2#1); 899291#L2870-6 assume !(1 == ~doorState~0); 897383#L2870-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 895116#L1160-55 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 895117#isFloorCalling_returnLabel#56 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 905551#isExecutiveFloorCalling_returnLabel#10 stopRequestedInDirection_#t~ret70#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1; 905492#L2510-4 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 905490#getCurrentFloorID_returnLabel#10 stopRequestedInDirection_#t~ret71#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~19#1 := stopRequestedInDirection_#t~ret71#1;havoc stopRequestedInDirection_#t~ret71#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~19#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 905488#stopRequestedInDirection_returnLabel#5 timeShift_#t~ret99#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret99#1;havoc timeShift_#t~ret99#1; 905483#L2878-4 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1; 905481#L2567-6 assume !(1 == ~currentHeading~0); 905482#L2577-18 assume !(0 == ~currentFloorID~0); 893056#L2577-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 890229#L2583-13 havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 889291#L2887-8 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 889816#L1160-77 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 889817#isFloorCalling_returnLabel#78 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 906124#isExecutiveFloorCalling_returnLabel#12 __utac_acc__Specification14_spec__1_#t~ret11#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret11#1;havoc __utac_acc__Specification14_spec__1_#t~ret11#1; 906123#L330-4 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1); 887901#L330-5 havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :end_inline___utac_acc__Specification14_spec__1 } true; 887028#timeShift_returnLabel#3 havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true; 886198#threeTS_returnLabel#1 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret16#1, bobCall_~tmp~3#1;havoc bobCall_~tmp~3#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 886199#L241-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 887225#getOrigin_returnLabel#2 bobCall_#t~ret16#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~3#1 := bobCall_#t~ret16#1;havoc bobCall_#t~ret16#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~3#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 893142#L1431-1 assume 0 == initPersonOnFloor_~floor#1; 888208#L1432-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 886097#L1539-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 891136#L1223-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 891137#L1235-5 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 907999#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 907998#bobCall_returnLabel#1 havoc bobCall_#t~ret16#1, bobCall_~tmp~3#1;assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret22#1, cleanup_#t~ret23#1, cleanup_~i~2#1, cleanup_~tmp~9#1, cleanup_~tmp___0~3#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~9#1;havoc cleanup_~tmp___0~3#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 907937#L1160-78 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 907936#isFloorCalling_returnLabel#79 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 907935#isExecutiveFloorCalling_returnLabel#13 stopRequestedAtCurrentFloor_#t~ret76#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 902744#L2627-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~22#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 893343#getCurrentFloorID_returnLabel#13 stopRequestedAtCurrentFloor_#t~ret77#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret77#1;havoc stopRequestedAtCurrentFloor_#t~ret77#1; 893344#L2631-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 888620#stopRequestedAtCurrentFloor_returnLabel#4 timeShift_#t~ret92#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret92#1;havoc timeShift_#t~ret92#1; 903058#L2779-6 assume !(0 != timeShift_~tmp___9~2#1); 891042#L2870-9 assume !(1 == ~doorState~0); 886187#L2870-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 886188#L1160-81 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 886566#isFloorCalling_returnLabel#82 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 891280#isExecutiveFloorCalling_returnLabel#14 stopRequestedInDirection_#t~ret70#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1; 886345#L2510-6 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 886347#getCurrentFloorID_returnLabel#14 stopRequestedInDirection_#t~ret71#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~19#1 := stopRequestedInDirection_#t~ret71#1;havoc stopRequestedInDirection_#t~ret71#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~19#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 912002#stopRequestedInDirection_returnLabel#7 timeShift_#t~ret99#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret99#1;havoc timeShift_#t~ret99#1; 890822#L2878-6 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1; 890823#L2567-9 assume !(1 == ~currentHeading~0); 911967#L2577-27 assume !(0 == ~currentFloorID~0); 893745#L2577-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 893746#L2583-19 havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 911964#L2887-11 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 910938#L1160-103 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 910939#isFloorCalling_returnLabel#104 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 893676#isExecutiveFloorCalling_returnLabel#16 __utac_acc__Specification14_spec__1_#t~ret11#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret11#1;havoc __utac_acc__Specification14_spec__1_#t~ret11#1; 893677#L330-6 assume 0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 913172#getCurrentFloorID_returnLabel#16 __utac_acc__Specification14_spec__1_#t~ret12#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification14_spec__1_~tmp~2#1 := __utac_acc__Specification14_spec__1_#t~ret12#1;havoc __utac_acc__Specification14_spec__1_#t~ret12#1;assume { :begin_inline_isExecutiveFloor } true;isExecutiveFloor_#in~floorID#1 := __utac_acc__Specification14_spec__1_~tmp~2#1;havoc isExecutiveFloor_#res#1;havoc isExecutiveFloor_~floorID#1, isExecutiveFloor_~retValue_acc~29#1;isExecutiveFloor_~floorID#1 := isExecutiveFloor_#in~floorID#1;havoc isExecutiveFloor_~retValue_acc~29#1;isExecutiveFloor_~retValue_acc~29#1 := (if ~executiveFloor~0 == isExecutiveFloor_~floorID#1 then 1 else 0);isExecutiveFloor_#res#1 := isExecutiveFloor_~retValue_acc~29#1; 913171#isExecutiveFloor_returnLabel#4 __utac_acc__Specification14_spec__1_#t~ret13#1 := isExecutiveFloor_#res#1;havoc isExecutiveFloor_~floorID#1, isExecutiveFloor_~retValue_acc~29#1;havoc isExecutiveFloor_#in~floorID#1;assume { :end_inline_isExecutiveFloor } true;__utac_acc__Specification14_spec__1_~tmp___0~2#1 := __utac_acc__Specification14_spec__1_#t~ret13#1;havoc __utac_acc__Specification14_spec__1_#t~ret13#1; 913169#L335-6 assume 0 != __utac_acc__Specification14_spec__1_~tmp___0~2#1; 913167#L330-7 havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :end_inline___utac_acc__Specification14_spec__1 } true; 913166#timeShift_returnLabel#4 havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 913162#L500-2 assume !false; 913163#L501 [2024-11-13 15:38:11,051 INFO L747 eck$LassoCheckResult]: Loop: 913163#L501 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 930474#L504 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 930473#isBlocked_returnLabel#1 cleanup_#t~ret22#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~3#1 := cleanup_#t~ret22#1;havoc cleanup_#t~ret22#1; 930472#L508 assume 1 != cleanup_~tmp___0~3#1; 930471#L508-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret58#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~17#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~17#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret53#1, anyStopRequested_#t~ret54#1, anyStopRequested_#t~ret55#1, anyStopRequested_#t~ret56#1, anyStopRequested_#t~ret57#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~16#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~16#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 930470#L1160-104 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 930469#isFloorCalling_returnLabel#105 anyStopRequested_#t~ret53#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret53#1;havoc anyStopRequested_#t~ret53#1; 930468#L2066 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 930467#anyStopRequested_returnLabel#1 isIdle_#t~ret58#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret53#1, anyStopRequested_#t~ret54#1, anyStopRequested_#t~ret55#1, anyStopRequested_#t~ret56#1, anyStopRequested_#t~ret57#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~16#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~17#1 := isIdle_#t~ret58#1;havoc isIdle_#t~ret58#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~17#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 930466#isIdle_returnLabel#1 cleanup_#t~ret23#1 := isIdle_#res#1;havoc isIdle_#t~ret58#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~17#1;assume { :end_inline_isIdle } true;cleanup_~tmp~9#1 := cleanup_#t~ret23#1;havoc cleanup_#t~ret23#1; 930465#L520 assume !(0 != cleanup_~tmp~9#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 930464#L1160-109 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 930461#isFloorCalling_returnLabel#110 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 930460#isExecutiveFloorCalling_returnLabel#17 stopRequestedAtCurrentFloor_#t~ret76#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 930458#L2627-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~22#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 930456#getCurrentFloorID_returnLabel#17 stopRequestedAtCurrentFloor_#t~ret77#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret77#1;havoc stopRequestedAtCurrentFloor_#t~ret77#1; 930453#L2631-4 assume ~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret74#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret75#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~21#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~21#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 930421#L1160-110 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 930419#isFloorCalling_returnLabel#111 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret74#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret74#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret74#1; 930416#L2600-8 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1; 887750#stopRequestedAtCurrentFloor__wrappee__empty_returnLabel#9 stopRequestedAtCurrentFloor_#t~ret78#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret74#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret75#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~21#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := stopRequestedAtCurrentFloor_#t~ret78#1;havoc stopRequestedAtCurrentFloor_#t~ret78#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 887751#stopRequestedAtCurrentFloor_returnLabel#5 timeShift_#t~ret92#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret92#1;havoc timeShift_#t~ret92#1; 947398#L2779-8 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 929806#L2781-8 assume !(0 != ~persons_0~0); 947341#L2781-9 assume !(0 != ~persons_1~0); 947175#L2795-4 assume !(0 != ~persons_2~0); 947170#L2809-4 assume !(0 != ~persons_3~0); 947164#L2823-4 assume !(0 != ~persons_4~0); 947156#L2837-4 assume !(0 != ~persons_5~0); 947151#L2851-4 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret80#1, processWaitingOnFloor_#t~ret81#1, processWaitingOnFloor_#t~ret82#1, processWaitingOnFloor_#t~ret83#1, processWaitingOnFloor_#t~ret84#1, processWaitingOnFloor_#t~ret85#1, processWaitingOnFloor_#t~ret86#1, processWaitingOnFloor_#t~ret87#1, processWaitingOnFloor_#t~ret88#1, processWaitingOnFloor_#t~ret89#1, processWaitingOnFloor_#t~ret90#1, processWaitingOnFloor_#t~ret91#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~23#1, processWaitingOnFloor_~tmp___0~10#1, processWaitingOnFloor_~tmp___1~6#1, processWaitingOnFloor_~tmp___2~4#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~23#1;havoc processWaitingOnFloor_~tmp___0~10#1;havoc processWaitingOnFloor_~tmp___1~6#1;havoc processWaitingOnFloor_~tmp___2~4#1;havoc processWaitingOnFloor_~tmp___3~2#1;havoc processWaitingOnFloor_~tmp___4~1#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~11#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~11#1; 947149#L1251-48 assume 0 == isPersonOnFloor_~floor#1; 947134#L1252-24 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~11#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~11#1; 947102#isPersonOnFloor_returnLabel#25 processWaitingOnFloor_#t~ret80#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~11#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~10#1 := processWaitingOnFloor_#t~ret80#1;havoc processWaitingOnFloor_#t~ret80#1; 947100#L2681-12 assume !(0 != processWaitingOnFloor_~tmp___0~10#1); 947098#L2681-14 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~11#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~11#1; 947096#L1251-50 assume 0 == isPersonOnFloor_~floor#1; 947097#L1252-25 assume !(0 == isPersonOnFloor_~person#1); 947067#L1256-25 assume 1 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~11#1 := ~personOnFloor_1_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~11#1; 947047#isPersonOnFloor_returnLabel#26 processWaitingOnFloor_#t~ret82#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~11#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~4#1 := processWaitingOnFloor_#t~ret82#1;havoc processWaitingOnFloor_#t~ret82#1; 947038#L2694-12 assume !(0 != processWaitingOnFloor_~tmp___2~4#1); 947036#L2694-14 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~11#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~11#1; 947031#L1251-52 assume 0 == isPersonOnFloor_~floor#1; 947032#L1252-26 assume !(0 == isPersonOnFloor_~person#1); 947021#L1256-26 assume !(1 == isPersonOnFloor_~person#1); 947010#L1260-26 assume 2 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~11#1 := ~personOnFloor_2_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~11#1; 947008#isPersonOnFloor_returnLabel#27 processWaitingOnFloor_#t~ret84#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~11#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~1#1 := processWaitingOnFloor_#t~ret84#1;havoc processWaitingOnFloor_#t~ret84#1; 947000#L2707-12 assume !(0 != processWaitingOnFloor_~tmp___4~1#1); 946998#L2707-14 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~11#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~11#1; 946996#L1251-54 assume 0 == isPersonOnFloor_~floor#1; 946992#L1252-27 assume !(0 == isPersonOnFloor_~person#1); 946985#L1256-27 assume !(1 == isPersonOnFloor_~person#1); 946978#L1260-27 assume !(2 == isPersonOnFloor_~person#1); 946972#L1264-27 assume 3 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~11#1 := ~personOnFloor_3_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~11#1; 931859#isPersonOnFloor_returnLabel#28 processWaitingOnFloor_#t~ret86#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~11#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret86#1;havoc processWaitingOnFloor_#t~ret86#1; 931857#L2720-12 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 931855#L2720-14 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~11#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~11#1; 931853#L1251-56 assume 0 == isPersonOnFloor_~floor#1; 931854#L1252-28 assume !(0 == isPersonOnFloor_~person#1); 931831#L1256-28 assume 1 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~11#1 := ~personOnFloor_1_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~11#1; 931818#isPersonOnFloor_returnLabel#29 processWaitingOnFloor_#t~ret88#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~11#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret88#1;havoc processWaitingOnFloor_#t~ret88#1; 931809#L2733-12 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 931808#L2733-14 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~11#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~11#1; 931806#L1251-58 assume 0 == isPersonOnFloor_~floor#1; 931807#L1252-29 assume !(0 == isPersonOnFloor_~person#1); 931777#L1256-29 assume 1 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~11#1 := ~personOnFloor_1_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~11#1; 931765#isPersonOnFloor_returnLabel#30 processWaitingOnFloor_#t~ret90#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~11#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret90#1;havoc processWaitingOnFloor_#t~ret90#1; 931763#L2746-12 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 931761#L2746-14 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 931759#L1195-68 assume !(0 == resetCallOnFloor_~floorID#1); 931756#L1198-68 assume 1 == resetCallOnFloor_~floorID#1;~calls_1~0 := 0; 931750#L1207-104 havoc resetCallOnFloor_~floorID#1;havoc resetCallOnFloor_#in~floorID#1;assume { :end_inline_resetCallOnFloor } true; 929273#processWaitingOnFloor_returnLabel#5 havoc processWaitingOnFloor_#t~ret80#1, processWaitingOnFloor_#t~ret81#1, processWaitingOnFloor_#t~ret82#1, processWaitingOnFloor_#t~ret83#1, processWaitingOnFloor_#t~ret84#1, processWaitingOnFloor_#t~ret85#1, processWaitingOnFloor_#t~ret86#1, processWaitingOnFloor_#t~ret87#1, processWaitingOnFloor_#t~ret88#1, processWaitingOnFloor_#t~ret89#1, processWaitingOnFloor_#t~ret90#1, processWaitingOnFloor_#t~ret91#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~23#1, processWaitingOnFloor_~tmp___0~10#1, processWaitingOnFloor_~tmp___1~6#1, processWaitingOnFloor_~tmp___2~4#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;havoc processWaitingOnFloor_#in~floorID#1;assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 929119#L1929-8 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 929102#L1941-14 havoc resetFloorButton_~floorID#1;havoc resetFloorButton_#in~floorID#1;assume { :end_inline_resetFloorButton } true; 929098#L2887-14 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 929095#L1160-134 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 929094#isFloorCalling_returnLabel#135 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 929093#isExecutiveFloorCalling_returnLabel#20 __utac_acc__Specification14_spec__1_#t~ret11#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret11#1;havoc __utac_acc__Specification14_spec__1_#t~ret11#1; 929092#L330-8 assume 0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 929091#getCurrentFloorID_returnLabel#20 __utac_acc__Specification14_spec__1_#t~ret12#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification14_spec__1_~tmp~2#1 := __utac_acc__Specification14_spec__1_#t~ret12#1;havoc __utac_acc__Specification14_spec__1_#t~ret12#1;assume { :begin_inline_isExecutiveFloor } true;isExecutiveFloor_#in~floorID#1 := __utac_acc__Specification14_spec__1_~tmp~2#1;havoc isExecutiveFloor_#res#1;havoc isExecutiveFloor_~floorID#1, isExecutiveFloor_~retValue_acc~29#1;isExecutiveFloor_~floorID#1 := isExecutiveFloor_#in~floorID#1;havoc isExecutiveFloor_~retValue_acc~29#1;isExecutiveFloor_~retValue_acc~29#1 := (if ~executiveFloor~0 == isExecutiveFloor_~floorID#1 then 1 else 0);isExecutiveFloor_#res#1 := isExecutiveFloor_~retValue_acc~29#1; 929090#isExecutiveFloor_returnLabel#5 __utac_acc__Specification14_spec__1_#t~ret13#1 := isExecutiveFloor_#res#1;havoc isExecutiveFloor_~floorID#1, isExecutiveFloor_~retValue_acc~29#1;havoc isExecutiveFloor_#in~floorID#1;assume { :end_inline_isExecutiveFloor } true;__utac_acc__Specification14_spec__1_~tmp___0~2#1 := __utac_acc__Specification14_spec__1_#t~ret13#1;havoc __utac_acc__Specification14_spec__1_#t~ret13#1; 929087#L335-8 assume 0 != __utac_acc__Specification14_spec__1_~tmp___0~2#1; 929088#L330-9 havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :end_inline___utac_acc__Specification14_spec__1 } true; 929085#timeShift_returnLabel#5 havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 930475#L500-2 assume !false; 913163#L501 [2024-11-13 15:38:11,051 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-13 15:38:11,051 INFO L85 PathProgramCache]: Analyzing trace with hash -1544056064, now seen corresponding path program 3 times [2024-11-13 15:38:11,051 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-13 15:38:11,051 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1829852128] [2024-11-13 15:38:11,052 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-13 15:38:11,052 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-13 15:38:11,102 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-13 15:38:11,309 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-13 15:38:11,309 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-13 15:38:11,309 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1829852128] [2024-11-13 15:38:11,309 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1829852128] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-13 15:38:11,309 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-13 15:38:11,309 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2024-11-13 15:38:11,310 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [10283908] [2024-11-13 15:38:11,310 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-13 15:38:11,310 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-13 15:38:11,310 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-13 15:38:11,310 INFO L85 PathProgramCache]: Analyzing trace with hash 786174895, now seen corresponding path program 1 times [2024-11-13 15:38:11,310 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-13 15:38:11,310 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1864402183] [2024-11-13 15:38:11,310 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-13 15:38:11,310 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-13 15:38:11,340 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-13 15:38:11,397 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-13 15:38:11,397 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-13 15:38:11,397 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1864402183] [2024-11-13 15:38:11,398 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1864402183] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-13 15:38:11,398 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-13 15:38:11,398 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-13 15:38:11,398 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [27390494] [2024-11-13 15:38:11,398 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-13 15:38:11,398 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-13 15:38:11,398 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-13 15:38:11,398 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-11-13 15:38:11,398 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-11-13 15:38:11,399 INFO L87 Difference]: Start difference. First operand 63135 states and 114371 transitions. cyclomatic complexity: 51254 Second operand has 3 states, 3 states have (on average 28.333333333333332) internal successors, (85), 3 states have internal predecessors, (85), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-13 15:38:13,717 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-13 15:38:13,717 INFO L93 Difference]: Finished difference Result 63363 states and 112889 transitions. [2024-11-13 15:38:13,718 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 63363 states and 112889 transitions. [2024-11-13 15:38:13,896 INFO L131 ngComponentsAnalysis]: Automaton has 12 accepting balls. 20774 [2024-11-13 15:38:14,032 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 63363 states to 63363 states and 112889 transitions. [2024-11-13 15:38:14,032 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 47385 [2024-11-13 15:38:14,060 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 47385 [2024-11-13 15:38:14,060 INFO L73 IsDeterministic]: Start isDeterministic. Operand 63363 states and 112889 transitions. [2024-11-13 15:38:14,079 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2024-11-13 15:38:14,079 INFO L218 hiAutomatonCegarLoop]: Abstraction has 63363 states and 112889 transitions. [2024-11-13 15:38:14,120 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 63363 states and 112889 transitions. [2024-11-13 15:38:15,069 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 63363 to 63135. [2024-11-13 15:38:15,114 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 63135 states, 63135 states have (on average 1.7844460283519443) internal successors, (112661), 63134 states have internal predecessors, (112661), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-13 15:38:15,202 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 63135 states to 63135 states and 112661 transitions. [2024-11-13 15:38:15,202 INFO L240 hiAutomatonCegarLoop]: Abstraction has 63135 states and 112661 transitions. [2024-11-13 15:38:15,202 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2024-11-13 15:38:15,203 INFO L424 stractBuchiCegarLoop]: Abstraction has 63135 states and 112661 transitions. [2024-11-13 15:38:15,203 INFO L331 stractBuchiCegarLoop]: ======== Iteration 10 ============ [2024-11-13 15:38:15,203 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 63135 states and 112661 transitions. [2024-11-13 15:38:15,330 INFO L131 ngComponentsAnalysis]: Automaton has 12 accepting balls. 20698 [2024-11-13 15:38:15,331 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-13 15:38:15,331 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-13 15:38:15,333 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-13 15:38:15,333 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1] [2024-11-13 15:38:15,334 INFO L745 eck$LassoCheckResult]: Stem: 1013132#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 1013133#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret28#1, main_~retValue_acc~6#1, main_~tmp~11#1;havoc main_~retValue_acc~6#1;havoc main_~tmp~11#1;assume { :begin_inline_select_helpers } true; 1019267#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1018838#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; 1014701#valid_product_returnLabel#1 main_#t~ret28#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;assume { :end_inline_valid_product } true;main_~tmp~11#1 := main_#t~ret28#1;havoc main_#t~ret28#1; 1014702#L692 assume 0 != main_~tmp~11#1;assume { :begin_inline_setup } true; 1014914#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret21#1, bigMacCall_~tmp~8#1;havoc bigMacCall_~tmp~8#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 1016654#L241 assume !(0 == getOrigin_~person#1); 1018513#L245 assume !(1 == getOrigin_~person#1); 1015205#L249 assume !(2 == getOrigin_~person#1); 1015206#L253 assume !(3 == getOrigin_~person#1); 1017540#L257 assume !(4 == getOrigin_~person#1); 1019393#L261 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 1018313#getOrigin_returnLabel#1 bigMacCall_#t~ret21#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~8#1 := bigMacCall_#t~ret21#1;havoc bigMacCall_#t~ret21#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~8#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1018314#L1431 assume 0 == initPersonOnFloor_~floor#1; 1019077#L1432 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 1012547#L1539-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1018169#L1223 assume !(0 == callOnFloor_~floorID#1); 1012750#L1226 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1012751#L1235-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 1015451#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 1013979#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret21#1, bigMacCall_~tmp~8#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 1013980#L1160 assume !(0 == isFloorCalling_~floorID#1); 1015261#L1164 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 1017564#isFloorCalling_returnLabel#1 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 1022201#isExecutiveFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret76#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 1022199#L2627 assume 0 != stopRequestedAtCurrentFloor_~tmp~22#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1019419#getCurrentFloorID_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret77#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret77#1;havoc stopRequestedAtCurrentFloor_#t~ret77#1; 1018317#L2631 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 1018319#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret92#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret92#1;havoc timeShift_#t~ret92#1; 1023776#L2779 assume !(0 != timeShift_~tmp___9~2#1); 1023453#L2870 assume !(1 == ~doorState~0); 1022068#L2870-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 1021824#L1160-3 assume !(0 == isFloorCalling_~floorID#1); 1017978#L1164-3 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 1017979#isFloorCalling_returnLabel#4 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 1020696#isExecutiveFloorCalling_returnLabel#2 stopRequestedInDirection_#t~ret70#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1; 1020693#L2510 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1020694#getCurrentFloorID_returnLabel#2 stopRequestedInDirection_#t~ret71#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~19#1 := stopRequestedInDirection_#t~ret71#1;havoc stopRequestedInDirection_#t~ret71#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~19#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 1021326#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret99#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret99#1;havoc timeShift_#t~ret99#1; 1021324#L2878 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1; 1021322#L2567 assume !(1 == ~currentHeading~0); 1021229#L2577 assume !(0 == ~currentFloorID~0); 1021227#L2577-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1021212#L2583-1 havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1021208#L2887-2 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 1021203#L1160-25 assume !(0 == isFloorCalling_~floorID#1); 1018138#L1164-25 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 1018139#isFloorCalling_returnLabel#26 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 1020901#isExecutiveFloorCalling_returnLabel#4 __utac_acc__Specification14_spec__1_#t~ret11#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret11#1;havoc __utac_acc__Specification14_spec__1_#t~ret11#1; 1020897#L330 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1); 1020893#L330-1 havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :end_inline___utac_acc__Specification14_spec__1 } true; 1020891#timeShift_returnLabel#1 havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 1020234#L1160-26 assume !(0 == isFloorCalling_~floorID#1); 1020235#L1164-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 1032453#isFloorCalling_returnLabel#27 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 1032256#isExecutiveFloorCalling_returnLabel#5 stopRequestedAtCurrentFloor_#t~ret76#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 1032230#L2627-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~22#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1032224#getCurrentFloorID_returnLabel#5 stopRequestedAtCurrentFloor_#t~ret77#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret77#1;havoc stopRequestedAtCurrentFloor_#t~ret77#1; 1016147#L2631-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 1016149#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret92#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret92#1;havoc timeShift_#t~ret92#1; 1032736#L2779-2 assume !(0 != timeShift_~tmp___9~2#1); 1031330#L2870-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1031329#L2870-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 1031328#L1160-29 assume !(0 == isFloorCalling_~floorID#1); 1018437#L1164-29 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 1012626#isFloorCalling_returnLabel#30 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 1024782#isExecutiveFloorCalling_returnLabel#6 stopRequestedInDirection_#t~ret70#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1; 1024774#L2510-2 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1024775#getCurrentFloorID_returnLabel#6 stopRequestedInDirection_#t~ret71#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~19#1 := stopRequestedInDirection_#t~ret71#1;havoc stopRequestedInDirection_#t~ret71#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~19#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 1030949#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret99#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret99#1;havoc timeShift_#t~ret99#1; 1030947#L2878-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1; 1030946#L2567-3 assume !(1 == ~currentHeading~0); 1030929#L2577-9 assume !(0 == ~currentFloorID~0); 1030926#L2577-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1021935#L2583-7 havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1021823#L2887-5 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 1020239#L1160-51 assume !(0 == isFloorCalling_~floorID#1); 1018972#L1164-51 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 1014439#isFloorCalling_returnLabel#52 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 1024547#isExecutiveFloorCalling_returnLabel#8 __utac_acc__Specification14_spec__1_#t~ret11#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret11#1;havoc __utac_acc__Specification14_spec__1_#t~ret11#1; 1024541#L330-2 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1); 1024539#L330-3 havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :end_inline___utac_acc__Specification14_spec__1 } true; 1024538#timeShift_returnLabel#2 havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 1020244#L1160-52 assume !(0 == isFloorCalling_~floorID#1); 1016954#L1164-52 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 1014601#isFloorCalling_returnLabel#53 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 1021961#isExecutiveFloorCalling_returnLabel#9 stopRequestedAtCurrentFloor_#t~ret76#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 1021953#L2627-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~22#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1021955#getCurrentFloorID_returnLabel#9 stopRequestedAtCurrentFloor_#t~ret77#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret77#1;havoc stopRequestedAtCurrentFloor_#t~ret77#1; 1020249#L2631-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 1020250#stopRequestedAtCurrentFloor_returnLabel#3 timeShift_#t~ret92#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret92#1;havoc timeShift_#t~ret92#1; 1021795#L2779-4 assume !(0 != timeShift_~tmp___9~2#1); 1021794#L2870-6 assume !(1 == ~doorState~0); 1021793#L2870-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 1021791#L1160-55 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 1021792#isFloorCalling_returnLabel#56 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 1030505#isExecutiveFloorCalling_returnLabel#10 stopRequestedInDirection_#t~ret70#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1; 1030504#L2510-4 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1030453#getCurrentFloorID_returnLabel#10 stopRequestedInDirection_#t~ret71#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~19#1 := stopRequestedInDirection_#t~ret71#1;havoc stopRequestedInDirection_#t~ret71#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~19#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 1030452#stopRequestedInDirection_returnLabel#5 timeShift_#t~ret99#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret99#1;havoc timeShift_#t~ret99#1; 1030450#L2878-4 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1; 1030451#L2567-6 assume !(1 == ~currentHeading~0); 1030386#L2577-18 assume !(0 == ~currentFloorID~0); 1030382#L2577-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1030380#L2583-13 havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1030377#L2887-8 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 1030376#L1160-77 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 1020259#isFloorCalling_returnLabel#78 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 1030374#isExecutiveFloorCalling_returnLabel#12 __utac_acc__Specification14_spec__1_#t~ret11#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret11#1;havoc __utac_acc__Specification14_spec__1_#t~ret11#1; 1030372#L330-4 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1); 1030368#L330-5 havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :end_inline___utac_acc__Specification14_spec__1 } true; 1030367#timeShift_returnLabel#3 havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true; 1030366#threeTS_returnLabel#1 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret16#1, bobCall_~tmp~3#1;havoc bobCall_~tmp~3#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 1030361#L241-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 1013905#getOrigin_returnLabel#2 bobCall_#t~ret16#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~3#1 := bobCall_#t~ret16#1;havoc bobCall_#t~ret16#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~3#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1013906#L1431-1 assume 0 == initPersonOnFloor_~floor#1; 1019590#L1432-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 1030074#L1539-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1030070#L1223-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 1030063#L1235-5 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 1030062#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 1030061#bobCall_returnLabel#1 havoc bobCall_#t~ret16#1, bobCall_~tmp~3#1;assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret22#1, cleanup_#t~ret23#1, cleanup_~i~2#1, cleanup_~tmp~9#1, cleanup_~tmp___0~3#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~9#1;havoc cleanup_~tmp___0~3#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 1030060#L1160-78 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 1030058#isFloorCalling_returnLabel#79 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 1030057#isExecutiveFloorCalling_returnLabel#13 stopRequestedAtCurrentFloor_#t~ret76#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 1030056#L2627-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~22#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1019799#getCurrentFloorID_returnLabel#13 stopRequestedAtCurrentFloor_#t~ret77#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret77#1;havoc stopRequestedAtCurrentFloor_#t~ret77#1; 1019800#L2631-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 1015140#stopRequestedAtCurrentFloor_returnLabel#4 timeShift_#t~ret92#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret92#1;havoc timeShift_#t~ret92#1; 1033901#L2779-6 assume !(0 != timeShift_~tmp___9~2#1); 1017556#L2870-9 assume !(1 == ~doorState~0); 1012694#L2870-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 1012695#L1160-81 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 1013070#isFloorCalling_returnLabel#82 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 1017785#isExecutiveFloorCalling_returnLabel#14 stopRequestedInDirection_#t~ret70#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1; 1012848#L2510-6 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1012850#getCurrentFloorID_returnLabel#14 stopRequestedInDirection_#t~ret71#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~19#1 := stopRequestedInDirection_#t~ret71#1;havoc stopRequestedInDirection_#t~ret71#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~19#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 1017278#stopRequestedInDirection_returnLabel#7 timeShift_#t~ret99#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret99#1;havoc timeShift_#t~ret99#1; 1017279#L2878-6 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1; 1015574#L2567-9 assume !(1 == ~currentHeading~0); 1015575#L2577-27 assume !(0 == ~currentFloorID~0); 1020228#L2577-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1020229#L2583-19 havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1039106#L2887-11 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 1039105#L1160-103 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 1039103#isFloorCalling_returnLabel#104 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 1020154#isExecutiveFloorCalling_returnLabel#16 __utac_acc__Specification14_spec__1_#t~ret11#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret11#1;havoc __utac_acc__Specification14_spec__1_#t~ret11#1; 1012963#L330-6 assume 0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1012964#getCurrentFloorID_returnLabel#16 __utac_acc__Specification14_spec__1_#t~ret12#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification14_spec__1_~tmp~2#1 := __utac_acc__Specification14_spec__1_#t~ret12#1;havoc __utac_acc__Specification14_spec__1_#t~ret12#1;assume { :begin_inline_isExecutiveFloor } true;isExecutiveFloor_#in~floorID#1 := __utac_acc__Specification14_spec__1_~tmp~2#1;havoc isExecutiveFloor_#res#1;havoc isExecutiveFloor_~floorID#1, isExecutiveFloor_~retValue_acc~29#1;isExecutiveFloor_~floorID#1 := isExecutiveFloor_#in~floorID#1;havoc isExecutiveFloor_~retValue_acc~29#1;isExecutiveFloor_~retValue_acc~29#1 := (if ~executiveFloor~0 == isExecutiveFloor_~floorID#1 then 1 else 0);isExecutiveFloor_#res#1 := isExecutiveFloor_~retValue_acc~29#1; 1048158#isExecutiveFloor_returnLabel#4 __utac_acc__Specification14_spec__1_#t~ret13#1 := isExecutiveFloor_#res#1;havoc isExecutiveFloor_~floorID#1, isExecutiveFloor_~retValue_acc~29#1;havoc isExecutiveFloor_#in~floorID#1;assume { :end_inline_isExecutiveFloor } true;__utac_acc__Specification14_spec__1_~tmp___0~2#1 := __utac_acc__Specification14_spec__1_#t~ret13#1;havoc __utac_acc__Specification14_spec__1_#t~ret13#1; 1048156#L335-6 assume 0 != __utac_acc__Specification14_spec__1_~tmp___0~2#1; 1048154#L330-7 havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :end_inline___utac_acc__Specification14_spec__1 } true; 1048153#timeShift_returnLabel#4 havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 1047953#L500-2 assume !false; 1047954#L501 [2024-11-13 15:38:15,335 INFO L747 eck$LassoCheckResult]: Loop: 1047954#L501 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 1055799#L504 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 1055797#isBlocked_returnLabel#1 cleanup_#t~ret22#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~3#1 := cleanup_#t~ret22#1;havoc cleanup_#t~ret22#1; 1055794#L508 assume 1 != cleanup_~tmp___0~3#1; 1055791#L508-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret58#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~17#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~17#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret53#1, anyStopRequested_#t~ret54#1, anyStopRequested_#t~ret55#1, anyStopRequested_#t~ret56#1, anyStopRequested_#t~ret57#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~16#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~16#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 1055790#L1160-104 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 1055789#isFloorCalling_returnLabel#105 anyStopRequested_#t~ret53#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret53#1;havoc anyStopRequested_#t~ret53#1; 1055788#L2066 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 1055787#anyStopRequested_returnLabel#1 isIdle_#t~ret58#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret53#1, anyStopRequested_#t~ret54#1, anyStopRequested_#t~ret55#1, anyStopRequested_#t~ret56#1, anyStopRequested_#t~ret57#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~16#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~17#1 := isIdle_#t~ret58#1;havoc isIdle_#t~ret58#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~17#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 1055786#isIdle_returnLabel#1 cleanup_#t~ret23#1 := isIdle_#res#1;havoc isIdle_#t~ret58#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~17#1;assume { :end_inline_isIdle } true;cleanup_~tmp~9#1 := cleanup_#t~ret23#1;havoc cleanup_#t~ret23#1; 1055785#L520 assume !(0 != cleanup_~tmp~9#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 1055784#L1160-109 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 1055781#isFloorCalling_returnLabel#110 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 1055779#isExecutiveFloorCalling_returnLabel#17 stopRequestedAtCurrentFloor_#t~ret76#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 1055776#L2627-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~22#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1055773#getCurrentFloorID_returnLabel#17 stopRequestedAtCurrentFloor_#t~ret77#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret77#1;havoc stopRequestedAtCurrentFloor_#t~ret77#1; 1055770#L2631-4 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 1055771#stopRequestedAtCurrentFloor_returnLabel#5 timeShift_#t~ret92#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret92#1;havoc timeShift_#t~ret92#1; 1060817#L2779-8 assume !(0 != timeShift_~tmp___9~2#1); 1060811#L2870-12 assume 1 == ~doorState~0;~doorState~0 := 0; 1060809#L2870-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 1060801#L1160-112 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 1058530#isFloorCalling_returnLabel#113 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 1057205#isExecutiveFloorCalling_returnLabel#18 stopRequestedInDirection_#t~ret70#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1; 1057203#L2510-8 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1056297#getCurrentFloorID_returnLabel#18 stopRequestedInDirection_#t~ret71#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~19#1 := stopRequestedInDirection_#t~ret71#1;havoc stopRequestedInDirection_#t~ret71#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~19#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 1056296#stopRequestedInDirection_returnLabel#9 timeShift_#t~ret99#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret99#1;havoc timeShift_#t~ret99#1; 1056293#L2878-8 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1; 1056292#L2567-12 assume !(1 == ~currentHeading~0); 1055680#L2577-36 assume !(0 == ~currentFloorID~0); 1055654#L2577-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1055655#L2583-25 havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1056455#L2887-14 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 1056454#L1160-134 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 1056451#isFloorCalling_returnLabel#135 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 1056450#isExecutiveFloorCalling_returnLabel#20 __utac_acc__Specification14_spec__1_#t~ret11#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret11#1;havoc __utac_acc__Specification14_spec__1_#t~ret11#1; 1056072#L330-8 assume 0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1056051#getCurrentFloorID_returnLabel#20 __utac_acc__Specification14_spec__1_#t~ret12#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification14_spec__1_~tmp~2#1 := __utac_acc__Specification14_spec__1_#t~ret12#1;havoc __utac_acc__Specification14_spec__1_#t~ret12#1;assume { :begin_inline_isExecutiveFloor } true;isExecutiveFloor_#in~floorID#1 := __utac_acc__Specification14_spec__1_~tmp~2#1;havoc isExecutiveFloor_#res#1;havoc isExecutiveFloor_~floorID#1, isExecutiveFloor_~retValue_acc~29#1;isExecutiveFloor_~floorID#1 := isExecutiveFloor_#in~floorID#1;havoc isExecutiveFloor_~retValue_acc~29#1;isExecutiveFloor_~retValue_acc~29#1 := (if ~executiveFloor~0 == isExecutiveFloor_~floorID#1 then 1 else 0);isExecutiveFloor_#res#1 := isExecutiveFloor_~retValue_acc~29#1; 1055844#isExecutiveFloor_returnLabel#5 __utac_acc__Specification14_spec__1_#t~ret13#1 := isExecutiveFloor_#res#1;havoc isExecutiveFloor_~floorID#1, isExecutiveFloor_~retValue_acc~29#1;havoc isExecutiveFloor_#in~floorID#1;assume { :end_inline_isExecutiveFloor } true;__utac_acc__Specification14_spec__1_~tmp___0~2#1 := __utac_acc__Specification14_spec__1_#t~ret13#1;havoc __utac_acc__Specification14_spec__1_#t~ret13#1; 1055839#L335-8 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___0~2#1);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 1055838#areDoorsOpen_returnLabel#5 __utac_acc__Specification14_spec__1_#t~ret14#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification14_spec__1_~tmp___1~2#1 := __utac_acc__Specification14_spec__1_#t~ret14#1;havoc __utac_acc__Specification14_spec__1_#t~ret14#1; 1055630#L341-12 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___1~2#1); 1055628#L330-9 havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :end_inline___utac_acc__Specification14_spec__1 } true; 1055627#timeShift_returnLabel#5 havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 1055626#L500-2 assume !false; 1055625#L501 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 1055624#L504 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 1055623#isBlocked_returnLabel#1 cleanup_#t~ret22#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~3#1 := cleanup_#t~ret22#1;havoc cleanup_#t~ret22#1; 1055622#L508 assume 1 != cleanup_~tmp___0~3#1; 1055621#L508-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret58#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~17#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~17#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret53#1, anyStopRequested_#t~ret54#1, anyStopRequested_#t~ret55#1, anyStopRequested_#t~ret56#1, anyStopRequested_#t~ret57#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~16#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~16#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 1055620#L1160-104 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 1055619#isFloorCalling_returnLabel#105 anyStopRequested_#t~ret53#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret53#1;havoc anyStopRequested_#t~ret53#1; 1055618#L2066 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 1055617#anyStopRequested_returnLabel#1 isIdle_#t~ret58#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret53#1, anyStopRequested_#t~ret54#1, anyStopRequested_#t~ret55#1, anyStopRequested_#t~ret56#1, anyStopRequested_#t~ret57#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~16#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~17#1 := isIdle_#t~ret58#1;havoc isIdle_#t~ret58#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~17#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 1055616#isIdle_returnLabel#1 cleanup_#t~ret23#1 := isIdle_#res#1;havoc isIdle_#t~ret58#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~17#1;assume { :end_inline_isIdle } true;cleanup_~tmp~9#1 := cleanup_#t~ret23#1;havoc cleanup_#t~ret23#1; 1055615#L520 assume !(0 != cleanup_~tmp~9#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 1055614#L1160-109 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 1055611#isFloorCalling_returnLabel#110 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 1055610#isExecutiveFloorCalling_returnLabel#17 stopRequestedAtCurrentFloor_#t~ret76#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 1055598#L2627-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~22#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1055597#getCurrentFloorID_returnLabel#17 stopRequestedAtCurrentFloor_#t~ret77#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret77#1;havoc stopRequestedAtCurrentFloor_#t~ret77#1; 1055591#L2631-4 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 1055592#stopRequestedAtCurrentFloor_returnLabel#5 timeShift_#t~ret92#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret92#1;havoc timeShift_#t~ret92#1; 1063886#L2779-8 assume !(0 != timeShift_~tmp___9~2#1); 1056918#L2870-12 assume 1 == ~doorState~0;~doorState~0 := 0; 1056916#L2870-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 1056915#L1160-112 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 1056824#isFloorCalling_returnLabel#113 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 1056913#isExecutiveFloorCalling_returnLabel#18 stopRequestedInDirection_#t~ret70#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1; 1056912#L2510-8 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1056878#getCurrentFloorID_returnLabel#18 stopRequestedInDirection_#t~ret71#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~19#1 := stopRequestedInDirection_#t~ret71#1;havoc stopRequestedInDirection_#t~ret71#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~19#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 1056877#stopRequestedInDirection_returnLabel#9 timeShift_#t~ret99#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret99#1;havoc timeShift_#t~ret99#1; 1056875#L2878-8 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1; 1056873#L2567-12 assume !(1 == ~currentHeading~0); 1056872#L2577-36 assume !(0 == ~currentFloorID~0); 1056870#L2577-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1055647#L2583-25 havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1055648#L2887-14 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 1055642#L1160-134 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 1055641#isFloorCalling_returnLabel#135 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 1055639#isExecutiveFloorCalling_returnLabel#20 __utac_acc__Specification14_spec__1_#t~ret11#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret11#1;havoc __utac_acc__Specification14_spec__1_#t~ret11#1; 1055640#L330-8 assume 0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1055636#getCurrentFloorID_returnLabel#20 __utac_acc__Specification14_spec__1_#t~ret12#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification14_spec__1_~tmp~2#1 := __utac_acc__Specification14_spec__1_#t~ret12#1;havoc __utac_acc__Specification14_spec__1_#t~ret12#1;assume { :begin_inline_isExecutiveFloor } true;isExecutiveFloor_#in~floorID#1 := __utac_acc__Specification14_spec__1_~tmp~2#1;havoc isExecutiveFloor_#res#1;havoc isExecutiveFloor_~floorID#1, isExecutiveFloor_~retValue_acc~29#1;isExecutiveFloor_~floorID#1 := isExecutiveFloor_#in~floorID#1;havoc isExecutiveFloor_~retValue_acc~29#1;isExecutiveFloor_~retValue_acc~29#1 := (if ~executiveFloor~0 == isExecutiveFloor_~floorID#1 then 1 else 0);isExecutiveFloor_#res#1 := isExecutiveFloor_~retValue_acc~29#1; 1055634#isExecutiveFloor_returnLabel#5 __utac_acc__Specification14_spec__1_#t~ret13#1 := isExecutiveFloor_#res#1;havoc isExecutiveFloor_~floorID#1, isExecutiveFloor_~retValue_acc~29#1;havoc isExecutiveFloor_#in~floorID#1;assume { :end_inline_isExecutiveFloor } true;__utac_acc__Specification14_spec__1_~tmp___0~2#1 := __utac_acc__Specification14_spec__1_#t~ret13#1;havoc __utac_acc__Specification14_spec__1_#t~ret13#1; 1055635#L335-8 assume 0 != __utac_acc__Specification14_spec__1_~tmp___0~2#1; 1055804#L330-9 havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :end_inline___utac_acc__Specification14_spec__1 } true; 1055629#timeShift_returnLabel#5 havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 1055803#L500-2 assume !false; 1047954#L501 [2024-11-13 15:38:15,335 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-13 15:38:15,335 INFO L85 PathProgramCache]: Analyzing trace with hash -1544056064, now seen corresponding path program 4 times [2024-11-13 15:38:15,335 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-13 15:38:15,336 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1107885944] [2024-11-13 15:38:15,336 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-13 15:38:15,336 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-13 15:38:15,374 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-13 15:38:15,564 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-13 15:38:15,564 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-13 15:38:15,564 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1107885944] [2024-11-13 15:38:15,564 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1107885944] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-13 15:38:15,564 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-13 15:38:15,564 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2024-11-13 15:38:15,565 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2113703726] [2024-11-13 15:38:15,565 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-13 15:38:15,566 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-13 15:38:15,566 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-13 15:38:15,566 INFO L85 PathProgramCache]: Analyzing trace with hash 660577132, now seen corresponding path program 1 times [2024-11-13 15:38:15,567 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-13 15:38:15,567 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [821711704] [2024-11-13 15:38:15,567 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-13 15:38:15,567 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-13 15:38:15,597 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-13 15:38:16,044 INFO L134 CoverageAnalysis]: Checked inductivity of 43 backedges. 41 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-13 15:38:16,046 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-13 15:38:16,046 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [821711704] [2024-11-13 15:38:16,046 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [821711704] provided 0 perfect and 1 imperfect interpolant sequences [2024-11-13 15:38:16,046 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [951282432] [2024-11-13 15:38:16,046 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-13 15:38:16,047 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-11-13 15:38:16,047 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 [2024-11-13 15:38:16,049 INFO L229 MonitoredProcess]: Starting monitored process 49 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-11-13 15:38:16,052 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_39553783-7db8-4e2a-8dcb-339c4fe30cc5/bin/uautomizer-verify-qhAvR1uOyd/z3 -smt2 -in SMTLIB2_COMPLIANT=true (49)] Waiting until timeout for monitored process [2024-11-13 15:38:16,594 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-13 15:38:16,596 INFO L255 TraceCheckSpWp]: Trace formula consists of 350 conjuncts, 2 conjuncts are in the unsatisfiable core [2024-11-13 15:38:16,600 INFO L278 TraceCheckSpWp]: Computing forward predicates... [2024-11-13 15:38:16,708 INFO L134 CoverageAnalysis]: Checked inductivity of 43 backedges. 43 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-13 15:38:16,709 INFO L307 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2024-11-13 15:38:16,709 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [951282432] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-13 15:38:16,709 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2024-11-13 15:38:16,709 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [5] total 6 [2024-11-13 15:38:16,709 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1002248356] [2024-11-13 15:38:16,709 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-13 15:38:16,710 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-13 15:38:16,710 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-13 15:38:16,710 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-11-13 15:38:16,710 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2024-11-13 15:38:16,710 INFO L87 Difference]: Start difference. First operand 63135 states and 112661 transitions. cyclomatic complexity: 49544 Second operand has 3 states, 3 states have (on average 29.333333333333332) internal successors, (88), 3 states have internal predecessors, (88), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-13 15:38:17,140 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-13 15:38:17,140 INFO L93 Difference]: Finished difference Result 82708 states and 147880 transitions. [2024-11-13 15:38:17,141 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 82708 states and 147880 transitions. [2024-11-13 15:38:17,492 INFO L131 ngComponentsAnalysis]: Automaton has 12 accepting balls. 26875 [2024-11-13 15:38:17,760 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 82708 states to 82708 states and 147880 transitions. [2024-11-13 15:38:17,761 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 61604 [2024-11-13 15:38:17,807 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 61604 [2024-11-13 15:38:17,807 INFO L73 IsDeterministic]: Start isDeterministic. Operand 82708 states and 147880 transitions. [2024-11-13 15:38:18,373 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2024-11-13 15:38:18,374 INFO L218 hiAutomatonCegarLoop]: Abstraction has 82708 states and 147880 transitions. [2024-11-13 15:38:18,412 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 82708 states and 147880 transitions. [2024-11-13 15:38:19,021 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 82708 to 82584. [2024-11-13 15:38:19,093 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 82584 states, 82584 states have (on average 1.7891601278698053) internal successors, (147756), 82583 states have internal predecessors, (147756), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-13 15:38:19,722 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 82584 states to 82584 states and 147756 transitions. [2024-11-13 15:38:19,722 INFO L240 hiAutomatonCegarLoop]: Abstraction has 82584 states and 147756 transitions. [2024-11-13 15:38:19,722 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2024-11-13 15:38:19,723 INFO L424 stractBuchiCegarLoop]: Abstraction has 82584 states and 147756 transitions. [2024-11-13 15:38:19,723 INFO L331 stractBuchiCegarLoop]: ======== Iteration 11 ============ [2024-11-13 15:38:19,723 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 82584 states and 147756 transitions. [2024-11-13 15:38:19,863 INFO L131 ngComponentsAnalysis]: Automaton has 12 accepting balls. 26827 [2024-11-13 15:38:19,863 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-13 15:38:19,863 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-13 15:38:19,865 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-13 15:38:19,865 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1] [2024-11-13 15:38:19,866 INFO L745 eck$LassoCheckResult]: Stem: 1159250#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 1159251#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret28#1, main_~retValue_acc~6#1, main_~tmp~11#1;havoc main_~retValue_acc~6#1;havoc main_~tmp~11#1;assume { :begin_inline_select_helpers } true; 1165386#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1164937#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; 1160801#valid_product_returnLabel#1 main_#t~ret28#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;assume { :end_inline_valid_product } true;main_~tmp~11#1 := main_#t~ret28#1;havoc main_#t~ret28#1; 1160802#L692 assume 0 != main_~tmp~11#1;assume { :begin_inline_setup } true; 1161016#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret21#1, bigMacCall_~tmp~8#1;havoc bigMacCall_~tmp~8#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 1162739#L241 assume !(0 == getOrigin_~person#1); 1164608#L245 assume !(1 == getOrigin_~person#1); 1161307#L249 assume !(2 == getOrigin_~person#1); 1161308#L253 assume !(3 == getOrigin_~person#1); 1163621#L257 assume !(4 == getOrigin_~person#1); 1165504#L261 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 1164398#getOrigin_returnLabel#1 bigMacCall_#t~ret21#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~8#1 := bigMacCall_#t~ret21#1;havoc bigMacCall_#t~ret21#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~8#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1164399#L1431 assume 0 == initPersonOnFloor_~floor#1; 1165186#L1432 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 1158664#L1539-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1164247#L1223 assume !(0 == callOnFloor_~floorID#1); 1158867#L1226 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1158868#L1235-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 1166285#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 1160092#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret21#1, bigMacCall_~tmp~8#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 1160093#L1160 assume !(0 == isFloorCalling_~floorID#1); 1166329#L1164 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 1171821#isFloorCalling_returnLabel#1 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 1171820#isExecutiveFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret76#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 1171818#L2627 assume 0 != stopRequestedAtCurrentFloor_~tmp~22#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1171817#getCurrentFloorID_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret77#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret77#1;havoc stopRequestedAtCurrentFloor_#t~ret77#1; 1171815#L2631 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 1171812#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret92#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret92#1;havoc timeShift_#t~ret92#1; 1171810#L2779 assume !(0 != timeShift_~tmp___9~2#1); 1171808#L2870 assume 1 == ~doorState~0;~doorState~0 := 0; 1171807#L2870-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 1171805#L1160-3 assume !(0 == isFloorCalling_~floorID#1); 1171802#L1164-3 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 1171800#isFloorCalling_returnLabel#4 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 1171799#isExecutiveFloorCalling_returnLabel#2 stopRequestedInDirection_#t~ret70#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1; 1171798#L2510 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1171746#getCurrentFloorID_returnLabel#2 stopRequestedInDirection_#t~ret71#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~19#1 := stopRequestedInDirection_#t~ret71#1;havoc stopRequestedInDirection_#t~ret71#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~19#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 1171745#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret99#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret99#1;havoc timeShift_#t~ret99#1; 1171744#L2878 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1; 1167125#L2567 assume !(1 == ~currentHeading~0); 1167126#L2577 assume !(0 == ~currentFloorID~0); 1167089#L2577-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1167090#L2583-1 havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1171696#L2887-2 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 1171695#L1160-25 assume !(0 == isFloorCalling_~floorID#1); 1171693#L1164-25 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 1171690#isFloorCalling_returnLabel#26 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 1171689#isExecutiveFloorCalling_returnLabel#4 __utac_acc__Specification14_spec__1_#t~ret11#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret11#1;havoc __utac_acc__Specification14_spec__1_#t~ret11#1; 1171688#L330 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1); 1171687#L330-1 havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :end_inline___utac_acc__Specification14_spec__1 } true; 1171686#timeShift_returnLabel#1 havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 1171684#L1160-26 assume !(0 == isFloorCalling_~floorID#1); 1171681#L1164-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 1171679#isFloorCalling_returnLabel#27 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 1171678#isExecutiveFloorCalling_returnLabel#5 stopRequestedAtCurrentFloor_#t~ret76#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 1171677#L2627-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~22#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1166721#getCurrentFloorID_returnLabel#5 stopRequestedAtCurrentFloor_#t~ret77#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret77#1;havoc stopRequestedAtCurrentFloor_#t~ret77#1; 1166722#L2631-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 1171661#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret92#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret92#1;havoc timeShift_#t~ret92#1; 1171660#L2779-2 assume !(0 != timeShift_~tmp___9~2#1); 1166685#L2870-3 assume !(1 == ~doorState~0); 1166684#L2870-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 1166682#L1160-29 assume !(0 == isFloorCalling_~floorID#1); 1166680#L1164-29 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 1166675#isFloorCalling_returnLabel#30 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 1166672#isExecutiveFloorCalling_returnLabel#6 stopRequestedInDirection_#t~ret70#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1; 1166667#L2510-2 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1166668#getCurrentFloorID_returnLabel#6 stopRequestedInDirection_#t~ret71#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~19#1 := stopRequestedInDirection_#t~ret71#1;havoc stopRequestedInDirection_#t~ret71#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~19#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 1171064#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret99#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret99#1;havoc timeShift_#t~ret99#1; 1171063#L2878-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1; 1171062#L2567-3 assume !(1 == ~currentHeading~0); 1171061#L2577-9 assume !(0 == ~currentFloorID~0); 1171060#L2577-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1166513#L2583-7 havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1166514#L2887-5 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 1166509#L1160-51 assume !(0 == isFloorCalling_~floorID#1); 1166510#L1164-51 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 1171039#isFloorCalling_returnLabel#52 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 1171038#isExecutiveFloorCalling_returnLabel#8 __utac_acc__Specification14_spec__1_#t~ret11#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret11#1;havoc __utac_acc__Specification14_spec__1_#t~ret11#1; 1166452#L330-2 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1); 1166453#L330-3 havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :end_inline___utac_acc__Specification14_spec__1 } true; 1166448#timeShift_returnLabel#2 havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 1166449#L1160-52 assume !(0 == isFloorCalling_~floorID#1); 1166444#L1164-52 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 1166432#isFloorCalling_returnLabel#53 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 1166429#isExecutiveFloorCalling_returnLabel#9 stopRequestedAtCurrentFloor_#t~ret76#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 1166413#L2627-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~22#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1166403#getCurrentFloorID_returnLabel#9 stopRequestedAtCurrentFloor_#t~ret77#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret77#1;havoc stopRequestedAtCurrentFloor_#t~ret77#1; 1166369#L2631-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 1166370#stopRequestedAtCurrentFloor_returnLabel#3 timeShift_#t~ret92#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret92#1;havoc timeShift_#t~ret92#1; 1166385#L2779-4 assume !(0 != timeShift_~tmp___9~2#1); 1166386#L2870-6 assume !(1 == ~doorState~0); 1183249#L2870-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 1186264#L1160-55 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 1186265#isFloorCalling_returnLabel#56 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 1186563#isExecutiveFloorCalling_returnLabel#10 stopRequestedInDirection_#t~ret70#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1; 1186562#L2510-4 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1186507#getCurrentFloorID_returnLabel#10 stopRequestedInDirection_#t~ret71#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~19#1 := stopRequestedInDirection_#t~ret71#1;havoc stopRequestedInDirection_#t~ret71#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~19#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 1186506#stopRequestedInDirection_returnLabel#5 timeShift_#t~ret99#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret99#1;havoc timeShift_#t~ret99#1; 1186505#L2878-4 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1; 1186398#L2567-6 assume !(1 == ~currentHeading~0); 1186392#L2577-18 assume !(0 == ~currentFloorID~0); 1186388#L2577-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1186385#L2583-13 havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1186383#L2887-8 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 1186382#L1160-77 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 1186164#isFloorCalling_returnLabel#78 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 1186380#isExecutiveFloorCalling_returnLabel#12 __utac_acc__Specification14_spec__1_#t~ret11#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret11#1;havoc __utac_acc__Specification14_spec__1_#t~ret11#1; 1186378#L330-4 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1); 1186374#L330-5 havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :end_inline___utac_acc__Specification14_spec__1 } true; 1186373#timeShift_returnLabel#3 havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true; 1186372#threeTS_returnLabel#1 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret16#1, bobCall_~tmp~3#1;havoc bobCall_~tmp~3#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 1186368#L241-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 1186365#getOrigin_returnLabel#2 bobCall_#t~ret16#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~3#1 := bobCall_#t~ret16#1;havoc bobCall_#t~ret16#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~3#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1186364#L1431-1 assume 0 == initPersonOnFloor_~floor#1; 1186350#L1432-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 1186329#L1539-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1186328#L1223-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 1160642#L1235-5 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 1160675#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 1164790#bobCall_returnLabel#1 havoc bobCall_#t~ret16#1, bobCall_~tmp~3#1;assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret22#1, cleanup_#t~ret23#1, cleanup_~i~2#1, cleanup_~tmp~9#1, cleanup_~tmp___0~3#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~9#1;havoc cleanup_~tmp___0~3#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 1163197#L1160-78 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 1163198#isFloorCalling_returnLabel#79 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 1182203#isExecutiveFloorCalling_returnLabel#13 stopRequestedAtCurrentFloor_#t~ret76#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 1182204#L2627-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~22#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1177159#getCurrentFloorID_returnLabel#13 stopRequestedAtCurrentFloor_#t~ret77#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret77#1;havoc stopRequestedAtCurrentFloor_#t~ret77#1; 1177160#L2631-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 1182982#stopRequestedAtCurrentFloor_returnLabel#4 timeShift_#t~ret92#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret92#1;havoc timeShift_#t~ret92#1; 1189298#L2779-6 assume !(0 != timeShift_~tmp___9~2#1); 1163639#L2870-9 assume !(1 == ~doorState~0); 1163640#L2870-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 1207667#L1160-81 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 1207666#isFloorCalling_returnLabel#82 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 1207665#isExecutiveFloorCalling_returnLabel#14 stopRequestedInDirection_#t~ret70#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1; 1207664#L2510-6 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1190702#getCurrentFloorID_returnLabel#14 stopRequestedInDirection_#t~ret71#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~19#1 := stopRequestedInDirection_#t~ret71#1;havoc stopRequestedInDirection_#t~ret71#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~19#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 1190701#stopRequestedInDirection_returnLabel#7 timeShift_#t~ret99#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret99#1;havoc timeShift_#t~ret99#1; 1190699#L2878-6 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1; 1190700#L2567-9 assume !(1 == ~currentHeading~0); 1207733#L2577-27 assume !(0 == ~currentFloorID~0); 1207731#L2577-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1207429#L2583-19 havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1207427#L2887-11 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 1207426#L1160-103 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 1201752#isFloorCalling_returnLabel#104 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 1207425#isExecutiveFloorCalling_returnLabel#16 __utac_acc__Specification14_spec__1_#t~ret11#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret11#1;havoc __utac_acc__Specification14_spec__1_#t~ret11#1; 1207424#L330-6 assume 0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1207423#getCurrentFloorID_returnLabel#16 __utac_acc__Specification14_spec__1_#t~ret12#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification14_spec__1_~tmp~2#1 := __utac_acc__Specification14_spec__1_#t~ret12#1;havoc __utac_acc__Specification14_spec__1_#t~ret12#1;assume { :begin_inline_isExecutiveFloor } true;isExecutiveFloor_#in~floorID#1 := __utac_acc__Specification14_spec__1_~tmp~2#1;havoc isExecutiveFloor_#res#1;havoc isExecutiveFloor_~floorID#1, isExecutiveFloor_~retValue_acc~29#1;isExecutiveFloor_~floorID#1 := isExecutiveFloor_#in~floorID#1;havoc isExecutiveFloor_~retValue_acc~29#1;isExecutiveFloor_~retValue_acc~29#1 := (if ~executiveFloor~0 == isExecutiveFloor_~floorID#1 then 1 else 0);isExecutiveFloor_#res#1 := isExecutiveFloor_~retValue_acc~29#1; 1207422#isExecutiveFloor_returnLabel#4 __utac_acc__Specification14_spec__1_#t~ret13#1 := isExecutiveFloor_#res#1;havoc isExecutiveFloor_~floorID#1, isExecutiveFloor_~retValue_acc~29#1;havoc isExecutiveFloor_#in~floorID#1;assume { :end_inline_isExecutiveFloor } true;__utac_acc__Specification14_spec__1_~tmp___0~2#1 := __utac_acc__Specification14_spec__1_#t~ret13#1;havoc __utac_acc__Specification14_spec__1_#t~ret13#1; 1207420#L335-6 assume 0 != __utac_acc__Specification14_spec__1_~tmp___0~2#1; 1207418#L330-7 havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :end_inline___utac_acc__Specification14_spec__1 } true; 1207417#timeShift_returnLabel#4 havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 1206534#L500-2 assume !false; 1206535#L501 [2024-11-13 15:38:19,866 INFO L747 eck$LassoCheckResult]: Loop: 1206535#L501 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 1222060#L504 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 1222058#isBlocked_returnLabel#1 cleanup_#t~ret22#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~3#1 := cleanup_#t~ret22#1;havoc cleanup_#t~ret22#1; 1222056#L508 assume 1 != cleanup_~tmp___0~3#1; 1222054#L508-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret58#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~17#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~17#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret53#1, anyStopRequested_#t~ret54#1, anyStopRequested_#t~ret55#1, anyStopRequested_#t~ret56#1, anyStopRequested_#t~ret57#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~16#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~16#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 1222052#L1160-104 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 1222050#isFloorCalling_returnLabel#105 anyStopRequested_#t~ret53#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret53#1;havoc anyStopRequested_#t~ret53#1; 1222048#L2066 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 1222046#anyStopRequested_returnLabel#1 isIdle_#t~ret58#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret53#1, anyStopRequested_#t~ret54#1, anyStopRequested_#t~ret55#1, anyStopRequested_#t~ret56#1, anyStopRequested_#t~ret57#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~16#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~17#1 := isIdle_#t~ret58#1;havoc isIdle_#t~ret58#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~17#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 1222044#isIdle_returnLabel#1 cleanup_#t~ret23#1 := isIdle_#res#1;havoc isIdle_#t~ret58#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~17#1;assume { :end_inline_isIdle } true;cleanup_~tmp~9#1 := cleanup_#t~ret23#1;havoc cleanup_#t~ret23#1; 1222042#L520 assume !(0 != cleanup_~tmp~9#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 1222040#L1160-109 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 1216955#isFloorCalling_returnLabel#110 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 1222038#isExecutiveFloorCalling_returnLabel#17 stopRequestedAtCurrentFloor_#t~ret76#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 1222036#L2627-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~22#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1222034#getCurrentFloorID_returnLabel#17 stopRequestedAtCurrentFloor_#t~ret77#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret77#1;havoc stopRequestedAtCurrentFloor_#t~ret77#1; 1222031#L2631-4 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 1222032#stopRequestedAtCurrentFloor_returnLabel#5 timeShift_#t~ret92#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret92#1;havoc timeShift_#t~ret92#1; 1224029#L2779-8 assume !(0 != timeShift_~tmp___9~2#1); 1224027#L2870-12 assume !(1 == ~doorState~0); 1222974#L2870-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 1223378#L1160-112 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 1223377#isFloorCalling_returnLabel#113 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 1223376#isExecutiveFloorCalling_returnLabel#18 stopRequestedInDirection_#t~ret70#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1; 1223375#L2510-8 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1223065#getCurrentFloorID_returnLabel#18 stopRequestedInDirection_#t~ret71#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~19#1 := stopRequestedInDirection_#t~ret71#1;havoc stopRequestedInDirection_#t~ret71#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~19#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 1223064#stopRequestedInDirection_returnLabel#9 timeShift_#t~ret99#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret99#1;havoc timeShift_#t~ret99#1; 1223062#L2878-8 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1; 1223060#L2567-12 assume !(1 == ~currentHeading~0); 1221829#L2577-36 assume !(0 == ~currentFloorID~0); 1221723#L2577-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1220964#L2583-25 havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1220963#L2887-14 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 1220962#L1160-134 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 1215989#isFloorCalling_returnLabel#135 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 1220961#isExecutiveFloorCalling_returnLabel#20 __utac_acc__Specification14_spec__1_#t~ret11#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret11#1;havoc __utac_acc__Specification14_spec__1_#t~ret11#1; 1220960#L330-8 assume 0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1220959#getCurrentFloorID_returnLabel#20 __utac_acc__Specification14_spec__1_#t~ret12#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification14_spec__1_~tmp~2#1 := __utac_acc__Specification14_spec__1_#t~ret12#1;havoc __utac_acc__Specification14_spec__1_#t~ret12#1;assume { :begin_inline_isExecutiveFloor } true;isExecutiveFloor_#in~floorID#1 := __utac_acc__Specification14_spec__1_~tmp~2#1;havoc isExecutiveFloor_#res#1;havoc isExecutiveFloor_~floorID#1, isExecutiveFloor_~retValue_acc~29#1;isExecutiveFloor_~floorID#1 := isExecutiveFloor_#in~floorID#1;havoc isExecutiveFloor_~retValue_acc~29#1;isExecutiveFloor_~retValue_acc~29#1 := (if ~executiveFloor~0 == isExecutiveFloor_~floorID#1 then 1 else 0);isExecutiveFloor_#res#1 := isExecutiveFloor_~retValue_acc~29#1; 1220958#isExecutiveFloor_returnLabel#5 __utac_acc__Specification14_spec__1_#t~ret13#1 := isExecutiveFloor_#res#1;havoc isExecutiveFloor_~floorID#1, isExecutiveFloor_~retValue_acc~29#1;havoc isExecutiveFloor_#in~floorID#1;assume { :end_inline_isExecutiveFloor } true;__utac_acc__Specification14_spec__1_~tmp___0~2#1 := __utac_acc__Specification14_spec__1_#t~ret13#1;havoc __utac_acc__Specification14_spec__1_#t~ret13#1; 1220957#L335-8 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___0~2#1);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 1220956#areDoorsOpen_returnLabel#5 __utac_acc__Specification14_spec__1_#t~ret14#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification14_spec__1_~tmp___1~2#1 := __utac_acc__Specification14_spec__1_#t~ret14#1;havoc __utac_acc__Specification14_spec__1_#t~ret14#1; 1220955#L341-12 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___1~2#1); 1220954#L330-9 havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :end_inline___utac_acc__Specification14_spec__1 } true; 1220953#timeShift_returnLabel#5 havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 1220880#L500-2 assume !false; 1220879#L501 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 1220878#L504 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 1220876#isBlocked_returnLabel#1 cleanup_#t~ret22#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~3#1 := cleanup_#t~ret22#1;havoc cleanup_#t~ret22#1; 1220874#L508 assume 1 != cleanup_~tmp___0~3#1; 1219773#L508-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret58#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~17#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~17#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret53#1, anyStopRequested_#t~ret54#1, anyStopRequested_#t~ret55#1, anyStopRequested_#t~ret56#1, anyStopRequested_#t~ret57#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~16#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~16#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 1219534#L1160-104 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 1216760#isFloorCalling_returnLabel#105 anyStopRequested_#t~ret53#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret53#1;havoc anyStopRequested_#t~ret53#1; 1216761#L2066 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 1215913#anyStopRequested_returnLabel#1 isIdle_#t~ret58#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret53#1, anyStopRequested_#t~ret54#1, anyStopRequested_#t~ret55#1, anyStopRequested_#t~ret56#1, anyStopRequested_#t~ret57#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~16#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~17#1 := isIdle_#t~ret58#1;havoc isIdle_#t~ret58#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~17#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 1215914#isIdle_returnLabel#1 cleanup_#t~ret23#1 := isIdle_#res#1;havoc isIdle_#t~ret58#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~17#1;assume { :end_inline_isIdle } true;cleanup_~tmp~9#1 := cleanup_#t~ret23#1;havoc cleanup_#t~ret23#1; 1215909#L520 assume !(0 != cleanup_~tmp~9#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 1215910#L1160-109 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 1215904#isFloorCalling_returnLabel#110 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 1215905#isExecutiveFloorCalling_returnLabel#17 stopRequestedAtCurrentFloor_#t~ret76#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 1215900#L2627-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~22#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1215901#getCurrentFloorID_returnLabel#17 stopRequestedAtCurrentFloor_#t~ret77#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret77#1;havoc stopRequestedAtCurrentFloor_#t~ret77#1; 1215874#L2631-4 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 1215875#stopRequestedAtCurrentFloor_returnLabel#5 timeShift_#t~ret92#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret92#1;havoc timeShift_#t~ret92#1; 1215561#L2779-8 assume !(0 != timeShift_~tmp___9~2#1); 1215562#L2870-12 assume !(1 == ~doorState~0); 1222623#L2870-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 1223111#L1160-112 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 1217721#isFloorCalling_returnLabel#113 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 1222880#isExecutiveFloorCalling_returnLabel#18 stopRequestedInDirection_#t~ret70#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1; 1222837#L2510-8 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1222835#getCurrentFloorID_returnLabel#18 stopRequestedInDirection_#t~ret71#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~19#1 := stopRequestedInDirection_#t~ret71#1;havoc stopRequestedInDirection_#t~ret71#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~19#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 1222834#stopRequestedInDirection_returnLabel#9 timeShift_#t~ret99#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret99#1;havoc timeShift_#t~ret99#1; 1222227#L2878-8 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1; 1222115#L2567-12 assume !(1 == ~currentHeading~0); 1222111#L2577-36 assume !(0 == ~currentFloorID~0); 1222106#L2577-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1222089#L2583-25 havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1222084#L2887-14 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 1222082#L1160-134 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 1217153#isFloorCalling_returnLabel#135 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 1222080#isExecutiveFloorCalling_returnLabel#20 __utac_acc__Specification14_spec__1_#t~ret11#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret11#1;havoc __utac_acc__Specification14_spec__1_#t~ret11#1; 1222078#L330-8 assume 0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1222076#getCurrentFloorID_returnLabel#20 __utac_acc__Specification14_spec__1_#t~ret12#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification14_spec__1_~tmp~2#1 := __utac_acc__Specification14_spec__1_#t~ret12#1;havoc __utac_acc__Specification14_spec__1_#t~ret12#1;assume { :begin_inline_isExecutiveFloor } true;isExecutiveFloor_#in~floorID#1 := __utac_acc__Specification14_spec__1_~tmp~2#1;havoc isExecutiveFloor_#res#1;havoc isExecutiveFloor_~floorID#1, isExecutiveFloor_~retValue_acc~29#1;isExecutiveFloor_~floorID#1 := isExecutiveFloor_#in~floorID#1;havoc isExecutiveFloor_~retValue_acc~29#1;isExecutiveFloor_~retValue_acc~29#1 := (if ~executiveFloor~0 == isExecutiveFloor_~floorID#1 then 1 else 0);isExecutiveFloor_#res#1 := isExecutiveFloor_~retValue_acc~29#1; 1222074#isExecutiveFloor_returnLabel#5 __utac_acc__Specification14_spec__1_#t~ret13#1 := isExecutiveFloor_#res#1;havoc isExecutiveFloor_~floorID#1, isExecutiveFloor_~retValue_acc~29#1;havoc isExecutiveFloor_#in~floorID#1;assume { :end_inline_isExecutiveFloor } true;__utac_acc__Specification14_spec__1_~tmp___0~2#1 := __utac_acc__Specification14_spec__1_#t~ret13#1;havoc __utac_acc__Specification14_spec__1_#t~ret13#1; 1222071#L335-8 assume 0 != __utac_acc__Specification14_spec__1_~tmp___0~2#1; 1222066#L330-9 havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :end_inline___utac_acc__Specification14_spec__1 } true; 1222064#timeShift_returnLabel#5 havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 1222062#L500-2 assume !false; 1206535#L501 [2024-11-13 15:38:19,867 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-13 15:38:19,867 INFO L85 PathProgramCache]: Analyzing trace with hash 920364356, now seen corresponding path program 1 times [2024-11-13 15:38:19,867 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-13 15:38:19,867 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [53210528] [2024-11-13 15:38:19,867 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-13 15:38:19,867 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-13 15:38:19,908 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-13 15:38:20,084 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-13 15:38:20,085 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-13 15:38:20,085 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [53210528] [2024-11-13 15:38:20,085 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [53210528] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-13 15:38:20,085 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-13 15:38:20,085 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2024-11-13 15:38:20,085 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1922642886] [2024-11-13 15:38:20,085 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-13 15:38:20,086 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-13 15:38:20,086 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-13 15:38:20,086 INFO L85 PathProgramCache]: Analyzing trace with hash 33937452, now seen corresponding path program 1 times [2024-11-13 15:38:20,086 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-13 15:38:20,087 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [235489447] [2024-11-13 15:38:20,087 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-13 15:38:20,087 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-13 15:38:20,116 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-13 15:38:20,173 INFO L134 CoverageAnalysis]: Checked inductivity of 43 backedges. 41 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2024-11-13 15:38:20,173 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-13 15:38:20,173 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [235489447] [2024-11-13 15:38:20,173 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [235489447] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-13 15:38:20,173 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-13 15:38:20,173 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-13 15:38:20,173 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1512314192] [2024-11-13 15:38:20,173 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-13 15:38:20,174 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-13 15:38:20,174 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-13 15:38:20,174 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-11-13 15:38:20,174 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-11-13 15:38:20,174 INFO L87 Difference]: Start difference. First operand 82584 states and 147756 transitions. cyclomatic complexity: 65190 Second operand has 3 states, 3 states have (on average 29.0) internal successors, (87), 3 states have internal predecessors, (87), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-13 15:38:21,471 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-13 15:38:21,471 INFO L93 Difference]: Finished difference Result 139910 states and 249835 transitions. [2024-11-13 15:38:21,471 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 139910 states and 249835 transitions. [2024-11-13 15:38:21,839 INFO L131 ngComponentsAnalysis]: Automaton has 21 accepting balls. 41994 [2024-11-13 15:38:22,147 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 139910 states to 139910 states and 249835 transitions. [2024-11-13 15:38:22,147 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 106898 [2024-11-13 15:38:22,719 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 106898 [2024-11-13 15:38:22,720 INFO L73 IsDeterministic]: Start isDeterministic. Operand 139910 states and 249835 transitions. [2024-11-13 15:38:22,720 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2024-11-13 15:38:22,720 INFO L218 hiAutomatonCegarLoop]: Abstraction has 139910 states and 249835 transitions. [2024-11-13 15:38:22,784 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 139910 states and 249835 transitions. [2024-11-13 15:38:24,451 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 139910 to 139510. [2024-11-13 15:38:24,546 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 139510 states, 139510 states have (on average 1.7871335388144218) internal successors, (249323), 139509 states have internal predecessors, (249323), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-13 15:38:24,770 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 139510 states to 139510 states and 249323 transitions. [2024-11-13 15:38:24,771 INFO L240 hiAutomatonCegarLoop]: Abstraction has 139510 states and 249323 transitions. [2024-11-13 15:38:24,771 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2024-11-13 15:38:24,771 INFO L424 stractBuchiCegarLoop]: Abstraction has 139510 states and 249323 transitions. [2024-11-13 15:38:24,772 INFO L331 stractBuchiCegarLoop]: ======== Iteration 12 ============ [2024-11-13 15:38:24,772 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 139510 states and 249323 transitions. [2024-11-13 15:38:25,064 INFO L131 ngComponentsAnalysis]: Automaton has 21 accepting balls. 41914 [2024-11-13 15:38:25,064 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-13 15:38:25,064 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-13 15:38:25,066 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-13 15:38:25,066 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-13 15:38:25,067 INFO L745 eck$LassoCheckResult]: Stem: 1381754#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 1381755#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret28#1, main_~retValue_acc~6#1, main_~tmp~11#1;havoc main_~retValue_acc~6#1;havoc main_~tmp~11#1;assume { :begin_inline_select_helpers } true; 1388103#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1387643#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; 1383323#valid_product_returnLabel#1 main_#t~ret28#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;assume { :end_inline_valid_product } true;main_~tmp~11#1 := main_#t~ret28#1;havoc main_#t~ret28#1; 1383324#L692 assume 0 != main_~tmp~11#1;assume { :begin_inline_setup } true; 1383540#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret21#1, bigMacCall_~tmp~8#1;havoc bigMacCall_~tmp~8#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 1385297#L241 assume !(0 == getOrigin_~person#1); 1387298#L245 assume !(1 == getOrigin_~person#1); 1383837#L249 assume !(2 == getOrigin_~person#1); 1383838#L253 assume !(3 == getOrigin_~person#1); 1386223#L257 assume !(4 == getOrigin_~person#1); 1388227#L261 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 1387073#getOrigin_returnLabel#1 bigMacCall_#t~ret21#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~8#1 := bigMacCall_#t~ret21#1;havoc bigMacCall_#t~ret21#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~8#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1387074#L1431 assume 0 == initPersonOnFloor_~floor#1; 1387897#L1432 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 1381168#L1539-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1386913#L1223 assume !(0 == callOnFloor_~floorID#1); 1381372#L1226 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1381373#L1235-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 1389126#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 1382595#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret21#1, bigMacCall_~tmp~8#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 1382596#L1160 assume !(0 == isFloorCalling_~floorID#1); 1386256#L1164 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 1386257#isFloorCalling_returnLabel#1 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 1389176#isExecutiveFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret76#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 1389175#L2627 assume 0 != stopRequestedAtCurrentFloor_~tmp~22#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1389174#getCurrentFloorID_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret77#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret77#1;havoc stopRequestedAtCurrentFloor_#t~ret77#1; 1389172#L2631 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 1389173#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret92#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret92#1;havoc timeShift_#t~ret92#1; 1389201#L2779 assume !(0 != timeShift_~tmp___9~2#1); 1389199#L2870 assume !(1 == ~doorState~0); 1389191#L2870-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 1389192#L1160-3 assume !(0 == isFloorCalling_~floorID#1); 1386718#L1164-3 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 1386719#isFloorCalling_returnLabel#4 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 1391337#isExecutiveFloorCalling_returnLabel#2 stopRequestedInDirection_#t~ret70#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1; 1391334#L2510 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1391335#getCurrentFloorID_returnLabel#2 stopRequestedInDirection_#t~ret71#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~19#1 := stopRequestedInDirection_#t~ret71#1;havoc stopRequestedInDirection_#t~ret71#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~19#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 1399724#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret99#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret99#1;havoc timeShift_#t~ret99#1; 1399723#L2878 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1; 1399722#L2567 assume !(1 == ~currentHeading~0); 1399719#L2577 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1399718#L2577-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1391199#L2583-1 havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1391197#L2887-2 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 1391195#L1160-25 assume !(0 == isFloorCalling_~floorID#1); 1391193#L1164-25 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 1391191#isFloorCalling_returnLabel#26 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 1399647#isExecutiveFloorCalling_returnLabel#4 __utac_acc__Specification14_spec__1_#t~ret11#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret11#1;havoc __utac_acc__Specification14_spec__1_#t~ret11#1; 1399646#L330 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1); 1391172#L330-1 havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :end_inline___utac_acc__Specification14_spec__1 } true; 1391173#timeShift_returnLabel#1 havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 1391167#L1160-26 assume !(0 == isFloorCalling_~floorID#1); 1391155#L1164-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 1391151#isFloorCalling_returnLabel#27 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 1391150#isExecutiveFloorCalling_returnLabel#5 stopRequestedAtCurrentFloor_#t~ret76#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 1391149#L2627-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~22#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1391148#getCurrentFloorID_returnLabel#5 stopRequestedAtCurrentFloor_#t~ret77#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret77#1;havoc stopRequestedAtCurrentFloor_#t~ret77#1; 1391072#L2631-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 1391068#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret92#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret92#1;havoc timeShift_#t~ret92#1; 1391064#L2779-2 assume !(0 != timeShift_~tmp___9~2#1); 1391062#L2870-3 assume !(1 == ~doorState~0); 1391061#L2870-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 1391059#L1160-29 assume !(0 == isFloorCalling_~floorID#1); 1391049#L1164-29 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 1391046#isFloorCalling_returnLabel#30 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 1391045#isExecutiveFloorCalling_returnLabel#6 stopRequestedInDirection_#t~ret70#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1; 1391043#L2510-2 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1391044#getCurrentFloorID_returnLabel#6 stopRequestedInDirection_#t~ret71#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~19#1 := stopRequestedInDirection_#t~ret71#1;havoc stopRequestedInDirection_#t~ret71#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~19#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 1391657#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret99#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret99#1;havoc timeShift_#t~ret99#1; 1391655#L2878-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1; 1391654#L2567-3 assume !(1 == ~currentHeading~0); 1391643#L2577-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1391637#L2577-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1390612#L2583-7 havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1390611#L2887-5 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 1390609#L1160-51 assume !(0 == isFloorCalling_~floorID#1); 1390608#L1164-51 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 1390601#isFloorCalling_returnLabel#52 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 1390599#isExecutiveFloorCalling_returnLabel#8 __utac_acc__Specification14_spec__1_#t~ret11#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret11#1;havoc __utac_acc__Specification14_spec__1_#t~ret11#1; 1389934#L330-2 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1); 1389928#L330-3 havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :end_inline___utac_acc__Specification14_spec__1 } true; 1389926#timeShift_returnLabel#2 havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 1389923#L1160-52 assume !(0 == isFloorCalling_~floorID#1); 1389920#L1164-52 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 1389910#isFloorCalling_returnLabel#53 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 1389908#isExecutiveFloorCalling_returnLabel#9 stopRequestedAtCurrentFloor_#t~ret76#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 1389905#L2627-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~22#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1389902#getCurrentFloorID_returnLabel#9 stopRequestedAtCurrentFloor_#t~ret77#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret77#1;havoc stopRequestedAtCurrentFloor_#t~ret77#1; 1389899#L2631-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 1389893#stopRequestedAtCurrentFloor_returnLabel#3 timeShift_#t~ret92#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret92#1;havoc timeShift_#t~ret92#1; 1389891#L2779-4 assume !(0 != timeShift_~tmp___9~2#1); 1389886#L2870-6 assume !(1 == ~doorState~0); 1389887#L2870-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 1397996#L1160-55 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 1397997#isFloorCalling_returnLabel#56 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 1422139#isExecutiveFloorCalling_returnLabel#10 stopRequestedInDirection_#t~ret70#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1; 1422137#L2510-4 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1389124#getCurrentFloorID_returnLabel#10 stopRequestedInDirection_#t~ret71#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~19#1 := stopRequestedInDirection_#t~ret71#1;havoc stopRequestedInDirection_#t~ret71#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~19#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 1386198#stopRequestedInDirection_returnLabel#5 timeShift_#t~ret99#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret99#1;havoc timeShift_#t~ret99#1; 1386199#L2878-4 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1; 1387891#L2567-6 assume !(1 == ~currentHeading~0); 1411321#L2577-18 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1388202#L2577-20 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1385402#L2583-13 havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1384461#L2887-8 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 1384990#L1160-77 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 1384991#isFloorCalling_returnLabel#78 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 1411325#isExecutiveFloorCalling_returnLabel#12 __utac_acc__Specification14_spec__1_#t~ret11#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret11#1;havoc __utac_acc__Specification14_spec__1_#t~ret11#1; 1411322#L330-4 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1); 1411324#L330-5 havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :end_inline___utac_acc__Specification14_spec__1 } true; 1420956#timeShift_returnLabel#3 havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true; 1420955#threeTS_returnLabel#1 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret16#1, bobCall_~tmp~3#1;havoc bobCall_~tmp~3#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 1420951#L241-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 1411315#getOrigin_returnLabel#2 bobCall_#t~ret16#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~3#1 := bobCall_#t~ret16#1;havoc bobCall_#t~ret16#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~3#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1411316#L1431-1 assume 0 == initPersonOnFloor_~floor#1; 1421153#L1432-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 1421133#L1539-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1386351#L1223-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 1386352#L1235-5 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 1409820#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 1409821#bobCall_returnLabel#1 havoc bobCall_#t~ret16#1, bobCall_~tmp~3#1;assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret22#1, cleanup_#t~ret23#1, cleanup_~i~2#1, cleanup_~tmp~9#1, cleanup_~tmp___0~3#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~9#1;havoc cleanup_~tmp___0~3#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 1402323#L1160-78 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 1402324#isFloorCalling_returnLabel#79 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 1421068#isExecutiveFloorCalling_returnLabel#13 stopRequestedAtCurrentFloor_#t~ret76#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 1421069#L2627-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~22#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1421050#getCurrentFloorID_returnLabel#13 stopRequestedAtCurrentFloor_#t~ret77#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret77#1;havoc stopRequestedAtCurrentFloor_#t~ret77#1; 1421051#L2631-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 1423192#stopRequestedAtCurrentFloor_returnLabel#4 timeShift_#t~ret92#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret92#1;havoc timeShift_#t~ret92#1; 1423193#L2779-6 assume !(0 != timeShift_~tmp___9~2#1); 1429415#L2870-9 assume !(1 == ~doorState~0); 1435418#L2870-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 1435417#L1160-81 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 1435416#isFloorCalling_returnLabel#82 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 1435415#isExecutiveFloorCalling_returnLabel#14 stopRequestedInDirection_#t~ret70#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1; 1435408#L2510-6 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1429316#getCurrentFloorID_returnLabel#14 stopRequestedInDirection_#t~ret71#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~19#1 := stopRequestedInDirection_#t~ret71#1;havoc stopRequestedInDirection_#t~ret71#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~19#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 1429313#stopRequestedInDirection_returnLabel#7 timeShift_#t~ret99#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret99#1;havoc timeShift_#t~ret99#1; 1386014#L2878-6 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1; 1386016#L2567-9 assume !(1 == ~currentHeading~0); 1384215#L2577-27 assume !(0 == ~currentFloorID~0); 1458754#L2577-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1458753#L2583-19 havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1434130#L2887-11 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 1462269#L1160-103 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 1439216#isFloorCalling_returnLabel#104 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 1462268#isExecutiveFloorCalling_returnLabel#16 __utac_acc__Specification14_spec__1_#t~ret11#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret11#1;havoc __utac_acc__Specification14_spec__1_#t~ret11#1; 1462267#L330-6 assume 0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1462266#getCurrentFloorID_returnLabel#16 __utac_acc__Specification14_spec__1_#t~ret12#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification14_spec__1_~tmp~2#1 := __utac_acc__Specification14_spec__1_#t~ret12#1;havoc __utac_acc__Specification14_spec__1_#t~ret12#1;assume { :begin_inline_isExecutiveFloor } true;isExecutiveFloor_#in~floorID#1 := __utac_acc__Specification14_spec__1_~tmp~2#1;havoc isExecutiveFloor_#res#1;havoc isExecutiveFloor_~floorID#1, isExecutiveFloor_~retValue_acc~29#1;isExecutiveFloor_~floorID#1 := isExecutiveFloor_#in~floorID#1;havoc isExecutiveFloor_~retValue_acc~29#1;isExecutiveFloor_~retValue_acc~29#1 := (if ~executiveFloor~0 == isExecutiveFloor_~floorID#1 then 1 else 0);isExecutiveFloor_#res#1 := isExecutiveFloor_~retValue_acc~29#1; 1462265#isExecutiveFloor_returnLabel#4 __utac_acc__Specification14_spec__1_#t~ret13#1 := isExecutiveFloor_#res#1;havoc isExecutiveFloor_~floorID#1, isExecutiveFloor_~retValue_acc~29#1;havoc isExecutiveFloor_#in~floorID#1;assume { :end_inline_isExecutiveFloor } true;__utac_acc__Specification14_spec__1_~tmp___0~2#1 := __utac_acc__Specification14_spec__1_#t~ret13#1;havoc __utac_acc__Specification14_spec__1_#t~ret13#1; 1462263#L335-6 assume 0 != __utac_acc__Specification14_spec__1_~tmp___0~2#1; 1462261#L330-7 havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :end_inline___utac_acc__Specification14_spec__1 } true; 1462260#timeShift_returnLabel#4 havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 1455199#L500-2 assume !false; 1455200#L501 [2024-11-13 15:38:25,679 INFO L747 eck$LassoCheckResult]: Loop: 1455200#L501 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 1503724#L504 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 1503725#isBlocked_returnLabel#1 cleanup_#t~ret22#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~3#1 := cleanup_#t~ret22#1;havoc cleanup_#t~ret22#1; 1503718#L508 assume 1 != cleanup_~tmp___0~3#1; 1503719#L508-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret58#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~17#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~17#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret53#1, anyStopRequested_#t~ret54#1, anyStopRequested_#t~ret55#1, anyStopRequested_#t~ret56#1, anyStopRequested_#t~ret57#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~16#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~16#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 1503712#L1160-104 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 1503713#isFloorCalling_returnLabel#105 anyStopRequested_#t~ret53#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret53#1;havoc anyStopRequested_#t~ret53#1; 1503706#L2066 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 1503707#anyStopRequested_returnLabel#1 isIdle_#t~ret58#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret53#1, anyStopRequested_#t~ret54#1, anyStopRequested_#t~ret55#1, anyStopRequested_#t~ret56#1, anyStopRequested_#t~ret57#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~16#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~17#1 := isIdle_#t~ret58#1;havoc isIdle_#t~ret58#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~17#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 1503700#isIdle_returnLabel#1 cleanup_#t~ret23#1 := isIdle_#res#1;havoc isIdle_#t~ret58#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~17#1;assume { :end_inline_isIdle } true;cleanup_~tmp~9#1 := cleanup_#t~ret23#1;havoc cleanup_#t~ret23#1; 1503701#L520 assume !(0 != cleanup_~tmp~9#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 1503677#L1160-109 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 1475440#isFloorCalling_returnLabel#110 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 1503668#isExecutiveFloorCalling_returnLabel#17 stopRequestedAtCurrentFloor_#t~ret76#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 1503669#L2627-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~22#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1503659#getCurrentFloorID_returnLabel#17 stopRequestedAtCurrentFloor_#t~ret77#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret77#1;havoc stopRequestedAtCurrentFloor_#t~ret77#1; 1503660#L2631-4 assume ~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret74#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret75#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~21#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~21#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 1503641#L1160-110 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 1503642#isFloorCalling_returnLabel#111 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret74#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret74#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret74#1; 1503621#L2600-8 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1; 1503622#stopRequestedAtCurrentFloor__wrappee__empty_returnLabel#9 stopRequestedAtCurrentFloor_#t~ret78#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret74#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret75#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~21#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := stopRequestedAtCurrentFloor_#t~ret78#1;havoc stopRequestedAtCurrentFloor_#t~ret78#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 1505756#stopRequestedAtCurrentFloor_returnLabel#5 timeShift_#t~ret92#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret92#1;havoc timeShift_#t~ret92#1; 1505754#L2779-8 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 1503978#L2781-8 assume !(0 != ~persons_0~0); 1505735#L2781-9 assume !(0 != ~persons_1~0); 1505725#L2795-4 assume !(0 != ~persons_2~0); 1505719#L2809-4 assume !(0 != ~persons_3~0); 1505693#L2823-4 assume !(0 != ~persons_4~0); 1505689#L2837-4 assume !(0 != ~persons_5~0); 1505685#L2851-4 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret80#1, processWaitingOnFloor_#t~ret81#1, processWaitingOnFloor_#t~ret82#1, processWaitingOnFloor_#t~ret83#1, processWaitingOnFloor_#t~ret84#1, processWaitingOnFloor_#t~ret85#1, processWaitingOnFloor_#t~ret86#1, processWaitingOnFloor_#t~ret87#1, processWaitingOnFloor_#t~ret88#1, processWaitingOnFloor_#t~ret89#1, processWaitingOnFloor_#t~ret90#1, processWaitingOnFloor_#t~ret91#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~23#1, processWaitingOnFloor_~tmp___0~10#1, processWaitingOnFloor_~tmp___1~6#1, processWaitingOnFloor_~tmp___2~4#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~23#1;havoc processWaitingOnFloor_~tmp___0~10#1;havoc processWaitingOnFloor_~tmp___1~6#1;havoc processWaitingOnFloor_~tmp___2~4#1;havoc processWaitingOnFloor_~tmp___3~2#1;havoc processWaitingOnFloor_~tmp___4~1#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~11#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~11#1; 1505684#L1251-48 assume 0 == isPersonOnFloor_~floor#1; 1504649#L1252-24 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~11#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~11#1; 1504617#isPersonOnFloor_returnLabel#25 processWaitingOnFloor_#t~ret80#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~11#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~10#1 := processWaitingOnFloor_#t~ret80#1;havoc processWaitingOnFloor_#t~ret80#1; 1504615#L2681-12 assume !(0 != processWaitingOnFloor_~tmp___0~10#1); 1504609#L2681-14 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~11#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~11#1; 1504606#L1251-50 assume 0 == isPersonOnFloor_~floor#1; 1504607#L1252-25 assume !(0 == isPersonOnFloor_~person#1); 1504563#L1256-25 assume 1 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~11#1 := ~personOnFloor_1_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~11#1; 1504550#isPersonOnFloor_returnLabel#26 processWaitingOnFloor_#t~ret82#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~11#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~4#1 := processWaitingOnFloor_#t~ret82#1;havoc processWaitingOnFloor_#t~ret82#1; 1504548#L2694-12 assume !(0 != processWaitingOnFloor_~tmp___2~4#1); 1504545#L2694-14 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~11#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~11#1; 1504543#L1251-52 assume 0 == isPersonOnFloor_~floor#1; 1504544#L1252-26 assume !(0 == isPersonOnFloor_~person#1); 1505350#L1256-26 assume !(1 == isPersonOnFloor_~person#1); 1504526#L1260-26 assume 2 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~11#1 := ~personOnFloor_2_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~11#1; 1504519#isPersonOnFloor_returnLabel#27 processWaitingOnFloor_#t~ret84#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~11#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~1#1 := processWaitingOnFloor_#t~ret84#1;havoc processWaitingOnFloor_#t~ret84#1; 1504517#L2707-12 assume !(0 != processWaitingOnFloor_~tmp___4~1#1); 1504515#L2707-14 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~11#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~11#1; 1504512#L1251-54 assume 0 == isPersonOnFloor_~floor#1; 1504513#L1252-27 assume !(0 == isPersonOnFloor_~person#1); 1505223#L1256-27 assume !(1 == isPersonOnFloor_~person#1); 1505222#L1260-27 assume !(2 == isPersonOnFloor_~person#1); 1504495#L1264-27 assume 3 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~11#1 := ~personOnFloor_3_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~11#1; 1504494#isPersonOnFloor_returnLabel#28 processWaitingOnFloor_#t~ret86#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~11#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret86#1;havoc processWaitingOnFloor_#t~ret86#1; 1504491#L2720-12 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 1504488#L2720-14 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~11#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~11#1; 1504485#L1251-56 assume 0 == isPersonOnFloor_~floor#1; 1504486#L1252-28 assume !(0 == isPersonOnFloor_~person#1); 1507188#L1256-28 assume !(1 == isPersonOnFloor_~person#1); 1507186#L1260-28 assume !(2 == isPersonOnFloor_~person#1); 1505191#L1264-28 assume !(3 == isPersonOnFloor_~person#1); 1504460#L1268-28 assume 4 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~11#1 := ~personOnFloor_4_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~11#1; 1504459#isPersonOnFloor_returnLabel#29 processWaitingOnFloor_#t~ret88#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~11#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret88#1;havoc processWaitingOnFloor_#t~ret88#1; 1504450#L2733-12 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 1504449#L2733-14 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~11#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~11#1; 1504447#L1251-58 assume 0 == isPersonOnFloor_~floor#1; 1504448#L1252-29 assume !(0 == isPersonOnFloor_~person#1); 1504596#L1256-29 assume !(1 == isPersonOnFloor_~person#1); 1504595#L1260-29 assume !(2 == isPersonOnFloor_~person#1); 1504594#L1264-29 assume !(3 == isPersonOnFloor_~person#1); 1504150#L1268-29 assume 4 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~11#1 := ~personOnFloor_4_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~11#1; 1504134#isPersonOnFloor_returnLabel#30 processWaitingOnFloor_#t~ret90#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~11#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret90#1;havoc processWaitingOnFloor_#t~ret90#1; 1504132#L2746-12 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 1504130#L2746-14 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 1504128#L1195-68 assume !(0 == resetCallOnFloor_~floorID#1); 1504054#L1198-68 assume 1 == resetCallOnFloor_~floorID#1;~calls_1~0 := 0; 1504006#L1207-104 havoc resetCallOnFloor_~floorID#1;havoc resetCallOnFloor_#in~floorID#1;assume { :end_inline_resetCallOnFloor } true; 1504005#processWaitingOnFloor_returnLabel#5 havoc processWaitingOnFloor_#t~ret80#1, processWaitingOnFloor_#t~ret81#1, processWaitingOnFloor_#t~ret82#1, processWaitingOnFloor_#t~ret83#1, processWaitingOnFloor_#t~ret84#1, processWaitingOnFloor_#t~ret85#1, processWaitingOnFloor_#t~ret86#1, processWaitingOnFloor_#t~ret87#1, processWaitingOnFloor_#t~ret88#1, processWaitingOnFloor_#t~ret89#1, processWaitingOnFloor_#t~ret90#1, processWaitingOnFloor_#t~ret91#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~23#1, processWaitingOnFloor_~tmp___0~10#1, processWaitingOnFloor_~tmp___1~6#1, processWaitingOnFloor_~tmp___2~4#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;havoc processWaitingOnFloor_#in~floorID#1;assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 1504003#L1929-8 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 1503998#L1941-14 havoc resetFloorButton_~floorID#1;havoc resetFloorButton_#in~floorID#1;assume { :end_inline_resetFloorButton } true; 1503767#L2887-14 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 1503768#L1160-134 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 1490225#isFloorCalling_returnLabel#135 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 1503764#isExecutiveFloorCalling_returnLabel#20 __utac_acc__Specification14_spec__1_#t~ret11#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret11#1;havoc __utac_acc__Specification14_spec__1_#t~ret11#1; 1503758#L330-8 assume 0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1503759#getCurrentFloorID_returnLabel#20 __utac_acc__Specification14_spec__1_#t~ret12#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification14_spec__1_~tmp~2#1 := __utac_acc__Specification14_spec__1_#t~ret12#1;havoc __utac_acc__Specification14_spec__1_#t~ret12#1;assume { :begin_inline_isExecutiveFloor } true;isExecutiveFloor_#in~floorID#1 := __utac_acc__Specification14_spec__1_~tmp~2#1;havoc isExecutiveFloor_#res#1;havoc isExecutiveFloor_~floorID#1, isExecutiveFloor_~retValue_acc~29#1;isExecutiveFloor_~floorID#1 := isExecutiveFloor_#in~floorID#1;havoc isExecutiveFloor_~retValue_acc~29#1;isExecutiveFloor_~retValue_acc~29#1 := (if ~executiveFloor~0 == isExecutiveFloor_~floorID#1 then 1 else 0);isExecutiveFloor_#res#1 := isExecutiveFloor_~retValue_acc~29#1; 1503752#isExecutiveFloor_returnLabel#5 __utac_acc__Specification14_spec__1_#t~ret13#1 := isExecutiveFloor_#res#1;havoc isExecutiveFloor_~floorID#1, isExecutiveFloor_~retValue_acc~29#1;havoc isExecutiveFloor_#in~floorID#1;assume { :end_inline_isExecutiveFloor } true;__utac_acc__Specification14_spec__1_~tmp___0~2#1 := __utac_acc__Specification14_spec__1_#t~ret13#1;havoc __utac_acc__Specification14_spec__1_#t~ret13#1; 1503753#L335-8 assume 0 != __utac_acc__Specification14_spec__1_~tmp___0~2#1; 1503746#L330-9 havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :end_inline___utac_acc__Specification14_spec__1 } true; 1503747#timeShift_returnLabel#5 havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 1503730#L500-2 assume !false; 1455200#L501 [2024-11-13 15:38:25,680 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-13 15:38:25,680 INFO L85 PathProgramCache]: Analyzing trace with hash -349772862, now seen corresponding path program 1 times [2024-11-13 15:38:25,680 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-13 15:38:25,680 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [461510072] [2024-11-13 15:38:25,680 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-13 15:38:25,680 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-13 15:38:25,714 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-13 15:38:25,871 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-13 15:38:25,872 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-13 15:38:25,872 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [461510072] [2024-11-13 15:38:25,872 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [461510072] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-13 15:38:25,872 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-13 15:38:25,872 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2024-11-13 15:38:25,872 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1552392245] [2024-11-13 15:38:25,872 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-13 15:38:25,873 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-13 15:38:25,873 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-13 15:38:25,873 INFO L85 PathProgramCache]: Analyzing trace with hash -186665918, now seen corresponding path program 1 times [2024-11-13 15:38:25,873 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-13 15:38:25,874 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1161810726] [2024-11-13 15:38:25,874 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-13 15:38:25,874 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-13 15:38:25,899 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-13 15:38:25,941 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-13 15:38:25,941 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-13 15:38:25,941 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1161810726] [2024-11-13 15:38:25,941 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1161810726] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-13 15:38:25,941 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-13 15:38:25,941 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-13 15:38:25,941 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1547919913] [2024-11-13 15:38:25,942 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-13 15:38:25,943 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-13 15:38:25,943 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-13 15:38:25,943 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-11-13 15:38:25,943 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-11-13 15:38:25,944 INFO L87 Difference]: Start difference. First operand 139510 states and 249323 transitions. cyclomatic complexity: 109843 Second operand has 3 states, 3 states have (on average 30.333333333333332) internal successors, (91), 3 states have internal predecessors, (91), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-13 15:38:27,649 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-13 15:38:27,649 INFO L93 Difference]: Finished difference Result 139607 states and 248450 transitions. [2024-11-13 15:38:27,650 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 139607 states and 248450 transitions. [2024-11-13 15:38:28,652 INFO L131 ngComponentsAnalysis]: Automaton has 21 accepting balls. 41947 [2024-11-13 15:38:28,954 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 139607 states to 139607 states and 248450 transitions. [2024-11-13 15:38:28,954 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 106733 [2024-11-13 15:38:29,021 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 106733 [2024-11-13 15:38:29,021 INFO L73 IsDeterministic]: Start isDeterministic. Operand 139607 states and 248450 transitions. [2024-11-13 15:38:29,030 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2024-11-13 15:38:29,030 INFO L218 hiAutomatonCegarLoop]: Abstraction has 139607 states and 248450 transitions. [2024-11-13 15:38:29,101 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 139607 states and 248450 transitions.