./Ultimate.py --spec ../sv-benchmarks/c/properties/termination.prp --file ../sv-benchmarks/c/product-lines/elevator_spec14_product11.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for termination Using default analysis Version c7c6ca5d Calling Ultimate with: /root/.sdkman/candidates/java/11.0.12-open/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerTermination.xml -i ../sv-benchmarks/c/product-lines/elevator_spec14_product11.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Termination-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(F end) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash a3102ca0659fbbd15269b525dd7b096164ab7cd0af67dfa99033803ea46b0a8e --- Real Ultimate output --- This is Ultimate 0.2.5-?-c7c6ca5-m [2024-11-09 15:53:03,481 INFO L188 SettingsManager]: Resetting all preferences to default values... [2024-11-09 15:53:03,543 INFO L114 SettingsManager]: Loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Termination-32bit-Automizer_Default.epf [2024-11-09 15:53:03,546 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2024-11-09 15:53:03,550 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2024-11-09 15:53:03,575 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2024-11-09 15:53:03,576 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2024-11-09 15:53:03,576 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2024-11-09 15:53:03,577 INFO L151 SettingsManager]: Preferences of Boogie Preprocessor differ from their defaults: [2024-11-09 15:53:03,577 INFO L153 SettingsManager]: * Use memory slicer=true [2024-11-09 15:53:03,578 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2024-11-09 15:53:03,578 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2024-11-09 15:53:03,578 INFO L153 SettingsManager]: * Use SBE=true [2024-11-09 15:53:03,579 INFO L151 SettingsManager]: Preferences of BuchiAutomizer differ from their defaults: [2024-11-09 15:53:03,580 INFO L153 SettingsManager]: * NCSB implementation=INTSET_LAZY3 [2024-11-09 15:53:03,581 INFO L153 SettingsManager]: * Use old map elimination=false [2024-11-09 15:53:03,581 INFO L153 SettingsManager]: * Use external solver (rank synthesis)=false [2024-11-09 15:53:03,581 INFO L153 SettingsManager]: * Use only trivial implications for array writes=true [2024-11-09 15:53:03,581 INFO L153 SettingsManager]: * Rank analysis=LINEAR_WITH_GUESSES [2024-11-09 15:53:03,581 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2024-11-09 15:53:03,582 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=ASSUME [2024-11-09 15:53:03,585 INFO L153 SettingsManager]: * sizeof long=4 [2024-11-09 15:53:03,585 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2024-11-09 15:53:03,585 INFO L153 SettingsManager]: * sizeof POINTER=4 [2024-11-09 15:53:03,585 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2024-11-09 15:53:03,585 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=ASSUME [2024-11-09 15:53:03,586 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=ASSUME [2024-11-09 15:53:03,586 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=ASSUME [2024-11-09 15:53:03,586 INFO L153 SettingsManager]: * Allow undefined functions=false [2024-11-09 15:53:03,586 INFO L153 SettingsManager]: * Check unreachability of reach_error function=false [2024-11-09 15:53:03,586 INFO L153 SettingsManager]: * sizeof long double=12 [2024-11-09 15:53:03,587 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2024-11-09 15:53:03,587 INFO L153 SettingsManager]: * Assume nondeterminstic values are in range=false [2024-11-09 15:53:03,587 INFO L153 SettingsManager]: * Use constant arrays=true [2024-11-09 15:53:03,587 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2024-11-09 15:53:03,587 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2024-11-09 15:53:03,587 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2024-11-09 15:53:03,588 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2024-11-09 15:53:03,588 INFO L151 SettingsManager]: Preferences of IcfgTransformer differ from their defaults: [2024-11-09 15:53:03,588 INFO L153 SettingsManager]: * TransformationType=MODULO_NEIGHBOR WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(F end) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> a3102ca0659fbbd15269b525dd7b096164ab7cd0af67dfa99033803ea46b0a8e [2024-11-09 15:53:03,810 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2024-11-09 15:53:03,845 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2024-11-09 15:53:03,847 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2024-11-09 15:53:03,848 INFO L270 PluginConnector]: Initializing CDTParser... [2024-11-09 15:53:03,849 INFO L274 PluginConnector]: CDTParser initialized [2024-11-09 15:53:03,850 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/elevator_spec14_product11.cil.c [2024-11-09 15:53:05,227 INFO L533 CDTParser]: Created temporary CDT project at NULL [2024-11-09 15:53:05,452 INFO L384 CDTParser]: Found 1 translation units. [2024-11-09 15:53:05,452 INFO L180 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/elevator_spec14_product11.cil.c [2024-11-09 15:53:05,482 INFO L427 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/427166431/e8371459ce45468992c6ab136c02d5fd/FLAGe734c59a9 [2024-11-09 15:53:05,496 INFO L435 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/427166431/e8371459ce45468992c6ab136c02d5fd [2024-11-09 15:53:05,499 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2024-11-09 15:53:05,500 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2024-11-09 15:53:05,501 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2024-11-09 15:53:05,501 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2024-11-09 15:53:05,505 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2024-11-09 15:53:05,506 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 09.11 03:53:05" (1/1) ... [2024-11-09 15:53:05,507 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@3915befc and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.11 03:53:05, skipping insertion in model container [2024-11-09 15:53:05,507 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 09.11 03:53:05" (1/1) ... [2024-11-09 15:53:05,556 INFO L175 MainTranslator]: Built tables and reachable declarations [2024-11-09 15:53:05,993 INFO L210 PostProcessor]: Analyzing one entry point: main [2024-11-09 15:53:06,011 INFO L200 MainTranslator]: Completed pre-run [2024-11-09 15:53:06,030 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [48] [2024-11-09 15:53:06,033 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"UnitTests.i","") [86] [2024-11-09 15:53:06,033 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [186] [2024-11-09 15:53:06,033 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Person.i","") [195] [2024-11-09 15:53:06,033 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Specification14_spec.i","") [315] [2024-11-09 15:53:06,033 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [355] [2024-11-09 15:53:06,033 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [705] [2024-11-09 15:53:06,033 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Floor.i","") [1071] [2024-11-09 15:53:06,034 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Elevator.i","") [1738] [2024-11-09 15:53:06,034 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [3255] [2024-11-09 15:53:06,152 INFO L210 PostProcessor]: Analyzing one entry point: main [2024-11-09 15:53:06,186 INFO L204 MainTranslator]: Completed translation [2024-11-09 15:53:06,186 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.11 03:53:06 WrapperNode [2024-11-09 15:53:06,186 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2024-11-09 15:53:06,187 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2024-11-09 15:53:06,187 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2024-11-09 15:53:06,187 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2024-11-09 15:53:06,192 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.11 03:53:06" (1/1) ... [2024-11-09 15:53:06,219 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.11 03:53:06" (1/1) ... [2024-11-09 15:53:06,441 INFO L138 Inliner]: procedures = 90, calls = 332, calls flagged for inlining = 185, calls inlined = 636, statements flattened = 20224 [2024-11-09 15:53:06,442 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2024-11-09 15:53:06,442 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2024-11-09 15:53:06,442 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2024-11-09 15:53:06,442 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2024-11-09 15:53:06,451 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.11 03:53:06" (1/1) ... [2024-11-09 15:53:06,451 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.11 03:53:06" (1/1) ... [2024-11-09 15:53:06,489 INFO L184 PluginConnector]: Executing the observer MemorySlicer from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.11 03:53:06" (1/1) ... [2024-11-09 15:53:06,575 INFO L175 MemorySlicer]: Split 81 memory accesses to 20 slices as follows [2, 4, 4, 4, 2, 4, 4, 5, 3, 3, 5, 7, 4, 4, 4, 4, 4, 6, 4, 4]. 9 percent of accesses are in the largest equivalence class. The 81 initializations are split as follows [2, 4, 4, 4, 2, 4, 4, 5, 3, 3, 5, 7, 4, 4, 4, 4, 4, 6, 4, 4]. The 0 writes are split as follows [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0]. [2024-11-09 15:53:06,575 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.11 03:53:06" (1/1) ... [2024-11-09 15:53:06,576 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.11 03:53:06" (1/1) ... [2024-11-09 15:53:06,657 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.11 03:53:06" (1/1) ... [2024-11-09 15:53:06,811 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.11 03:53:06" (1/1) ... [2024-11-09 15:53:06,859 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.11 03:53:06" (1/1) ... [2024-11-09 15:53:06,895 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.11 03:53:06" (1/1) ... [2024-11-09 15:53:07,110 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2024-11-09 15:53:07,111 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2024-11-09 15:53:07,111 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2024-11-09 15:53:07,111 INFO L274 PluginConnector]: RCFGBuilder initialized [2024-11-09 15:53:07,114 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.11 03:53:06" (1/1) ... [2024-11-09 15:53:07,119 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2024-11-09 15:53:07,127 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2024-11-09 15:53:07,143 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2024-11-09 15:53:07,152 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (1)] Waiting until timeout for monitored process [2024-11-09 15:53:07,184 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2024-11-09 15:53:07,184 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#0 [2024-11-09 15:53:07,184 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#1 [2024-11-09 15:53:07,186 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#2 [2024-11-09 15:53:07,186 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#3 [2024-11-09 15:53:07,186 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#4 [2024-11-09 15:53:07,186 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#5 [2024-11-09 15:53:07,186 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#6 [2024-11-09 15:53:07,186 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#7 [2024-11-09 15:53:07,186 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#8 [2024-11-09 15:53:07,186 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#9 [2024-11-09 15:53:07,186 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#10 [2024-11-09 15:53:07,186 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#11 [2024-11-09 15:53:07,187 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#12 [2024-11-09 15:53:07,187 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#13 [2024-11-09 15:53:07,187 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#14 [2024-11-09 15:53:07,187 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#15 [2024-11-09 15:53:07,187 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#16 [2024-11-09 15:53:07,187 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#17 [2024-11-09 15:53:07,187 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#18 [2024-11-09 15:53:07,187 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#19 [2024-11-09 15:53:07,187 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2024-11-09 15:53:07,187 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2024-11-09 15:53:07,341 INFO L238 CfgBuilder]: Building ICFG [2024-11-09 15:53:07,343 INFO L264 CfgBuilder]: Building CFG for each procedure with an implementation [2024-11-09 15:53:14,826 INFO L? ?]: Removed 9350 outVars from TransFormulas that were not future-live. [2024-11-09 15:53:14,827 INFO L287 CfgBuilder]: Performing block encoding [2024-11-09 15:53:14,957 INFO L311 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2024-11-09 15:53:14,960 INFO L316 CfgBuilder]: Removed 1 assume(true) statements. [2024-11-09 15:53:14,961 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 09.11 03:53:14 BoogieIcfgContainer [2024-11-09 15:53:14,961 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2024-11-09 15:53:14,961 INFO L112 PluginConnector]: ------------------------BuchiAutomizer---------------------------- [2024-11-09 15:53:14,965 INFO L270 PluginConnector]: Initializing BuchiAutomizer... [2024-11-09 15:53:14,968 INFO L274 PluginConnector]: BuchiAutomizer initialized [2024-11-09 15:53:14,972 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2024-11-09 15:53:14,972 INFO L184 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "CDTParser AST 09.11 03:53:05" (1/3) ... [2024-11-09 15:53:14,972 INFO L204 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@5d15f9c0 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 09.11 03:53:14, skipping insertion in model container [2024-11-09 15:53:14,972 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2024-11-09 15:53:14,973 INFO L184 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.11 03:53:06" (2/3) ... [2024-11-09 15:53:14,973 INFO L204 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@5d15f9c0 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 09.11 03:53:14, skipping insertion in model container [2024-11-09 15:53:14,973 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2024-11-09 15:53:14,973 INFO L184 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 09.11 03:53:14" (3/3) ... [2024-11-09 15:53:14,974 INFO L332 chiAutomizerObserver]: Analyzing ICFG elevator_spec14_product11.cil.c [2024-11-09 15:53:15,114 INFO L300 stractBuchiCegarLoop]: Interprodecural is true [2024-11-09 15:53:15,115 INFO L301 stractBuchiCegarLoop]: Hoare is None [2024-11-09 15:53:15,115 INFO L302 stractBuchiCegarLoop]: Compute interpolants for ForwardPredicates [2024-11-09 15:53:15,115 INFO L303 stractBuchiCegarLoop]: Backedges is STRAIGHT_LINE [2024-11-09 15:53:15,115 INFO L304 stractBuchiCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2024-11-09 15:53:15,115 INFO L305 stractBuchiCegarLoop]: Difference is false [2024-11-09 15:53:15,115 INFO L306 stractBuchiCegarLoop]: Minimize is MINIMIZE_SEVPA [2024-11-09 15:53:15,115 INFO L310 stractBuchiCegarLoop]: ======== Iteration 0 == of CEGAR loop == BuchiAutomatonCegarLoop ======== [2024-11-09 15:53:15,134 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand has 5831 states, 5830 states have (on average 1.8710120068610634) internal successors, (10908), 5830 states have internal predecessors, (10908), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-09 15:53:15,229 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1182 [2024-11-09 15:53:15,229 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-09 15:53:15,229 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-09 15:53:15,244 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-09 15:53:15,244 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-09 15:53:15,244 INFO L332 stractBuchiCegarLoop]: ======== Iteration 1 ============ [2024-11-09 15:53:15,255 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand has 5831 states, 5830 states have (on average 1.8710120068610634) internal successors, (10908), 5830 states have internal predecessors, (10908), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-09 15:53:15,300 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1182 [2024-11-09 15:53:15,300 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-09 15:53:15,300 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-09 15:53:15,304 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-09 15:53:15,304 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-09 15:53:15,315 INFO L745 eck$LassoCheckResult]: Stem: 209#$Ultimate##0true assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 5719#L-1true assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret28#1, main_~retValue_acc~6#1, main_~tmp~11#1;havoc main_~retValue_acc~6#1;havoc main_~tmp~11#1;assume { :begin_inline_select_helpers } true; 4039#select_helpers_returnLabel#1true assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 3585#select_features_returnLabel#1true assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; 837#valid_product_returnLabel#1true main_#t~ret28#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;assume { :end_inline_valid_product } true;main_~tmp~11#1 := main_#t~ret28#1;havoc main_#t~ret28#1; 940#L692true assume 0 != main_~tmp~11#1;assume { :begin_inline_setup } true; 1886#setup_returnLabel#1true assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret21#1, bigMacCall_~tmp~8#1;havoc bigMacCall_~tmp~8#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 5530#L241true assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 3116#getOrigin_returnLabel#1true bigMacCall_#t~ret21#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~8#1 := bigMacCall_#t~ret21#1;havoc bigMacCall_#t~ret21#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~8#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 3831#L1431true assume 0 == initPersonOnFloor_~floor#1; 4689#L1432true assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 2970#L1539-1true assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 5737#L1223true assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 5720#L1235-2true havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 1210#initPersonOnFloor_returnLabel#1true havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 532#bigMacCall_returnLabel#1true havoc bigMacCall_#t~ret21#1, bigMacCall_~tmp~8#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 1114#L1160true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 2992#isFloorCalling_returnLabel#1true isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 4960#isExecutiveFloorCalling_returnLabel#1true stopRequestedAtCurrentFloor_#t~ret76#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 303#L2627true assume 0 != stopRequestedAtCurrentFloor_~tmp~22#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 4226#getCurrentFloorID_returnLabel#1true stopRequestedAtCurrentFloor_#t~ret77#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret77#1;havoc stopRequestedAtCurrentFloor_#t~ret77#1; 3121#L2631true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 302#stopRequestedAtCurrentFloor_returnLabel#1true timeShift_#t~ret92#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret92#1;havoc timeShift_#t~ret92#1; 4723#L2779true assume !(0 != timeShift_~tmp___9~2#1); 3459#L2870true assume !(1 == ~doorState~0); 1698#L2870-2true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 1395#L1160-3true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 3399#isFloorCalling_returnLabel#4true isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 1184#isExecutiveFloorCalling_returnLabel#2true stopRequestedInDirection_#t~ret70#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1; 3204#L2510true assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 4575#getCurrentFloorID_returnLabel#2true stopRequestedInDirection_#t~ret71#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~19#1 := stopRequestedInDirection_#t~ret71#1;havoc stopRequestedInDirection_#t~ret71#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~19#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 2026#stopRequestedInDirection_returnLabel#1true timeShift_#t~ret99#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret99#1;havoc timeShift_#t~ret99#1; 3882#L2878true assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1; 3393#L2567true assume !(1 == ~currentHeading~0); 2369#L2577true assume !(0 == ~currentFloorID~0); 820#L2577-2true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 899#L2583-1true havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 4013#L2887-2true assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 4414#L1160-25true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 4196#isFloorCalling_returnLabel#26true isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 1782#isExecutiveFloorCalling_returnLabel#4true __utac_acc__Specification14_spec__1_#t~ret11#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret11#1;havoc __utac_acc__Specification14_spec__1_#t~ret11#1; 5551#L330true assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1); 5#L330-1true havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :end_inline___utac_acc__Specification14_spec__1 } true; 5384#timeShift_returnLabel#1true havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 3977#L1160-26true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 4289#isFloorCalling_returnLabel#27true isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 154#isExecutiveFloorCalling_returnLabel#5true stopRequestedAtCurrentFloor_#t~ret76#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 5725#L2627-1true assume 0 != stopRequestedAtCurrentFloor_~tmp~22#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1316#getCurrentFloorID_returnLabel#5true stopRequestedAtCurrentFloor_#t~ret77#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret77#1;havoc stopRequestedAtCurrentFloor_#t~ret77#1; 1588#L2631-1true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 2521#stopRequestedAtCurrentFloor_returnLabel#2true timeShift_#t~ret92#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret92#1;havoc timeShift_#t~ret92#1; 1388#L2779-2true assume !(0 != timeShift_~tmp___9~2#1); 4333#L2870-3true assume 1 == ~doorState~0;~doorState~0 := 0; 3138#L2870-5true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 4555#L1160-29true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 534#isFloorCalling_returnLabel#30true isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 315#isExecutiveFloorCalling_returnLabel#6true stopRequestedInDirection_#t~ret70#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1; 5662#L2510-2true assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1273#getCurrentFloorID_returnLabel#6true stopRequestedInDirection_#t~ret71#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~19#1 := stopRequestedInDirection_#t~ret71#1;havoc stopRequestedInDirection_#t~ret71#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~19#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 1414#stopRequestedInDirection_returnLabel#3true timeShift_#t~ret99#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret99#1;havoc timeShift_#t~ret99#1; 1142#L2878-2true assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1; 1275#L2567-3true assume !(1 == ~currentHeading~0); 2295#L2577-9true assume !(0 == ~currentFloorID~0); 3714#L2577-11true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2453#L2583-7true havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 780#L2887-5true assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 3094#L1160-51true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 4537#isFloorCalling_returnLabel#52true isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 2087#isExecutiveFloorCalling_returnLabel#8true __utac_acc__Specification14_spec__1_#t~ret11#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret11#1;havoc __utac_acc__Specification14_spec__1_#t~ret11#1; 1094#L330-2true assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1); 961#L330-3true havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :end_inline___utac_acc__Specification14_spec__1 } true; 2472#timeShift_returnLabel#2true havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 5261#L1160-52true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 2797#isFloorCalling_returnLabel#53true isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 3471#isExecutiveFloorCalling_returnLabel#9true stopRequestedAtCurrentFloor_#t~ret76#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 149#L2627-2true assume 0 != stopRequestedAtCurrentFloor_~tmp~22#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1539#getCurrentFloorID_returnLabel#9true stopRequestedAtCurrentFloor_#t~ret77#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret77#1;havoc stopRequestedAtCurrentFloor_#t~ret77#1; 2506#L2631-2true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 783#stopRequestedAtCurrentFloor_returnLabel#3true timeShift_#t~ret92#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret92#1;havoc timeShift_#t~ret92#1; 4903#L2779-4true assume !(0 != timeShift_~tmp___9~2#1); 2636#L2870-6true assume !(1 == ~doorState~0); 830#L2870-8true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 494#L1160-55true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 3026#isFloorCalling_returnLabel#56true isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 854#isExecutiveFloorCalling_returnLabel#10true stopRequestedInDirection_#t~ret70#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1; 141#L2510-4true assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 5702#getCurrentFloorID_returnLabel#10true stopRequestedInDirection_#t~ret71#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~19#1 := stopRequestedInDirection_#t~ret71#1;havoc stopRequestedInDirection_#t~ret71#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~19#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 2450#stopRequestedInDirection_returnLabel#5true timeShift_#t~ret99#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret99#1;havoc timeShift_#t~ret99#1; 3826#L2878-4true assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1; 535#L2567-6true assume !(1 == ~currentHeading~0); 218#L2577-18true assume !(0 == ~currentFloorID~0); 4355#L2577-20true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1940#L2583-13true havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 3624#L2887-8true assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 1700#L1160-77true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 5373#isFloorCalling_returnLabel#78true isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 3442#isExecutiveFloorCalling_returnLabel#12true __utac_acc__Specification14_spec__1_#t~ret11#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret11#1;havoc __utac_acc__Specification14_spec__1_#t~ret11#1; 3526#L330-4true assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1); 4446#L330-5true havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :end_inline___utac_acc__Specification14_spec__1 } true; 353#timeShift_returnLabel#3true havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true; 66#threeTS_returnLabel#1true assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret16#1, bobCall_~tmp~3#1;havoc bobCall_~tmp~3#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 4546#L241-1true assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 499#getOrigin_returnLabel#2true bobCall_#t~ret16#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~3#1 := bobCall_#t~ret16#1;havoc bobCall_#t~ret16#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~3#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 4477#L1431-1true assume 0 == initPersonOnFloor_~floor#1; 851#L1432-2true assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 4022#L1539-3true assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 2553#L1223-2true assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 774#L1235-5true havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 4141#initPersonOnFloor_returnLabel#2true havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 3451#bobCall_returnLabel#1true havoc bobCall_#t~ret16#1, bobCall_~tmp~3#1;assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret22#1, cleanup_#t~ret23#1, cleanup_~i~2#1, cleanup_~tmp~9#1, cleanup_~tmp___0~3#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~9#1;havoc cleanup_~tmp___0~3#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 2173#L1160-78true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 1157#isFloorCalling_returnLabel#79true isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 5027#isExecutiveFloorCalling_returnLabel#13true stopRequestedAtCurrentFloor_#t~ret76#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 1785#L2627-3true assume 0 != stopRequestedAtCurrentFloor_~tmp~22#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 4818#getCurrentFloorID_returnLabel#13true stopRequestedAtCurrentFloor_#t~ret77#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret77#1;havoc stopRequestedAtCurrentFloor_#t~ret77#1; 1052#L2631-3true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 4382#stopRequestedAtCurrentFloor_returnLabel#4true timeShift_#t~ret92#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret92#1;havoc timeShift_#t~ret92#1; 2284#L2779-6true assume !(0 != timeShift_~tmp___9~2#1); 2489#L2870-9true assume !(1 == ~doorState~0); 63#L2870-11true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 187#L1160-81true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 3706#isFloorCalling_returnLabel#82true isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 2667#isExecutiveFloorCalling_returnLabel#14true stopRequestedInDirection_#t~ret70#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1; 112#L2510-6true assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 2670#getCurrentFloorID_returnLabel#14true stopRequestedInDirection_#t~ret71#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~19#1 := stopRequestedInDirection_#t~ret71#1;havoc stopRequestedInDirection_#t~ret71#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~19#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 2275#stopRequestedInDirection_returnLabel#7true timeShift_#t~ret99#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret99#1;havoc timeShift_#t~ret99#1; 2313#L2878-6true assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1; 1269#L2567-9true assume !(1 == ~currentHeading~0); 843#L2577-27true assume !(0 == ~currentFloorID~0); 5825#L2577-29true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1997#L2583-19true havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 17#L2887-11true assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 3037#L1160-103true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 2756#isFloorCalling_returnLabel#104true isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 5570#isExecutiveFloorCalling_returnLabel#16true __utac_acc__Specification14_spec__1_#t~ret11#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret11#1;havoc __utac_acc__Specification14_spec__1_#t~ret11#1; 148#L330-6true assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1); 935#L330-7true havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :end_inline___utac_acc__Specification14_spec__1 } true; 5324#timeShift_returnLabel#4true havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 3989#L500-2true [2024-11-09 15:53:15,316 INFO L747 eck$LassoCheckResult]: Loop: 3989#L500-2true assume !false; 600#L501true cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 5026#L504true assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 4028#isBlocked_returnLabel#1true cleanup_#t~ret22#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~3#1 := cleanup_#t~ret22#1;havoc cleanup_#t~ret22#1; 5154#L508true assume 1 != cleanup_~tmp___0~3#1; 390#L508-1true assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret58#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~17#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~17#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret53#1, anyStopRequested_#t~ret54#1, anyStopRequested_#t~ret55#1, anyStopRequested_#t~ret56#1, anyStopRequested_#t~ret57#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~16#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~16#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 3230#L1160-104true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 2567#isFloorCalling_returnLabel#105true anyStopRequested_#t~ret53#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret53#1;havoc anyStopRequested_#t~ret53#1; 2293#L2066true assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 182#anyStopRequested_returnLabel#1true isIdle_#t~ret58#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret53#1, anyStopRequested_#t~ret54#1, anyStopRequested_#t~ret55#1, anyStopRequested_#t~ret56#1, anyStopRequested_#t~ret57#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~16#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~17#1 := isIdle_#t~ret58#1;havoc isIdle_#t~ret58#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~17#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 1370#isIdle_returnLabel#1true cleanup_#t~ret23#1 := isIdle_#res#1;havoc isIdle_#t~ret58#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~17#1;assume { :end_inline_isIdle } true;cleanup_~tmp~9#1 := cleanup_#t~ret23#1;havoc cleanup_#t~ret23#1; 4615#L520true assume !(0 != cleanup_~tmp~9#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 5614#L1160-109true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 4124#isFloorCalling_returnLabel#110true isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 570#isExecutiveFloorCalling_returnLabel#17true stopRequestedAtCurrentFloor_#t~ret76#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 2038#L2627-4true assume 0 != stopRequestedAtCurrentFloor_~tmp~22#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 2294#getCurrentFloorID_returnLabel#17true stopRequestedAtCurrentFloor_#t~ret77#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret77#1;havoc stopRequestedAtCurrentFloor_#t~ret77#1; 4169#L2631-4true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 1422#stopRequestedAtCurrentFloor_returnLabel#5true timeShift_#t~ret92#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret92#1;havoc timeShift_#t~ret92#1; 2118#L2779-8true assume !(0 != timeShift_~tmp___9~2#1); 2786#L2870-12true assume 1 == ~doorState~0;~doorState~0 := 0; 5771#L2870-14true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 4614#L1160-112true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 5206#isFloorCalling_returnLabel#113true isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 4726#isExecutiveFloorCalling_returnLabel#18true stopRequestedInDirection_#t~ret70#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1; 3408#L2510-8true assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 3835#getCurrentFloorID_returnLabel#18true stopRequestedInDirection_#t~ret71#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~19#1 := stopRequestedInDirection_#t~ret71#1;havoc stopRequestedInDirection_#t~ret71#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~19#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 5086#stopRequestedInDirection_returnLabel#9true timeShift_#t~ret99#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret99#1;havoc timeShift_#t~ret99#1; 634#L2878-8true assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1; 3956#L2567-12true assume !(1 == ~currentHeading~0); 5239#L2577-36true assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 5061#L2577-38true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1897#L2583-25true havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 5827#L2887-14true assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 3690#L1160-134true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 4504#isFloorCalling_returnLabel#135true isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 921#isExecutiveFloorCalling_returnLabel#20true __utac_acc__Specification14_spec__1_#t~ret11#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret11#1;havoc __utac_acc__Specification14_spec__1_#t~ret11#1; 2752#L330-8true assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1); 5549#L330-9true havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :end_inline___utac_acc__Specification14_spec__1 } true; 3553#timeShift_returnLabel#5true havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 3989#L500-2true [2024-11-09 15:53:15,324 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-09 15:53:15,327 INFO L85 PathProgramCache]: Analyzing trace with hash 1954735616, now seen corresponding path program 1 times [2024-11-09 15:53:15,335 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-09 15:53:15,336 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1752679588] [2024-11-09 15:53:15,336 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-09 15:53:15,337 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-09 15:53:15,496 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-09 15:53:15,886 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-09 15:53:15,888 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-09 15:53:15,888 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1752679588] [2024-11-09 15:53:15,889 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1752679588] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-09 15:53:15,889 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-09 15:53:15,889 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-09 15:53:15,890 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [247983129] [2024-11-09 15:53:15,890 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-09 15:53:15,895 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-09 15:53:15,896 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-09 15:53:15,896 INFO L85 PathProgramCache]: Analyzing trace with hash -1532863897, now seen corresponding path program 1 times [2024-11-09 15:53:15,896 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-09 15:53:15,896 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [951596742] [2024-11-09 15:53:15,896 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-09 15:53:15,897 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-09 15:53:15,919 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-09 15:53:16,035 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-09 15:53:16,035 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-09 15:53:16,035 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [951596742] [2024-11-09 15:53:16,035 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [951596742] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-09 15:53:16,035 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-09 15:53:16,035 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-11-09 15:53:16,036 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [619010447] [2024-11-09 15:53:16,036 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-09 15:53:16,037 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-09 15:53:16,037 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-09 15:53:16,064 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2024-11-09 15:53:16,065 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2024-11-09 15:53:16,076 INFO L87 Difference]: Start difference. First operand has 5831 states, 5830 states have (on average 1.8710120068610634) internal successors, (10908), 5830 states have internal predecessors, (10908), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand has 7 states, 7 states have (on average 5.714285714285714) internal successors, (40), 7 states have internal predecessors, (40), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-09 15:53:20,687 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-09 15:53:20,687 INFO L93 Difference]: Finished difference Result 16952 states and 31550 transitions. [2024-11-09 15:53:20,689 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 16952 states and 31550 transitions. [2024-11-09 15:53:20,821 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 3456 [2024-11-09 15:53:20,918 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 16952 states to 16916 states and 31507 transitions. [2024-11-09 15:53:20,919 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 16916 [2024-11-09 15:53:20,939 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 16916 [2024-11-09 15:53:20,939 INFO L73 IsDeterministic]: Start isDeterministic. Operand 16916 states and 31507 transitions. [2024-11-09 15:53:20,975 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-09 15:53:20,976 INFO L218 hiAutomatonCegarLoop]: Abstraction has 16916 states and 31507 transitions. [2024-11-09 15:53:21,012 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 16916 states and 31507 transitions. [2024-11-09 15:53:21,333 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 16916 to 16826. [2024-11-09 15:53:21,366 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 16826 states, 16826 states have (on average 1.8636039462736242) internal successors, (31357), 16825 states have internal predecessors, (31357), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-09 15:53:21,402 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 16826 states to 16826 states and 31357 transitions. [2024-11-09 15:53:21,404 INFO L240 hiAutomatonCegarLoop]: Abstraction has 16826 states and 31357 transitions. [2024-11-09 15:53:21,405 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2024-11-09 15:53:21,408 INFO L425 stractBuchiCegarLoop]: Abstraction has 16826 states and 31357 transitions. [2024-11-09 15:53:21,408 INFO L332 stractBuchiCegarLoop]: ======== Iteration 2 ============ [2024-11-09 15:53:21,408 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 16826 states and 31357 transitions. [2024-11-09 15:53:21,487 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 3438 [2024-11-09 15:53:21,488 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-09 15:53:21,488 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-09 15:53:21,490 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-09 15:53:21,490 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-09 15:53:21,491 INFO L745 eck$LassoCheckResult]: Stem: 23342#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 23343#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret28#1, main_~retValue_acc~6#1, main_~tmp~11#1;havoc main_~retValue_acc~6#1;havoc main_~tmp~11#1;assume { :begin_inline_select_helpers } true; 28383#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 28062#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; 24634#valid_product_returnLabel#1 main_#t~ret28#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;assume { :end_inline_valid_product } true;main_~tmp~11#1 := main_#t~ret28#1;havoc main_#t~ret28#1; 24635#L692 assume 0 != main_~tmp~11#1;assume { :begin_inline_setup } true; 24810#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret21#1, bigMacCall_~tmp~8#1;havoc bigMacCall_~tmp~8#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 26262#L241 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 25046#getOrigin_returnLabel#1 bigMacCall_#t~ret21#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~8#1 := bigMacCall_#t~ret21#1;havoc bigMacCall_#t~ret21#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~8#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 27641#L1431 assume 0 == initPersonOnFloor_~floor#1; 28241#L1432 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 22849#L1539-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 27518#L1223 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 23025#L1235-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 25256#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 24051#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret21#1, bigMacCall_~tmp~8#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 24052#L1160 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 25094#isFloorCalling_returnLabel#1 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 27534#isExecutiveFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret76#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 23560#L2627 assume 0 != stopRequestedAtCurrentFloor_~tmp~22#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 23561#getCurrentFloorID_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret77#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret77#1;havoc stopRequestedAtCurrentFloor_#t~ret77#1; 27643#L2631 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 23558#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret92#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret92#1;havoc timeShift_#t~ret92#1; 23559#L2779 assume !(0 != timeShift_~tmp___9~2#1); 28707#L2870 assume !(1 == ~doorState~0); 37613#L2870-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 37612#L1160-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 37611#isFloorCalling_returnLabel#4 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 37610#isExecutiveFloorCalling_returnLabel#2 stopRequestedInDirection_#t~ret70#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1; 37608#L2510 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 37606#getCurrentFloorID_returnLabel#2 stopRequestedInDirection_#t~ret71#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~19#1 := stopRequestedInDirection_#t~ret71#1;havoc stopRequestedInDirection_#t~ret71#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~19#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 37607#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret99#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret99#1;havoc timeShift_#t~ret99#1; 38293#L2878 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1; 38291#L2567 assume !(1 == ~currentHeading~0); 38288#L2577 assume !(0 == ~currentFloorID~0); 24606#L2577-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 24607#L2583-1 havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 24743#L2887-2 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 35634#L1160-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 30284#isFloorCalling_returnLabel#26 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 35633#isExecutiveFloorCalling_returnLabel#4 __utac_acc__Specification14_spec__1_#t~ret11#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret11#1;havoc __utac_acc__Specification14_spec__1_#t~ret11#1; 35627#L330 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1); 35623#L330-1 havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :end_inline___utac_acc__Specification14_spec__1 } true; 35622#timeShift_returnLabel#1 havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 35621#L1160-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 31705#isFloorCalling_returnLabel#27 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 35620#isExecutiveFloorCalling_returnLabel#5 stopRequestedAtCurrentFloor_#t~ret76#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 35618#L2627-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~22#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 35617#getCurrentFloorID_returnLabel#5 stopRequestedAtCurrentFloor_#t~ret77#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret77#1;havoc stopRequestedAtCurrentFloor_#t~ret77#1; 34634#L2631-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 25853#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret92#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret92#1;havoc timeShift_#t~ret92#1; 25544#L2779-2 assume !(0 != timeShift_~tmp___9~2#1); 25545#L2870-3 assume 1 == ~doorState~0;~doorState~0 := 0; 27660#L2870-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 27661#L1160-29 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 24054#isFloorCalling_returnLabel#30 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 23589#isExecutiveFloorCalling_returnLabel#6 stopRequestedInDirection_#t~ret70#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1; 23590#L2510-2 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 28962#getCurrentFloorID_returnLabel#6 stopRequestedInDirection_#t~ret71#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~19#1 := stopRequestedInDirection_#t~ret71#1;havoc stopRequestedInDirection_#t~ret71#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~19#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 37932#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret99#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret99#1;havoc timeShift_#t~ret99#1; 37931#L2878-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1; 37929#L2567-3 assume !(1 == ~currentHeading~0); 37928#L2577-9 assume !(0 == ~currentFloorID~0); 28162#L2577-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 26974#L2583-7 havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 24533#L2887-5 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 24534#L1160-51 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 29155#isFloorCalling_returnLabel#52 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 29154#isExecutiveFloorCalling_returnLabel#8 __utac_acc__Specification14_spec__1_#t~ret11#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret11#1;havoc __utac_acc__Specification14_spec__1_#t~ret11#1; 29066#L330-2 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1); 29064#L330-3 havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :end_inline___utac_acc__Specification14_spec__1 } true; 29062#timeShift_returnLabel#2 havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 29060#L1160-52 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 28982#isFloorCalling_returnLabel#53 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 29040#isExecutiveFloorCalling_returnLabel#9 stopRequestedAtCurrentFloor_#t~ret76#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 29028#L2627-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~22#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 29019#getCurrentFloorID_returnLabel#9 stopRequestedAtCurrentFloor_#t~ret77#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret77#1;havoc stopRequestedAtCurrentFloor_#t~ret77#1; 29010#L2631-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 24538#stopRequestedAtCurrentFloor_returnLabel#3 timeShift_#t~ret92#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret92#1;havoc timeShift_#t~ret92#1; 24539#L2779-4 assume !(0 != timeShift_~tmp___9~2#1); 27172#L2870-6 assume !(1 == ~doorState~0); 24621#L2870-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 23975#L1160-55 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 23976#isFloorCalling_returnLabel#56 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 24664#isExecutiveFloorCalling_returnLabel#10 stopRequestedInDirection_#t~ret70#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1; 23184#L2510-4 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 23185#getCurrentFloorID_returnLabel#10 stopRequestedInDirection_#t~ret71#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~19#1 := stopRequestedInDirection_#t~ret71#1;havoc stopRequestedInDirection_#t~ret71#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~19#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 31872#stopRequestedInDirection_returnLabel#5 timeShift_#t~ret99#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret99#1;havoc timeShift_#t~ret99#1; 31870#L2878-4 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1; 31867#L2567-6 assume !(1 == ~currentHeading~0); 31865#L2577-18 assume !(0 == ~currentFloorID~0); 28543#L2577-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 26339#L2583-13 havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 25580#L2887-8 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 26007#L1160-77 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 26008#isFloorCalling_returnLabel#78 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 27942#isExecutiveFloorCalling_returnLabel#12 __utac_acc__Specification14_spec__1_#t~ret11#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret11#1;havoc __utac_acc__Specification14_spec__1_#t~ret11#1; 27943#L330-4 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1); 24397#L330-5 havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :end_inline___utac_acc__Specification14_spec__1 } true; 23675#timeShift_returnLabel#3 havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true; 22985#threeTS_returnLabel#1 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret16#1, bobCall_~tmp~3#1;havoc bobCall_~tmp~3#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 22986#L241-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 23844#getOrigin_returnLabel#2 bobCall_#t~ret16#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~3#1 := bobCall_#t~ret16#1;havoc bobCall_#t~ret16#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~3#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 23987#L1431-1 assume 0 == initPersonOnFloor_~floor#1; 24657#L1432-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 22905#L1539-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 28373#L1223-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 33024#L1235-5 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 33023#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 33018#bobCall_returnLabel#1 havoc bobCall_#t~ret16#1, bobCall_~tmp~3#1;assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret22#1, cleanup_#t~ret23#1, cleanup_~i~2#1, cleanup_~tmp~9#1, cleanup_~tmp___0~3#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~9#1;havoc cleanup_~tmp___0~3#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 33016#L1160-78 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 28993#isFloorCalling_returnLabel#79 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 32990#isExecutiveFloorCalling_returnLabel#13 stopRequestedAtCurrentFloor_#t~ret76#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 32988#L2627-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~22#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 32987#getCurrentFloorID_returnLabel#13 stopRequestedAtCurrentFloor_#t~ret77#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret77#1;havoc stopRequestedAtCurrentFloor_#t~ret77#1; 32986#L2631-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 23458#stopRequestedAtCurrentFloor_returnLabel#4 timeShift_#t~ret92#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret92#1;havoc timeShift_#t~ret92#1; 26774#L2779-6 assume !(0 != timeShift_~tmp___9~2#1); 26775#L2870-9 assume !(1 == ~doorState~0); 22977#L2870-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 22978#L1160-81 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 23291#isFloorCalling_returnLabel#82 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 27195#isExecutiveFloorCalling_returnLabel#14 stopRequestedInDirection_#t~ret70#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1; 23106#L2510-6 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 23108#getCurrentFloorID_returnLabel#14 stopRequestedInDirection_#t~ret71#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~19#1 := stopRequestedInDirection_#t~ret71#1;havoc stopRequestedInDirection_#t~ret71#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~19#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 38711#stopRequestedInDirection_returnLabel#7 timeShift_#t~ret99#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret99#1;havoc timeShift_#t~ret99#1; 38709#L2878-6 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1; 38710#L2567-9 assume !(1 == ~currentHeading~0); 37596#L2577-27 assume !(0 == ~currentFloorID~0); 28978#L2577-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 26413#L2583-19 havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 22833#L2887-11 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 33229#L1160-103 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 29006#isFloorCalling_returnLabel#104 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 33227#isExecutiveFloorCalling_returnLabel#16 __utac_acc__Specification14_spec__1_#t~ret11#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret11#1;havoc __utac_acc__Specification14_spec__1_#t~ret11#1; 33225#L330-6 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1); 33221#L330-7 havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :end_inline___utac_acc__Specification14_spec__1 } true; 33216#timeShift_returnLabel#4 havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 33213#L500-2 [2024-11-09 15:53:21,492 INFO L747 eck$LassoCheckResult]: Loop: 33213#L500-2 assume !false; 33212#L501 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 33211#L504 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 33210#isBlocked_returnLabel#1 cleanup_#t~ret22#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~3#1 := cleanup_#t~ret22#1;havoc cleanup_#t~ret22#1; 33209#L508 assume 1 != cleanup_~tmp___0~3#1; 33208#L508-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret58#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~17#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~17#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret53#1, anyStopRequested_#t~ret54#1, anyStopRequested_#t~ret55#1, anyStopRequested_#t~ret56#1, anyStopRequested_#t~ret57#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~16#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~16#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 33207#L1160-104 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 33206#isFloorCalling_returnLabel#105 anyStopRequested_#t~ret53#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret53#1;havoc anyStopRequested_#t~ret53#1; 33187#L2066 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 33178#anyStopRequested_returnLabel#1 isIdle_#t~ret58#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret53#1, anyStopRequested_#t~ret54#1, anyStopRequested_#t~ret55#1, anyStopRequested_#t~ret56#1, anyStopRequested_#t~ret57#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~16#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~17#1 := isIdle_#t~ret58#1;havoc isIdle_#t~ret58#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~17#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 33177#isIdle_returnLabel#1 cleanup_#t~ret23#1 := isIdle_#res#1;havoc isIdle_#t~ret58#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~17#1;assume { :end_inline_isIdle } true;cleanup_~tmp~9#1 := cleanup_#t~ret23#1;havoc cleanup_#t~ret23#1; 33176#L520 assume !(0 != cleanup_~tmp~9#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 33175#L1160-109 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 28986#isFloorCalling_returnLabel#110 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 33173#isExecutiveFloorCalling_returnLabel#17 stopRequestedAtCurrentFloor_#t~ret76#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 33171#L2627-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~22#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 33172#getCurrentFloorID_returnLabel#17 stopRequestedAtCurrentFloor_#t~ret77#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret77#1;havoc stopRequestedAtCurrentFloor_#t~ret77#1; 38816#L2631-4 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 23262#stopRequestedAtCurrentFloor_returnLabel#5 timeShift_#t~ret92#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret92#1;havoc timeShift_#t~ret92#1; 25603#L2779-8 assume !(0 != timeShift_~tmp___9~2#1); 26556#L2870-12 assume 1 == ~doorState~0;~doorState~0 := 0; 27329#L2870-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 28658#L1160-112 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 28659#isFloorCalling_returnLabel#113 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 28708#isExecutiveFloorCalling_returnLabel#18 stopRequestedInDirection_#t~ret70#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1; 27910#L2510-8 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 27911#getCurrentFloorID_returnLabel#18 stopRequestedInDirection_#t~ret71#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~19#1 := stopRequestedInDirection_#t~ret71#1;havoc stopRequestedInDirection_#t~ret71#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~19#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 33081#stopRequestedInDirection_returnLabel#9 timeShift_#t~ret99#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret99#1;havoc timeShift_#t~ret99#1; 33078#L2878-8 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1; 33076#L2567-12 assume !(1 == ~currentHeading~0); 33073#L2577-36 assume !(0 == ~currentFloorID~0); 28809#L2577-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 26278#L2583-25 havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 24299#L2887-14 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 33251#L1160-134 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 31712#isFloorCalling_returnLabel#135 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 33249#isExecutiveFloorCalling_returnLabel#20 __utac_acc__Specification14_spec__1_#t~ret11#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret11#1;havoc __utac_acc__Specification14_spec__1_#t~ret11#1; 33247#L330-8 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1); 33243#L330-9 havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :end_inline___utac_acc__Specification14_spec__1 } true; 33215#timeShift_returnLabel#5 havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 33213#L500-2 [2024-11-09 15:53:21,493 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-09 15:53:21,493 INFO L85 PathProgramCache]: Analyzing trace with hash 1954735616, now seen corresponding path program 2 times [2024-11-09 15:53:21,493 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-09 15:53:21,494 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [247871894] [2024-11-09 15:53:21,494 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-09 15:53:21,494 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-09 15:53:21,525 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-09 15:53:21,611 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-09 15:53:21,612 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-09 15:53:21,612 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [247871894] [2024-11-09 15:53:21,612 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [247871894] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-09 15:53:21,612 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-09 15:53:21,612 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-09 15:53:21,613 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2022912678] [2024-11-09 15:53:21,613 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-09 15:53:21,613 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-09 15:53:21,614 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-09 15:53:21,614 INFO L85 PathProgramCache]: Analyzing trace with hash -1925890907, now seen corresponding path program 1 times [2024-11-09 15:53:21,614 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-09 15:53:21,614 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1309463286] [2024-11-09 15:53:21,614 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-09 15:53:21,614 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-09 15:53:21,629 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-09 15:53:21,789 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-09 15:53:21,789 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-09 15:53:21,789 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1309463286] [2024-11-09 15:53:21,789 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1309463286] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-09 15:53:21,790 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-09 15:53:21,790 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2024-11-09 15:53:21,790 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1515963864] [2024-11-09 15:53:21,790 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-09 15:53:21,790 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-09 15:53:21,790 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-09 15:53:21,791 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2024-11-09 15:53:21,791 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=43, Unknown=0, NotChecked=0, Total=56 [2024-11-09 15:53:21,791 INFO L87 Difference]: Start difference. First operand 16826 states and 31357 transitions. cyclomatic complexity: 14533 Second operand has 8 states, 8 states have (on average 5.0) internal successors, (40), 8 states have internal predecessors, (40), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-09 15:53:24,379 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-09 15:53:24,379 INFO L93 Difference]: Finished difference Result 34109 states and 63056 transitions. [2024-11-09 15:53:24,380 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 34109 states and 63056 transitions. [2024-11-09 15:53:24,550 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 6942 [2024-11-09 15:53:24,688 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 34109 states to 34109 states and 63056 transitions. [2024-11-09 15:53:24,688 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 34109 [2024-11-09 15:53:24,722 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 34109 [2024-11-09 15:53:24,722 INFO L73 IsDeterministic]: Start isDeterministic. Operand 34109 states and 63056 transitions. [2024-11-09 15:53:24,760 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-09 15:53:24,760 INFO L218 hiAutomatonCegarLoop]: Abstraction has 34109 states and 63056 transitions. [2024-11-09 15:53:24,791 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 34109 states and 63056 transitions. [2024-11-09 15:53:25,518 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 34109 to 33535. [2024-11-09 15:53:25,587 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 33535 states, 33535 states have (on average 1.8631877143283138) internal successors, (62482), 33534 states have internal predecessors, (62482), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-09 15:53:25,650 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 33535 states to 33535 states and 62482 transitions. [2024-11-09 15:53:25,651 INFO L240 hiAutomatonCegarLoop]: Abstraction has 33535 states and 62482 transitions. [2024-11-09 15:53:25,654 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2024-11-09 15:53:25,655 INFO L425 stractBuchiCegarLoop]: Abstraction has 33535 states and 62482 transitions. [2024-11-09 15:53:25,655 INFO L332 stractBuchiCegarLoop]: ======== Iteration 3 ============ [2024-11-09 15:53:25,655 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 33535 states and 62482 transitions. [2024-11-09 15:53:25,734 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 6814 [2024-11-09 15:53:25,735 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-09 15:53:25,735 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-09 15:53:25,741 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-09 15:53:25,741 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-09 15:53:25,742 INFO L745 eck$LassoCheckResult]: Stem: 74297#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 74298#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret28#1, main_~retValue_acc~6#1, main_~tmp~11#1;havoc main_~retValue_acc~6#1;havoc main_~tmp~11#1;assume { :begin_inline_select_helpers } true; 79493#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 79135#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; 75592#valid_product_returnLabel#1 main_#t~ret28#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;assume { :end_inline_valid_product } true;main_~tmp~11#1 := main_#t~ret28#1;havoc main_#t~ret28#1; 75593#L692 assume 0 != main_~tmp~11#1;assume { :begin_inline_setup } true; 75768#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret21#1, bigMacCall_~tmp~8#1;havoc bigMacCall_~tmp~8#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 77252#L241 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 76012#getOrigin_returnLabel#1 bigMacCall_#t~ret21#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~8#1 := bigMacCall_#t~ret21#1;havoc bigMacCall_#t~ret21#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~8#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 78677#L1431 assume 0 == initPersonOnFloor_~floor#1; 79333#L1432 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 73804#L1539-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 78549#L1223 assume !(0 == callOnFloor_~floorID#1); 73979#L1226 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 73980#L1235-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 76223#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 75008#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret21#1, bigMacCall_~tmp~8#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 75009#L1160 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 76060#isFloorCalling_returnLabel#1 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 82068#isExecutiveFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret76#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 82065#L2627 assume 0 != stopRequestedAtCurrentFloor_~tmp~22#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 82062#getCurrentFloorID_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret77#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret77#1;havoc stopRequestedAtCurrentFloor_#t~ret77#1; 82060#L2631 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 82058#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret92#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret92#1;havoc timeShift_#t~ret92#1; 82056#L2779 assume !(0 != timeShift_~tmp___9~2#1); 82053#L2870 assume !(1 == ~doorState~0); 82052#L2870-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 82050#L1160-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 82049#isFloorCalling_returnLabel#4 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 82046#isExecutiveFloorCalling_returnLabel#2 stopRequestedInDirection_#t~ret70#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1; 82044#L2510 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 81514#getCurrentFloorID_returnLabel#2 stopRequestedInDirection_#t~ret71#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~19#1 := stopRequestedInDirection_#t~ret71#1;havoc stopRequestedInDirection_#t~ret71#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~19#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 81511#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret99#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret99#1;havoc timeShift_#t~ret99#1; 81507#L2878 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1; 81503#L2567 assume !(1 == ~currentHeading~0); 81495#L2577 assume !(0 == ~currentFloorID~0); 81492#L2577-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 81250#L2583-1 havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 81247#L2887-2 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 81244#L1160-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 81125#isFloorCalling_returnLabel#26 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 81241#isExecutiveFloorCalling_returnLabel#4 __utac_acc__Specification14_spec__1_#t~ret11#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret11#1;havoc __utac_acc__Specification14_spec__1_#t~ret11#1; 81142#L330 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1); 81130#L330-1 havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :end_inline___utac_acc__Specification14_spec__1 } true; 81127#timeShift_returnLabel#1 havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 81123#L1160-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 81098#isFloorCalling_returnLabel#27 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 81117#isExecutiveFloorCalling_returnLabel#5 stopRequestedAtCurrentFloor_#t~ret76#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 81113#L2627-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~22#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 81107#getCurrentFloorID_returnLabel#5 stopRequestedAtCurrentFloor_#t~ret77#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret77#1;havoc stopRequestedAtCurrentFloor_#t~ret77#1; 81105#L2631-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 80603#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret92#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret92#1;havoc timeShift_#t~ret92#1; 80601#L2779-2 assume !(0 != timeShift_~tmp___9~2#1); 80599#L2870-3 assume 1 == ~doorState~0;~doorState~0 := 0; 80596#L2870-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 80594#L1160-29 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 80592#isFloorCalling_returnLabel#30 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 80588#isExecutiveFloorCalling_returnLabel#6 stopRequestedInDirection_#t~ret70#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1; 80490#L2510-2 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 80446#getCurrentFloorID_returnLabel#6 stopRequestedInDirection_#t~ret71#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~19#1 := stopRequestedInDirection_#t~ret71#1;havoc stopRequestedInDirection_#t~ret71#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~19#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 80444#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret99#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret99#1;havoc timeShift_#t~ret99#1; 80441#L2878-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1; 80442#L2567-3 assume !(1 == ~currentHeading~0); 96313#L2577-9 assume !(0 == ~currentFloorID~0); 96310#L2577-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 95394#L2583-7 havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 95393#L2887-5 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 80340#L1160-51 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 80339#isFloorCalling_returnLabel#52 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 80338#isExecutiveFloorCalling_returnLabel#8 __utac_acc__Specification14_spec__1_#t~ret11#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret11#1;havoc __utac_acc__Specification14_spec__1_#t~ret11#1; 80333#L330-2 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1); 80330#L330-3 havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :end_inline___utac_acc__Specification14_spec__1 } true; 80326#timeShift_returnLabel#2 havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 80323#L1160-52 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 80207#isFloorCalling_returnLabel#53 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 80305#isExecutiveFloorCalling_returnLabel#9 stopRequestedAtCurrentFloor_#t~ret76#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 80294#L2627-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~22#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 80278#getCurrentFloorID_returnLabel#9 stopRequestedAtCurrentFloor_#t~ret77#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret77#1;havoc stopRequestedAtCurrentFloor_#t~ret77#1; 80241#L2631-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 78046#stopRequestedAtCurrentFloor_returnLabel#3 timeShift_#t~ret92#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret92#1;havoc timeShift_#t~ret92#1; 97911#L2779-4 assume !(0 != timeShift_~tmp___9~2#1); 97905#L2870-6 assume !(1 == ~doorState~0); 97899#L2870-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 97900#L1160-55 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 97873#isFloorCalling_returnLabel#56 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 97854#isExecutiveFloorCalling_returnLabel#10 stopRequestedInDirection_#t~ret70#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1; 97849#L2510-4 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 97850#getCurrentFloorID_returnLabel#10 stopRequestedInDirection_#t~ret71#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~19#1 := stopRequestedInDirection_#t~ret71#1;havoc stopRequestedInDirection_#t~ret71#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~19#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 100022#stopRequestedInDirection_returnLabel#5 timeShift_#t~ret99#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret99#1;havoc timeShift_#t~ret99#1; 100020#L2878-4 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1; 100019#L2567-6 assume !(1 == ~currentHeading~0); 100015#L2577-18 assume !(0 == ~currentFloorID~0); 100013#L2577-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 99996#L2583-13 havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 99989#L2887-8 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 99987#L1160-77 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 90604#isFloorCalling_returnLabel#78 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 99984#isExecutiveFloorCalling_returnLabel#12 __utac_acc__Specification14_spec__1_#t~ret11#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret11#1;havoc __utac_acc__Specification14_spec__1_#t~ret11#1; 99981#L330-4 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1); 99976#L330-5 havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :end_inline___utac_acc__Specification14_spec__1 } true; 99974#timeShift_returnLabel#3 havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true; 99973#threeTS_returnLabel#1 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret16#1, bobCall_~tmp~3#1;havoc bobCall_~tmp~3#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 99968#L241-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 99965#getOrigin_returnLabel#2 bobCall_#t~ret16#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~3#1 := bobCall_#t~ret16#1;havoc bobCall_#t~ret16#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~3#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 99964#L1431-1 assume 0 == initPersonOnFloor_~floor#1; 99377#L1432-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 99058#L1539-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 99055#L1223-2 assume !(0 == callOnFloor_~floorID#1); 99053#L1226-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 99048#L1235-5 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 99046#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 99044#bobCall_returnLabel#1 havoc bobCall_#t~ret16#1, bobCall_~tmp~3#1;assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret22#1, cleanup_#t~ret23#1, cleanup_~i~2#1, cleanup_~tmp~9#1, cleanup_~tmp___0~3#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~9#1;havoc cleanup_~tmp___0~3#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 99041#L1160-78 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 90513#isFloorCalling_returnLabel#79 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 99039#isExecutiveFloorCalling_returnLabel#13 stopRequestedAtCurrentFloor_#t~ret76#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 99037#L2627-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~22#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 99036#getCurrentFloorID_returnLabel#13 stopRequestedAtCurrentFloor_#t~ret77#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret77#1;havoc stopRequestedAtCurrentFloor_#t~ret77#1; 99035#L2631-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 99032#stopRequestedAtCurrentFloor_returnLabel#4 timeShift_#t~ret92#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret92#1;havoc timeShift_#t~ret92#1; 99030#L2779-6 assume !(0 != timeShift_~tmp___9~2#1); 99029#L2870-9 assume !(1 == ~doorState~0); 99028#L2870-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 99027#L1160-81 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 99026#isFloorCalling_returnLabel#82 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 99025#isExecutiveFloorCalling_returnLabel#14 stopRequestedInDirection_#t~ret70#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1; 99024#L2510-6 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 99000#getCurrentFloorID_returnLabel#14 stopRequestedInDirection_#t~ret71#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~19#1 := stopRequestedInDirection_#t~ret71#1;havoc stopRequestedInDirection_#t~ret71#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~19#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 98999#stopRequestedInDirection_returnLabel#7 timeShift_#t~ret99#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret99#1;havoc timeShift_#t~ret99#1; 98004#L2878-6 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1; 98005#L2567-9 assume !(1 == ~currentHeading~0); 75600#L2577-27 assume !(0 == ~currentFloorID~0); 75601#L2577-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 77411#L2583-19 havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 73788#L2887-11 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 98323#L1160-103 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 80237#isFloorCalling_returnLabel#104 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 98321#isExecutiveFloorCalling_returnLabel#16 __utac_acc__Specification14_spec__1_#t~ret11#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret11#1;havoc __utac_acc__Specification14_spec__1_#t~ret11#1; 98314#L330-6 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1); 98308#L330-7 havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :end_inline___utac_acc__Specification14_spec__1 } true; 98309#timeShift_returnLabel#4 havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 98460#L500-2 [2024-11-09 15:53:25,742 INFO L747 eck$LassoCheckResult]: Loop: 98460#L500-2 assume !false; 98459#L501 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 98458#L504 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 98457#isBlocked_returnLabel#1 cleanup_#t~ret22#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~3#1 := cleanup_#t~ret22#1;havoc cleanup_#t~ret22#1; 98456#L508 assume 1 != cleanup_~tmp___0~3#1; 98455#L508-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret58#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~17#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~17#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret53#1, anyStopRequested_#t~ret54#1, anyStopRequested_#t~ret55#1, anyStopRequested_#t~ret56#1, anyStopRequested_#t~ret57#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~16#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~16#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 98454#L1160-104 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 98453#isFloorCalling_returnLabel#105 anyStopRequested_#t~ret53#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret53#1;havoc anyStopRequested_#t~ret53#1; 98452#L2066 assume !(0 != anyStopRequested_~tmp___3~0#1); 80040#L2070 assume 0 != ~floorButtons_0~0;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 74237#anyStopRequested_returnLabel#1 isIdle_#t~ret58#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret53#1, anyStopRequested_#t~ret54#1, anyStopRequested_#t~ret55#1, anyStopRequested_#t~ret56#1, anyStopRequested_#t~ret57#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~16#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~17#1 := isIdle_#t~ret58#1;havoc isIdle_#t~ret58#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~17#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 74238#isIdle_returnLabel#1 cleanup_#t~ret23#1 := isIdle_#res#1;havoc isIdle_#t~ret58#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~17#1;assume { :end_inline_isIdle } true;cleanup_~tmp~9#1 := cleanup_#t~ret23#1;havoc cleanup_#t~ret23#1; 76492#L520 assume !(0 != cleanup_~tmp~9#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 79805#L1160-109 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 79544#isFloorCalling_returnLabel#110 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 79545#isExecutiveFloorCalling_returnLabel#17 stopRequestedAtCurrentFloor_#t~ret76#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 98159#L2627-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~22#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 98158#getCurrentFloorID_returnLabel#17 stopRequestedAtCurrentFloor_#t~ret77#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret77#1;havoc stopRequestedAtCurrentFloor_#t~ret77#1; 98156#L2631-4 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 98157#stopRequestedAtCurrentFloor_returnLabel#5 timeShift_#t~ret92#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret92#1;havoc timeShift_#t~ret92#1; 98615#L2779-8 assume !(0 != timeShift_~tmp___9~2#1); 98613#L2870-12 assume 1 == ~doorState~0;~doorState~0 := 0; 97661#L2870-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 97658#L1160-112 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 97655#isFloorCalling_returnLabel#113 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 97653#isExecutiveFloorCalling_returnLabel#18 stopRequestedInDirection_#t~ret70#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1; 97595#L2510-8 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 97596#getCurrentFloorID_returnLabel#18 stopRequestedInDirection_#t~ret71#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~19#1 := stopRequestedInDirection_#t~ret71#1;havoc stopRequestedInDirection_#t~ret71#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~19#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 98356#stopRequestedInDirection_returnLabel#9 timeShift_#t~ret99#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret99#1;havoc timeShift_#t~ret99#1; 98355#L2878-8 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1; 98354#L2567-12 assume !(1 == ~currentHeading~0); 80058#L2577-36 assume !(0 == ~currentFloorID~0); 79379#L2577-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 77272#L2583-25 havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 75255#L2887-14 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 98472#L1160-134 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 95391#isFloorCalling_returnLabel#135 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 98471#isExecutiveFloorCalling_returnLabel#20 __utac_acc__Specification14_spec__1_#t~ret11#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret11#1;havoc __utac_acc__Specification14_spec__1_#t~ret11#1; 98469#L330-8 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1); 98465#L330-9 havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :end_inline___utac_acc__Specification14_spec__1 } true; 98461#timeShift_returnLabel#5 havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 98460#L500-2 [2024-11-09 15:53:25,744 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-09 15:53:25,744 INFO L85 PathProgramCache]: Analyzing trace with hash 354313599, now seen corresponding path program 1 times [2024-11-09 15:53:25,744 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-09 15:53:25,745 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [973521653] [2024-11-09 15:53:25,747 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-09 15:53:25,747 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-09 15:53:25,901 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-09 15:53:25,985 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-09 15:53:25,987 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-09 15:53:25,987 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [973521653] [2024-11-09 15:53:25,987 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [973521653] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-09 15:53:25,988 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-09 15:53:25,988 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-09 15:53:25,988 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1719670254] [2024-11-09 15:53:25,988 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-09 15:53:25,988 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-09 15:53:25,989 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-09 15:53:25,989 INFO L85 PathProgramCache]: Analyzing trace with hash -1046452271, now seen corresponding path program 1 times [2024-11-09 15:53:25,989 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-09 15:53:25,989 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1096289056] [2024-11-09 15:53:25,989 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-09 15:53:25,989 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-09 15:53:26,007 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-09 15:53:26,076 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-09 15:53:26,076 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-09 15:53:26,077 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1096289056] [2024-11-09 15:53:26,077 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1096289056] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-09 15:53:26,078 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-09 15:53:26,078 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2024-11-09 15:53:26,079 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1079321726] [2024-11-09 15:53:26,079 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-09 15:53:26,079 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-09 15:53:26,079 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-09 15:53:26,080 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2024-11-09 15:53:26,080 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=43, Unknown=0, NotChecked=0, Total=56 [2024-11-09 15:53:26,081 INFO L87 Difference]: Start difference. First operand 33535 states and 62482 transitions. cyclomatic complexity: 28949 Second operand has 8 states, 8 states have (on average 5.125) internal successors, (41), 8 states have internal predecessors, (41), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-09 15:53:28,967 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-09 15:53:28,968 INFO L93 Difference]: Finished difference Result 34188 states and 62875 transitions. [2024-11-09 15:53:28,968 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 34188 states and 62875 transitions. [2024-11-09 15:53:29,077 INFO L131 ngComponentsAnalysis]: Automaton has 5 accepting balls. 7000 [2024-11-09 15:53:29,348 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 34188 states to 34188 states and 62875 transitions. [2024-11-09 15:53:29,355 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 34188 [2024-11-09 15:53:29,433 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 34188 [2024-11-09 15:53:29,434 INFO L73 IsDeterministic]: Start isDeterministic. Operand 34188 states and 62875 transitions. [2024-11-09 15:53:29,460 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-11-09 15:53:29,460 INFO L218 hiAutomatonCegarLoop]: Abstraction has 34188 states and 62875 transitions. [2024-11-09 15:53:29,476 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 34188 states and 62875 transitions. [2024-11-09 15:53:29,885 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 34188 to 33248. [2024-11-09 15:53:29,927 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 33248 states, 33248 states have (on average 1.8628188161693937) internal successors, (61935), 33247 states have internal predecessors, (61935), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-09 15:53:29,990 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 33248 states to 33248 states and 61935 transitions. [2024-11-09 15:53:29,990 INFO L240 hiAutomatonCegarLoop]: Abstraction has 33248 states and 61935 transitions. [2024-11-09 15:53:29,992 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2024-11-09 15:53:29,994 INFO L425 stractBuchiCegarLoop]: Abstraction has 33248 states and 61935 transitions. [2024-11-09 15:53:29,994 INFO L332 stractBuchiCegarLoop]: ======== Iteration 4 ============ [2024-11-09 15:53:29,994 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 33248 states and 61935 transitions. [2024-11-09 15:53:30,111 INFO L131 ngComponentsAnalysis]: Automaton has 5 accepting balls. 6793 [2024-11-09 15:53:30,112 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-09 15:53:30,112 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-09 15:53:30,115 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-09 15:53:30,115 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-09 15:53:30,116 INFO L745 eck$LassoCheckResult]: Stem: 142044#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 142045#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret28#1, main_~retValue_acc~6#1, main_~tmp~11#1;havoc main_~retValue_acc~6#1;havoc main_~tmp~11#1;assume { :begin_inline_select_helpers } true; 147199#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 146858#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; 143339#valid_product_returnLabel#1 main_#t~ret28#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;assume { :end_inline_valid_product } true;main_~tmp~11#1 := main_#t~ret28#1;havoc main_#t~ret28#1; 143340#L692 assume 0 != main_~tmp~11#1;assume { :begin_inline_setup } true; 143513#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret21#1, bigMacCall_~tmp~8#1;havoc bigMacCall_~tmp~8#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 144986#L241 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 143751#getOrigin_returnLabel#1 bigMacCall_#t~ret21#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~8#1 := bigMacCall_#t~ret21#1;havoc bigMacCall_#t~ret21#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~8#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 146404#L1431 assume 0 == initPersonOnFloor_~floor#1; 147052#L1432 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 141547#L1539-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 146274#L1223 assume !(0 == callOnFloor_~floorID#1); 141722#L1226 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 141723#L1235-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 143964#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 143965#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret21#1, bigMacCall_~tmp~8#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 143798#L1160 assume !(0 == isFloorCalling_~floorID#1); 143800#L1164 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 145761#isFloorCalling_returnLabel#1 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 151317#isExecutiveFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret76#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 151287#L2627 assume 0 != stopRequestedAtCurrentFloor_~tmp~22#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 151288#getCurrentFloorID_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret77#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret77#1;havoc stopRequestedAtCurrentFloor_#t~ret77#1; 151281#L2631 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 151279#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret92#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret92#1;havoc timeShift_#t~ret92#1; 151254#L2779 assume !(0 != timeShift_~tmp___9~2#1); 151243#L2870 assume !(1 == ~doorState~0); 151238#L2870-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 151233#L1160-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 144265#isFloorCalling_returnLabel#4 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 143920#isExecutiveFloorCalling_returnLabel#2 stopRequestedInDirection_#t~ret70#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1; 143921#L2510 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 146489#getCurrentFloorID_returnLabel#2 stopRequestedInDirection_#t~ret71#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~19#1 := stopRequestedInDirection_#t~ret71#1;havoc stopRequestedInDirection_#t~ret71#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~19#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 165067#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret99#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret99#1;havoc timeShift_#t~ret99#1; 162455#L2878 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1; 162423#L2567 assume !(1 == ~currentHeading~0); 162422#L2577 assume !(0 == ~currentFloorID~0); 143312#L2577-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 143313#L2583-1 havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 143446#L2887-2 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 147415#L1160-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 147416#isFloorCalling_returnLabel#26 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 162239#isExecutiveFloorCalling_returnLabel#4 __utac_acc__Specification14_spec__1_#t~ret11#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret11#1;havoc __utac_acc__Specification14_spec__1_#t~ret11#1; 162240#L330 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1); 162231#L330-1 havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :end_inline___utac_acc__Specification14_spec__1 } true; 162232#timeShift_returnLabel#1 havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 162228#L1160-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 162227#isFloorCalling_returnLabel#27 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 162226#isExecutiveFloorCalling_returnLabel#5 stopRequestedAtCurrentFloor_#t~ret76#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 162225#L2627-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret74#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret75#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~21#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~21#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 162223#L1160-28 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 162215#isFloorCalling_returnLabel#29 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret74#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret74#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret74#1; 162211#L2600-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1; 162210#stopRequestedAtCurrentFloor__wrappee__empty_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret79#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret74#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret75#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~21#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := stopRequestedAtCurrentFloor_#t~ret79#1;havoc stopRequestedAtCurrentFloor_#t~ret79#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 162209#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret92#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret92#1;havoc timeShift_#t~ret92#1; 162207#L2779-2 assume !(0 != timeShift_~tmp___9~2#1); 162206#L2870-3 assume 1 == ~doorState~0;~doorState~0 := 0; 162204#L2870-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 162203#L1160-29 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 162201#isFloorCalling_returnLabel#30 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 162200#isExecutiveFloorCalling_returnLabel#6 stopRequestedInDirection_#t~ret70#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1; 162198#L2510-2 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 162199#getCurrentFloorID_returnLabel#6 stopRequestedInDirection_#t~ret71#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~19#1 := stopRequestedInDirection_#t~ret71#1;havoc stopRequestedInDirection_#t~ret71#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~19#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 165545#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret99#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret99#1;havoc timeShift_#t~ret99#1; 165350#L2878-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1; 165351#L2567-3 assume !(1 == ~currentHeading~0); 162110#L2577-9 assume !(0 == ~currentFloorID~0); 162109#L2577-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 158900#L2583-7 havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 155568#L2887-5 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 152752#L1160-51 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 152751#isFloorCalling_returnLabel#52 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 152749#isExecutiveFloorCalling_returnLabel#8 __utac_acc__Specification14_spec__1_#t~ret11#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret11#1;havoc __utac_acc__Specification14_spec__1_#t~ret11#1; 152744#L330-2 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1); 152743#L330-3 havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :end_inline___utac_acc__Specification14_spec__1 } true; 152742#timeShift_returnLabel#2 havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 152741#L1160-52 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 147897#isFloorCalling_returnLabel#53 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 152740#isExecutiveFloorCalling_returnLabel#9 stopRequestedAtCurrentFloor_#t~ret76#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 152739#L2627-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret74#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret75#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~21#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~21#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 152736#L1160-54 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 152277#isFloorCalling_returnLabel#55 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret74#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret74#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret74#1; 152269#L2600-5 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1; 152261#stopRequestedAtCurrentFloor__wrappee__empty_returnLabel#6 stopRequestedAtCurrentFloor_#t~ret79#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret74#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret75#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~21#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := stopRequestedAtCurrentFloor_#t~ret79#1;havoc stopRequestedAtCurrentFloor_#t~ret79#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 152253#stopRequestedAtCurrentFloor_returnLabel#3 timeShift_#t~ret92#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret92#1;havoc timeShift_#t~ret92#1; 152251#L2779-4 assume !(0 != timeShift_~tmp___9~2#1); 145924#L2870-6 assume !(1 == ~doorState~0); 143324#L2870-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 142676#L1160-55 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 142677#isFloorCalling_returnLabel#56 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 143369#isExecutiveFloorCalling_returnLabel#10 stopRequestedInDirection_#t~ret70#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1; 141884#L2510-4 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 141885#getCurrentFloorID_returnLabel#10 stopRequestedInDirection_#t~ret71#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~19#1 := stopRequestedInDirection_#t~ret71#1;havoc stopRequestedInDirection_#t~ret71#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~19#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 145710#stopRequestedInDirection_returnLabel#5 timeShift_#t~ret99#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret99#1;havoc timeShift_#t~ret99#1; 145711#L2878-4 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1; 147048#L2567-6 assume !(1 == ~currentHeading~0); 167417#L2577-18 assume !(0 == ~currentFloorID~0); 142067#L2577-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 145064#L2583-13 havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 144289#L2887-8 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 151541#L1160-77 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 148116#isFloorCalling_returnLabel#78 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 151540#isExecutiveFloorCalling_returnLabel#12 __utac_acc__Specification14_spec__1_#t~ret11#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret11#1;havoc __utac_acc__Specification14_spec__1_#t~ret11#1; 151536#L330-4 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1); 151458#L330-5 havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :end_inline___utac_acc__Specification14_spec__1 } true; 151457#timeShift_returnLabel#3 havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true; 151456#threeTS_returnLabel#1 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret16#1, bobCall_~tmp~3#1;havoc bobCall_~tmp~3#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 151451#L241-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 151448#getOrigin_returnLabel#2 bobCall_#t~ret16#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~3#1 := bobCall_#t~ret16#1;havoc bobCall_#t~ret16#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~3#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 151447#L1431-1 assume 0 == initPersonOnFloor_~floor#1; 151358#L1432-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 151336#L1539-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 147943#L1223-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 147933#L1235-5 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 147931#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 147929#bobCall_returnLabel#1 havoc bobCall_#t~ret16#1, bobCall_~tmp~3#1;assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret22#1, cleanup_#t~ret23#1, cleanup_~i~2#1, cleanup_~tmp~9#1, cleanup_~tmp___0~3#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~9#1;havoc cleanup_~tmp___0~3#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 147927#L1160-78 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 147924#isFloorCalling_returnLabel#79 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 147923#isExecutiveFloorCalling_returnLabel#13 stopRequestedAtCurrentFloor_#t~ret76#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 147922#L2627-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~22#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 147921#getCurrentFloorID_returnLabel#13 stopRequestedAtCurrentFloor_#t~ret77#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret77#1;havoc stopRequestedAtCurrentFloor_#t~ret77#1; 147920#L2631-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 143697#stopRequestedAtCurrentFloor_returnLabel#4 timeShift_#t~ret92#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret92#1;havoc timeShift_#t~ret92#1; 157862#L2779-6 assume !(0 != timeShift_~tmp___9~2#1); 157861#L2870-9 assume !(1 == ~doorState~0); 157860#L2870-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 157413#L1160-81 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 157409#isFloorCalling_returnLabel#82 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 157408#isExecutiveFloorCalling_returnLabel#14 stopRequestedInDirection_#t~ret70#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1; 157405#L2510-6 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 157362#getCurrentFloorID_returnLabel#14 stopRequestedInDirection_#t~ret71#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~19#1 := stopRequestedInDirection_#t~ret71#1;havoc stopRequestedInDirection_#t~ret71#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~19#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 157361#stopRequestedInDirection_returnLabel#7 timeShift_#t~ret99#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret99#1;havoc timeShift_#t~ret99#1; 157359#L2878-6 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1; 157357#L2567-9 assume !(1 == ~currentHeading~0); 157190#L2577-27 assume !(0 == ~currentFloorID~0); 157187#L2577-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 157171#L2583-19 havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 157164#L2887-11 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 157162#L1160-103 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 151315#isFloorCalling_returnLabel#104 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 157160#isExecutiveFloorCalling_returnLabel#16 __utac_acc__Specification14_spec__1_#t~ret11#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret11#1;havoc __utac_acc__Specification14_spec__1_#t~ret11#1; 157158#L330-6 assume 0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 157156#getCurrentFloorID_returnLabel#16 __utac_acc__Specification14_spec__1_#t~ret12#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification14_spec__1_~tmp~2#1 := __utac_acc__Specification14_spec__1_#t~ret12#1;havoc __utac_acc__Specification14_spec__1_#t~ret12#1;assume { :begin_inline_isExecutiveFloor } true;isExecutiveFloor_#in~floorID#1 := __utac_acc__Specification14_spec__1_~tmp~2#1;havoc isExecutiveFloor_#res#1;havoc isExecutiveFloor_~floorID#1, isExecutiveFloor_~retValue_acc~29#1;isExecutiveFloor_~floorID#1 := isExecutiveFloor_#in~floorID#1;havoc isExecutiveFloor_~retValue_acc~29#1;isExecutiveFloor_~retValue_acc~29#1 := (if ~executiveFloor~0 == isExecutiveFloor_~floorID#1 then 1 else 0);isExecutiveFloor_#res#1 := isExecutiveFloor_~retValue_acc~29#1; 157154#isExecutiveFloor_returnLabel#4 __utac_acc__Specification14_spec__1_#t~ret13#1 := isExecutiveFloor_#res#1;havoc isExecutiveFloor_~floorID#1, isExecutiveFloor_~retValue_acc~29#1;havoc isExecutiveFloor_#in~floorID#1;assume { :end_inline_isExecutiveFloor } true;__utac_acc__Specification14_spec__1_~tmp___0~2#1 := __utac_acc__Specification14_spec__1_#t~ret13#1;havoc __utac_acc__Specification14_spec__1_#t~ret13#1; 157151#L335-6 assume 0 != __utac_acc__Specification14_spec__1_~tmp___0~2#1; 157146#L330-7 havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :end_inline___utac_acc__Specification14_spec__1 } true; 157144#timeShift_returnLabel#4 havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 157142#L500-2 [2024-11-09 15:53:30,117 INFO L747 eck$LassoCheckResult]: Loop: 157142#L500-2 assume !false; 157141#L501 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 157140#L504 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 157139#isBlocked_returnLabel#1 cleanup_#t~ret22#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~3#1 := cleanup_#t~ret22#1;havoc cleanup_#t~ret22#1; 157138#L508 assume 1 != cleanup_~tmp___0~3#1; 157137#L508-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret58#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~17#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~17#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret53#1, anyStopRequested_#t~ret54#1, anyStopRequested_#t~ret55#1, anyStopRequested_#t~ret56#1, anyStopRequested_#t~ret57#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~16#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~16#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 157136#L1160-104 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 157135#isFloorCalling_returnLabel#105 anyStopRequested_#t~ret53#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret53#1;havoc anyStopRequested_#t~ret53#1; 157134#L2066 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 157133#anyStopRequested_returnLabel#1 isIdle_#t~ret58#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret53#1, anyStopRequested_#t~ret54#1, anyStopRequested_#t~ret55#1, anyStopRequested_#t~ret56#1, anyStopRequested_#t~ret57#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~16#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~17#1 := isIdle_#t~ret58#1;havoc isIdle_#t~ret58#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~17#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 157132#isIdle_returnLabel#1 cleanup_#t~ret23#1 := isIdle_#res#1;havoc isIdle_#t~ret58#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~17#1;assume { :end_inline_isIdle } true;cleanup_~tmp~9#1 := cleanup_#t~ret23#1;havoc cleanup_#t~ret23#1; 157131#L520 assume !(0 != cleanup_~tmp~9#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 157130#L1160-109 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 153543#isFloorCalling_returnLabel#110 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 157128#isExecutiveFloorCalling_returnLabel#17 stopRequestedAtCurrentFloor_#t~ret76#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 157125#L2627-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~22#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 157123#getCurrentFloorID_returnLabel#17 stopRequestedAtCurrentFloor_#t~ret77#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret77#1;havoc stopRequestedAtCurrentFloor_#t~ret77#1; 157120#L2631-4 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 147275#stopRequestedAtCurrentFloor_returnLabel#5 timeShift_#t~ret92#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret92#1;havoc timeShift_#t~ret92#1; 157228#L2779-8 assume !(0 != timeShift_~tmp___9~2#1); 157225#L2870-12 assume 1 == ~doorState~0;~doorState~0 := 0; 157223#L2870-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 157221#L1160-112 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 157219#isFloorCalling_returnLabel#113 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 157218#isExecutiveFloorCalling_returnLabel#18 stopRequestedInDirection_#t~ret70#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1; 157216#L2510-8 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 157213#getCurrentFloorID_returnLabel#18 stopRequestedInDirection_#t~ret71#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~19#1 := stopRequestedInDirection_#t~ret71#1;havoc stopRequestedInDirection_#t~ret71#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~19#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 157211#stopRequestedInDirection_returnLabel#9 timeShift_#t~ret99#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret99#1;havoc timeShift_#t~ret99#1; 157207#L2878-8 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1; 157202#L2567-12 assume !(1 == ~currentHeading~0); 157198#L2577-36 assume !(0 == ~currentFloorID~0); 157173#L2577-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 157165#L2583-25 havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 157163#L2887-14 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 157161#L1160-134 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 152758#isFloorCalling_returnLabel#135 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 157159#isExecutiveFloorCalling_returnLabel#20 __utac_acc__Specification14_spec__1_#t~ret11#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret11#1;havoc __utac_acc__Specification14_spec__1_#t~ret11#1; 157157#L330-8 assume 0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 157155#getCurrentFloorID_returnLabel#20 __utac_acc__Specification14_spec__1_#t~ret12#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification14_spec__1_~tmp~2#1 := __utac_acc__Specification14_spec__1_#t~ret12#1;havoc __utac_acc__Specification14_spec__1_#t~ret12#1;assume { :begin_inline_isExecutiveFloor } true;isExecutiveFloor_#in~floorID#1 := __utac_acc__Specification14_spec__1_~tmp~2#1;havoc isExecutiveFloor_#res#1;havoc isExecutiveFloor_~floorID#1, isExecutiveFloor_~retValue_acc~29#1;isExecutiveFloor_~floorID#1 := isExecutiveFloor_#in~floorID#1;havoc isExecutiveFloor_~retValue_acc~29#1;isExecutiveFloor_~retValue_acc~29#1 := (if ~executiveFloor~0 == isExecutiveFloor_~floorID#1 then 1 else 0);isExecutiveFloor_#res#1 := isExecutiveFloor_~retValue_acc~29#1; 157153#isExecutiveFloor_returnLabel#5 __utac_acc__Specification14_spec__1_#t~ret13#1 := isExecutiveFloor_#res#1;havoc isExecutiveFloor_~floorID#1, isExecutiveFloor_~retValue_acc~29#1;havoc isExecutiveFloor_#in~floorID#1;assume { :end_inline_isExecutiveFloor } true;__utac_acc__Specification14_spec__1_~tmp___0~2#1 := __utac_acc__Specification14_spec__1_#t~ret13#1;havoc __utac_acc__Specification14_spec__1_#t~ret13#1; 157148#L335-8 assume 0 != __utac_acc__Specification14_spec__1_~tmp___0~2#1; 157145#L330-9 havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :end_inline___utac_acc__Specification14_spec__1 } true; 157143#timeShift_returnLabel#5 havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 157142#L500-2 [2024-11-09 15:53:30,118 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-09 15:53:30,118 INFO L85 PathProgramCache]: Analyzing trace with hash 308350745, now seen corresponding path program 1 times [2024-11-09 15:53:30,118 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-09 15:53:30,118 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [877767415] [2024-11-09 15:53:30,118 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-09 15:53:30,118 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-09 15:53:30,154 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-09 15:53:30,389 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-09 15:53:30,389 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-09 15:53:30,389 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [877767415] [2024-11-09 15:53:30,389 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [877767415] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-09 15:53:30,390 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-09 15:53:30,390 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-09 15:53:30,390 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [963567052] [2024-11-09 15:53:30,390 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-09 15:53:30,390 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-09 15:53:30,390 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-09 15:53:30,390 INFO L85 PathProgramCache]: Analyzing trace with hash 1538859331, now seen corresponding path program 1 times [2024-11-09 15:53:30,391 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-09 15:53:30,391 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1310545] [2024-11-09 15:53:30,391 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-09 15:53:30,391 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-09 15:53:30,427 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2024-11-09 15:53:30,428 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2024-11-09 15:53:30,436 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2024-11-09 15:53:30,467 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2024-11-09 15:53:31,227 INFO L204 LassoAnalysis]: Preferences: [2024-11-09 15:53:31,227 INFO L125 ssoRankerPreferences]: Compute integeral hull: false [2024-11-09 15:53:31,228 INFO L126 ssoRankerPreferences]: Enable LassoPartitioneer: true [2024-11-09 15:53:31,228 INFO L127 ssoRankerPreferences]: Term annotations enabled: false [2024-11-09 15:53:31,228 INFO L128 ssoRankerPreferences]: Use exernal solver: true [2024-11-09 15:53:31,228 INFO L129 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2024-11-09 15:53:31,228 INFO L130 ssoRankerPreferences]: Dump SMT script to file: false [2024-11-09 15:53:31,228 INFO L131 ssoRankerPreferences]: Path of dumped script: [2024-11-09 15:53:31,228 INFO L132 ssoRankerPreferences]: Filename of dumped script: elevator_spec14_product11.cil.c_Iteration4_Loop [2024-11-09 15:53:31,228 INFO L133 ssoRankerPreferences]: MapElimAlgo: Frank [2024-11-09 15:53:31,228 INFO L241 LassoAnalysis]: Starting lasso preprocessing... [2024-11-09 15:53:31,265 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:31,272 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:31,277 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:31,279 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:31,280 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:31,281 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:31,282 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:31,284 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:31,286 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:31,289 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:31,293 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:31,294 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:31,298 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:31,300 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:31,304 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:31,308 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:31,314 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:31,315 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:31,318 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:31,325 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:31,330 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:31,331 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:31,335 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:31,336 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:31,341 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:31,345 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:31,349 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:31,354 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:31,359 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:31,362 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:31,364 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:31,365 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:31,367 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:31,369 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:31,370 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:31,371 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:31,375 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:31,377 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:31,378 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:31,380 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:31,382 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:31,384 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:31,386 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:31,388 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:31,392 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:31,394 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:31,395 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:31,397 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:31,399 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:31,400 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:31,402 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:31,405 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:31,411 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:31,413 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:31,414 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:31,416 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:31,421 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:31,423 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:31,425 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:31,426 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:31,427 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:31,429 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:31,437 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:31,439 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:31,442 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:31,449 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:31,452 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:31,458 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:31,466 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:31,472 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:31,482 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:31,498 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:31,506 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:31,508 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:31,509 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:31,512 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:31,514 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:31,516 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:31,518 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:31,519 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:31,522 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:31,524 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:31,525 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:31,527 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:31,535 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:31,536 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:31,541 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:31,543 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:31,544 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:31,545 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:31,547 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:31,551 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:31,553 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:31,554 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:31,556 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:31,561 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:31,564 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:31,566 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:31,567 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:31,838 INFO L259 LassoAnalysis]: Preprocessing complete. [2024-11-09 15:53:31,839 INFO L365 LassoAnalysis]: Checking for nontermination... [2024-11-09 15:53:31,841 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2024-11-09 15:53:31,841 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2024-11-09 15:53:31,844 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2024-11-09 15:53:31,844 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (2)] Waiting until timeout for monitored process [2024-11-09 15:53:31,847 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2024-11-09 15:53:31,848 INFO L160 nArgumentSynthesizer]: Using integer mode. [2024-11-09 15:53:31,865 INFO L398 LassoAnalysis]: Proved nontermination for one component. [2024-11-09 15:53:31,869 INFO L401 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_isExecutiveFloor_#in~floorID#1=0} Honda state: {ULTIMATE.start_isExecutiveFloor_#in~floorID#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2024-11-09 15:53:31,890 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (2)] Ended with exit code 0 [2024-11-09 15:53:31,892 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2024-11-09 15:53:31,892 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2024-11-09 15:53:31,894 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2024-11-09 15:53:31,896 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (3)] Waiting until timeout for monitored process [2024-11-09 15:53:31,897 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2024-11-09 15:53:31,897 INFO L160 nArgumentSynthesizer]: Using integer mode. [2024-11-09 15:53:31,908 INFO L398 LassoAnalysis]: Proved nontermination for one component. [2024-11-09 15:53:31,909 INFO L401 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_~tmp~19#1=0} Honda state: {ULTIMATE.start_stopRequestedInDirection_~tmp~19#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2024-11-09 15:53:31,919 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (3)] Ended with exit code 0 [2024-11-09 15:53:31,921 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2024-11-09 15:53:31,921 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2024-11-09 15:53:31,922 INFO L229 MonitoredProcess]: Starting monitored process 4 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2024-11-09 15:53:31,930 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (4)] Waiting until timeout for monitored process [2024-11-09 15:53:31,931 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2024-11-09 15:53:31,931 INFO L160 nArgumentSynthesizer]: Using integer mode. [2024-11-09 15:53:31,945 INFO L398 LassoAnalysis]: Proved nontermination for one component. [2024-11-09 15:53:31,945 INFO L401 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___8~2#1=0} Honda state: {ULTIMATE.start_timeShift_~tmp___8~2#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2024-11-09 15:53:31,957 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (4)] Forceful destruction successful, exit code 0 [2024-11-09 15:53:31,957 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2024-11-09 15:53:31,958 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2024-11-09 15:53:31,959 INFO L229 MonitoredProcess]: Starting monitored process 5 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2024-11-09 15:53:31,963 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (5)] Waiting until timeout for monitored process [2024-11-09 15:53:31,964 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2024-11-09 15:53:31,964 INFO L160 nArgumentSynthesizer]: Using integer mode. [2024-11-09 15:53:31,978 INFO L398 LassoAnalysis]: Proved nontermination for one component. [2024-11-09 15:53:31,978 INFO L401 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___7~2#1=0} Honda state: {ULTIMATE.start_timeShift_~tmp___7~2#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2024-11-09 15:53:31,990 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (5)] Forceful destruction successful, exit code 0 [2024-11-09 15:53:31,990 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2024-11-09 15:53:31,990 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2024-11-09 15:53:31,995 INFO L229 MonitoredProcess]: Starting monitored process 6 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2024-11-09 15:53:31,996 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (6)] Waiting until timeout for monitored process [2024-11-09 15:53:31,997 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2024-11-09 15:53:31,997 INFO L160 nArgumentSynthesizer]: Using integer mode. [2024-11-09 15:53:32,008 INFO L398 LassoAnalysis]: Proved nontermination for one component. [2024-11-09 15:53:32,008 INFO L401 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedAtCurrentFloor_#t~ret76#1=0} Honda state: {ULTIMATE.start_stopRequestedAtCurrentFloor_#t~ret76#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2024-11-09 15:53:32,019 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (6)] Ended with exit code 0 [2024-11-09 15:53:32,019 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2024-11-09 15:53:32,020 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2024-11-09 15:53:32,021 INFO L229 MonitoredProcess]: Starting monitored process 7 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2024-11-09 15:53:32,021 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (7)] Waiting until timeout for monitored process [2024-11-09 15:53:32,023 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2024-11-09 15:53:32,023 INFO L160 nArgumentSynthesizer]: Using integer mode. [2024-11-09 15:53:32,036 INFO L398 LassoAnalysis]: Proved nontermination for one component. [2024-11-09 15:53:32,036 INFO L401 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification14_spec__1_~tmp~2#1=0} Honda state: {ULTIMATE.start___utac_acc__Specification14_spec__1_~tmp~2#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2024-11-09 15:53:32,049 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (7)] Ended with exit code 0 [2024-11-09 15:53:32,049 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2024-11-09 15:53:32,049 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2024-11-09 15:53:32,051 INFO L229 MonitoredProcess]: Starting monitored process 8 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2024-11-09 15:53:32,051 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (8)] Waiting until timeout for monitored process [2024-11-09 15:53:32,053 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2024-11-09 15:53:32,053 INFO L160 nArgumentSynthesizer]: Using integer mode. [2024-11-09 15:53:32,065 INFO L398 LassoAnalysis]: Proved nontermination for one component. [2024-11-09 15:53:32,065 INFO L401 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_getCurrentFloorID_#res#1=0} Honda state: {ULTIMATE.start_getCurrentFloorID_#res#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2024-11-09 15:53:32,079 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (8)] Ended with exit code 0 [2024-11-09 15:53:32,080 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2024-11-09 15:53:32,080 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2024-11-09 15:53:32,081 INFO L229 MonitoredProcess]: Starting monitored process 9 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2024-11-09 15:53:32,082 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (9)] Waiting until timeout for monitored process [2024-11-09 15:53:32,083 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2024-11-09 15:53:32,083 INFO L160 nArgumentSynthesizer]: Using integer mode. [2024-11-09 15:53:32,094 INFO L398 LassoAnalysis]: Proved nontermination for one component. [2024-11-09 15:53:32,095 INFO L401 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_anyStopRequested_#t~ret55#1=0} Honda state: {ULTIMATE.start_anyStopRequested_#t~ret55#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2024-11-09 15:53:32,105 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (9)] Ended with exit code 0 [2024-11-09 15:53:32,105 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2024-11-09 15:53:32,106 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2024-11-09 15:53:32,107 INFO L229 MonitoredProcess]: Starting monitored process 10 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2024-11-09 15:53:32,108 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (10)] Waiting until timeout for monitored process [2024-11-09 15:53:32,110 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2024-11-09 15:53:32,110 INFO L160 nArgumentSynthesizer]: Using integer mode. [2024-11-09 15:53:32,121 INFO L398 LassoAnalysis]: Proved nontermination for one component. [2024-11-09 15:53:32,121 INFO L401 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification14_spec__1_#t~ret11#1=0} Honda state: {ULTIMATE.start___utac_acc__Specification14_spec__1_#t~ret11#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2024-11-09 15:53:32,132 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (10)] Ended with exit code 0 [2024-11-09 15:53:32,132 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2024-11-09 15:53:32,132 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2024-11-09 15:53:32,133 INFO L229 MonitoredProcess]: Starting monitored process 11 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2024-11-09 15:53:32,134 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (11)] Waiting until timeout for monitored process [2024-11-09 15:53:32,136 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2024-11-09 15:53:32,136 INFO L160 nArgumentSynthesizer]: Using integer mode. [2024-11-09 15:53:32,147 INFO L398 LassoAnalysis]: Proved nontermination for one component. [2024-11-09 15:53:32,147 INFO L401 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_anyStopRequested_#res#1=0} Honda state: {ULTIMATE.start_anyStopRequested_#res#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2024-11-09 15:53:32,158 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (11)] Forceful destruction successful, exit code 0 [2024-11-09 15:53:32,158 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2024-11-09 15:53:32,158 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2024-11-09 15:53:32,159 INFO L229 MonitoredProcess]: Starting monitored process 12 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2024-11-09 15:53:32,160 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (12)] Waiting until timeout for monitored process [2024-11-09 15:53:32,161 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2024-11-09 15:53:32,161 INFO L160 nArgumentSynthesizer]: Using integer mode. [2024-11-09 15:53:32,173 INFO L398 LassoAnalysis]: Proved nontermination for one component. [2024-11-09 15:53:32,173 INFO L401 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___4~2#1=0} Honda state: {ULTIMATE.start_timeShift_~tmp___4~2#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2024-11-09 15:53:32,183 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (12)] Ended with exit code 0 [2024-11-09 15:53:32,184 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2024-11-09 15:53:32,184 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2024-11-09 15:53:32,185 INFO L229 MonitoredProcess]: Starting monitored process 13 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2024-11-09 15:53:32,186 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (13)] Waiting until timeout for monitored process [2024-11-09 15:53:32,187 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2024-11-09 15:53:32,188 INFO L160 nArgumentSynthesizer]: Using integer mode. [2024-11-09 15:53:32,198 INFO L398 LassoAnalysis]: Proved nontermination for one component. [2024-11-09 15:53:32,198 INFO L401 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_cleanup_~tmp___0~3#1=0} Honda state: {ULTIMATE.start_cleanup_~tmp___0~3#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2024-11-09 15:53:32,209 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (13)] Ended with exit code 0 [2024-11-09 15:53:32,209 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2024-11-09 15:53:32,209 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2024-11-09 15:53:32,211 INFO L229 MonitoredProcess]: Starting monitored process 14 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2024-11-09 15:53:32,212 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (14)] Waiting until timeout for monitored process [2024-11-09 15:53:32,213 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2024-11-09 15:53:32,213 INFO L160 nArgumentSynthesizer]: Using integer mode. [2024-11-09 15:53:32,226 INFO L398 LassoAnalysis]: Proved nontermination for one component. [2024-11-09 15:53:32,226 INFO L401 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___2~5#1=0} Honda state: {ULTIMATE.start_timeShift_~tmp___2~5#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2024-11-09 15:53:32,236 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (14)] Ended with exit code 0 [2024-11-09 15:53:32,237 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2024-11-09 15:53:32,237 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2024-11-09 15:53:32,238 INFO L229 MonitoredProcess]: Starting monitored process 15 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2024-11-09 15:53:32,239 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (15)] Waiting until timeout for monitored process [2024-11-09 15:53:32,240 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2024-11-09 15:53:32,240 INFO L160 nArgumentSynthesizer]: Using integer mode. [2024-11-09 15:53:32,250 INFO L398 LassoAnalysis]: Proved nontermination for one component. [2024-11-09 15:53:32,250 INFO L401 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_isExecutiveFloorCalling_#t~ret129#1=0} Honda state: {ULTIMATE.start_isExecutiveFloorCalling_#t~ret129#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2024-11-09 15:53:32,261 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (15)] Forceful destruction successful, exit code 0 [2024-11-09 15:53:32,261 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2024-11-09 15:53:32,261 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2024-11-09 15:53:32,262 INFO L229 MonitoredProcess]: Starting monitored process 16 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2024-11-09 15:53:32,264 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (16)] Waiting until timeout for monitored process [2024-11-09 15:53:32,265 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2024-11-09 15:53:32,265 INFO L160 nArgumentSynthesizer]: Using integer mode. [2024-11-09 15:53:32,276 INFO L398 LassoAnalysis]: Proved nontermination for one component. [2024-11-09 15:53:32,277 INFO L401 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification14_spec__1_#t~ret12#1=0} Honda state: {ULTIMATE.start___utac_acc__Specification14_spec__1_#t~ret12#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2024-11-09 15:53:32,287 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (16)] Ended with exit code 0 [2024-11-09 15:53:32,288 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2024-11-09 15:53:32,288 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2024-11-09 15:53:32,289 INFO L229 MonitoredProcess]: Starting monitored process 17 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2024-11-09 15:53:32,290 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (17)] Waiting until timeout for monitored process [2024-11-09 15:53:32,291 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2024-11-09 15:53:32,291 INFO L160 nArgumentSynthesizer]: Using integer mode. [2024-11-09 15:53:32,301 INFO L398 LassoAnalysis]: Proved nontermination for one component. [2024-11-09 15:53:32,301 INFO L401 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedAtCurrentFloor_~retValue_acc~25#1=0} Honda state: {ULTIMATE.start_stopRequestedAtCurrentFloor_~retValue_acc~25#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2024-11-09 15:53:32,312 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (17)] Forceful destruction successful, exit code 0 [2024-11-09 15:53:32,312 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2024-11-09 15:53:32,312 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2024-11-09 15:53:32,314 INFO L229 MonitoredProcess]: Starting monitored process 18 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2024-11-09 15:53:32,315 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (18)] Waiting until timeout for monitored process [2024-11-09 15:53:32,316 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2024-11-09 15:53:32,316 INFO L160 nArgumentSynthesizer]: Using integer mode. [2024-11-09 15:53:32,326 INFO L398 LassoAnalysis]: Proved nontermination for one component. [2024-11-09 15:53:32,326 INFO L401 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_#in~respectInLiftCalls#1=0} Honda state: {ULTIMATE.start_stopRequestedInDirection_#in~respectInLiftCalls#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2024-11-09 15:53:32,337 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (18)] Ended with exit code 0 [2024-11-09 15:53:32,337 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2024-11-09 15:53:32,337 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2024-11-09 15:53:32,339 INFO L229 MonitoredProcess]: Starting monitored process 19 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2024-11-09 15:53:32,341 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (19)] Waiting until timeout for monitored process [2024-11-09 15:53:32,342 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2024-11-09 15:53:32,342 INFO L160 nArgumentSynthesizer]: Using integer mode. [2024-11-09 15:53:32,354 INFO L398 LassoAnalysis]: Proved nontermination for one component. [2024-11-09 15:53:32,354 INFO L401 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification14_spec__1_~tmp___2~0#1=0} Honda state: {ULTIMATE.start___utac_acc__Specification14_spec__1_~tmp___2~0#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2024-11-09 15:53:32,364 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (19)] Ended with exit code 0 [2024-11-09 15:53:32,365 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2024-11-09 15:53:32,365 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2024-11-09 15:53:32,366 INFO L229 MonitoredProcess]: Starting monitored process 20 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2024-11-09 15:53:32,367 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (20)] Waiting until timeout for monitored process [2024-11-09 15:53:32,368 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2024-11-09 15:53:32,368 INFO L160 nArgumentSynthesizer]: Using integer mode. [2024-11-09 15:53:32,388 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (20)] Forceful destruction successful, exit code 0 [2024-11-09 15:53:32,389 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2024-11-09 15:53:32,389 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2024-11-09 15:53:32,390 INFO L229 MonitoredProcess]: Starting monitored process 21 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2024-11-09 15:53:32,391 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (21)] Waiting until timeout for monitored process [2024-11-09 15:53:32,393 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 3 Nilpotent components: true [2024-11-09 15:53:32,393 INFO L160 nArgumentSynthesizer]: Using integer mode. [2024-11-09 15:53:32,408 INFO L405 LassoAnalysis]: Proving nontermination failed: No geometric nontermination argument exists. [2024-11-09 15:53:32,423 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (21)] Ended with exit code 0 [2024-11-09 15:53:32,424 INFO L204 LassoAnalysis]: Preferences: [2024-11-09 15:53:32,424 INFO L125 ssoRankerPreferences]: Compute integeral hull: false [2024-11-09 15:53:32,427 INFO L126 ssoRankerPreferences]: Enable LassoPartitioneer: true [2024-11-09 15:53:32,427 INFO L127 ssoRankerPreferences]: Term annotations enabled: false [2024-11-09 15:53:32,427 INFO L128 ssoRankerPreferences]: Use exernal solver: false [2024-11-09 15:53:32,427 INFO L129 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2024-11-09 15:53:32,427 INFO L130 ssoRankerPreferences]: Dump SMT script to file: false [2024-11-09 15:53:32,427 INFO L131 ssoRankerPreferences]: Path of dumped script: [2024-11-09 15:53:32,427 INFO L132 ssoRankerPreferences]: Filename of dumped script: elevator_spec14_product11.cil.c_Iteration4_Loop [2024-11-09 15:53:32,427 INFO L133 ssoRankerPreferences]: MapElimAlgo: Frank [2024-11-09 15:53:32,427 INFO L241 LassoAnalysis]: Starting lasso preprocessing... [2024-11-09 15:53:32,430 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:32,435 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:32,438 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:32,441 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:32,443 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:32,444 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:32,447 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:32,449 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:32,451 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:32,453 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:32,454 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:32,456 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:32,457 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:32,459 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:32,460 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:32,462 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:32,463 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:32,465 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:32,466 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:32,468 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:32,470 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:32,471 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:32,473 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:32,474 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:32,476 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:32,477 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:32,481 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:32,482 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:32,485 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:32,490 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:32,492 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:32,494 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:32,497 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:32,498 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:32,500 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:32,502 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:32,506 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:32,508 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:32,510 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:32,511 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:32,513 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:32,515 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:32,516 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:32,518 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:32,519 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:32,521 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:32,522 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:32,524 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:32,525 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:32,526 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:32,528 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:32,529 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:32,531 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:32,532 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:32,534 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:32,535 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:32,536 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:32,538 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:32,539 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:32,540 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:32,542 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:32,543 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:32,545 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:32,546 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:32,547 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:32,549 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:32,550 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:32,552 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:32,554 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:32,555 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:32,559 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:32,560 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:32,562 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:32,563 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:32,564 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:32,566 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:32,567 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:32,569 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:32,570 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:32,571 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:32,573 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:32,574 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:32,576 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:32,577 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:32,579 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:32,580 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:32,582 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:32,583 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:32,585 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:32,586 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:32,587 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:32,589 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:32,591 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:32,596 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:32,598 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:32,599 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:32,604 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:32,606 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:32,607 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-09 15:53:32,845 INFO L259 LassoAnalysis]: Preprocessing complete. [2024-11-09 15:53:32,855 INFO L451 LassoAnalysis]: Using template 'affine'. [2024-11-09 15:53:32,856 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2024-11-09 15:53:32,856 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2024-11-09 15:53:32,857 INFO L229 MonitoredProcess]: Starting monitored process 22 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2024-11-09 15:53:32,858 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (22)] Waiting until timeout for monitored process [2024-11-09 15:53:32,859 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2024-11-09 15:53:32,869 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2024-11-09 15:53:32,869 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2024-11-09 15:53:32,870 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2024-11-09 15:53:32,870 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2024-11-09 15:53:32,870 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2024-11-09 15:53:32,871 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2024-11-09 15:53:32,871 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2024-11-09 15:53:32,873 INFO L488 LassoAnalysis]: Proving termination failed for this template and these settings. [2024-11-09 15:53:32,883 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (22)] Forceful destruction successful, exit code 0 [2024-11-09 15:53:32,883 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2024-11-09 15:53:32,883 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2024-11-09 15:53:32,886 INFO L229 MonitoredProcess]: Starting monitored process 23 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2024-11-09 15:53:32,886 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (23)] Waiting until timeout for monitored process [2024-11-09 15:53:32,887 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2024-11-09 15:53:32,896 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2024-11-09 15:53:32,897 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2024-11-09 15:53:32,897 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2024-11-09 15:53:32,897 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2024-11-09 15:53:32,897 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2024-11-09 15:53:32,897 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2024-11-09 15:53:32,897 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2024-11-09 15:53:32,898 INFO L488 LassoAnalysis]: Proving termination failed for this template and these settings. [2024-11-09 15:53:32,908 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (23)] Forceful destruction successful, exit code 0 [2024-11-09 15:53:32,909 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2024-11-09 15:53:32,909 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2024-11-09 15:53:32,913 INFO L229 MonitoredProcess]: Starting monitored process 24 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2024-11-09 15:53:32,914 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (24)] Waiting until timeout for monitored process [2024-11-09 15:53:32,916 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2024-11-09 15:53:32,926 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2024-11-09 15:53:32,926 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2024-11-09 15:53:32,926 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2024-11-09 15:53:32,926 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2024-11-09 15:53:32,926 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2024-11-09 15:53:32,926 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2024-11-09 15:53:32,927 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2024-11-09 15:53:32,928 INFO L488 LassoAnalysis]: Proving termination failed for this template and these settings. [2024-11-09 15:53:32,937 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (24)] Forceful destruction successful, exit code 0 [2024-11-09 15:53:32,937 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2024-11-09 15:53:32,938 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2024-11-09 15:53:32,939 INFO L229 MonitoredProcess]: Starting monitored process 25 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2024-11-09 15:53:32,940 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (25)] Waiting until timeout for monitored process [2024-11-09 15:53:32,942 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2024-11-09 15:53:32,952 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2024-11-09 15:53:32,952 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2024-11-09 15:53:32,952 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2024-11-09 15:53:32,952 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2024-11-09 15:53:32,952 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2024-11-09 15:53:32,952 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2024-11-09 15:53:32,953 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2024-11-09 15:53:32,954 INFO L488 LassoAnalysis]: Proving termination failed for this template and these settings. [2024-11-09 15:53:32,965 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (25)] Forceful destruction successful, exit code 0 [2024-11-09 15:53:32,966 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2024-11-09 15:53:32,966 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2024-11-09 15:53:32,968 INFO L229 MonitoredProcess]: Starting monitored process 26 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2024-11-09 15:53:32,973 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (26)] Waiting until timeout for monitored process [2024-11-09 15:53:32,974 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2024-11-09 15:53:32,984 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2024-11-09 15:53:32,985 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2024-11-09 15:53:32,985 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2024-11-09 15:53:32,985 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2024-11-09 15:53:32,985 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2024-11-09 15:53:32,985 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2024-11-09 15:53:32,985 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2024-11-09 15:53:32,988 INFO L488 LassoAnalysis]: Proving termination failed for this template and these settings. [2024-11-09 15:53:32,998 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (26)] Forceful destruction successful, exit code 0 [2024-11-09 15:53:32,998 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2024-11-09 15:53:32,998 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2024-11-09 15:53:33,001 INFO L229 MonitoredProcess]: Starting monitored process 27 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2024-11-09 15:53:33,003 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (27)] Waiting until timeout for monitored process [2024-11-09 15:53:33,004 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2024-11-09 15:53:33,013 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2024-11-09 15:53:33,013 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2024-11-09 15:53:33,013 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2024-11-09 15:53:33,013 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2024-11-09 15:53:33,013 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2024-11-09 15:53:33,014 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2024-11-09 15:53:33,014 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2024-11-09 15:53:33,015 INFO L488 LassoAnalysis]: Proving termination failed for this template and these settings. [2024-11-09 15:53:33,025 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (27)] Ended with exit code 0 [2024-11-09 15:53:33,026 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2024-11-09 15:53:33,026 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2024-11-09 15:53:33,027 INFO L229 MonitoredProcess]: Starting monitored process 28 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2024-11-09 15:53:33,029 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (28)] Waiting until timeout for monitored process [2024-11-09 15:53:33,030 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2024-11-09 15:53:33,040 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2024-11-09 15:53:33,040 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2024-11-09 15:53:33,040 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2024-11-09 15:53:33,040 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2024-11-09 15:53:33,040 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2024-11-09 15:53:33,040 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2024-11-09 15:53:33,041 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2024-11-09 15:53:33,045 INFO L488 LassoAnalysis]: Proving termination failed for this template and these settings. [2024-11-09 15:53:33,055 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (28)] Ended with exit code 0 [2024-11-09 15:53:33,055 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2024-11-09 15:53:33,056 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2024-11-09 15:53:33,058 INFO L229 MonitoredProcess]: Starting monitored process 29 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2024-11-09 15:53:33,071 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (29)] Waiting until timeout for monitored process [2024-11-09 15:53:33,072 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2024-11-09 15:53:33,082 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2024-11-09 15:53:33,082 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2024-11-09 15:53:33,082 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2024-11-09 15:53:33,082 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2024-11-09 15:53:33,082 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2024-11-09 15:53:33,082 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2024-11-09 15:53:33,083 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2024-11-09 15:53:33,084 INFO L488 LassoAnalysis]: Proving termination failed for this template and these settings. [2024-11-09 15:53:33,096 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (29)] Ended with exit code 0 [2024-11-09 15:53:33,096 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2024-11-09 15:53:33,096 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2024-11-09 15:53:33,098 INFO L229 MonitoredProcess]: Starting monitored process 30 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2024-11-09 15:53:33,101 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (30)] Waiting until timeout for monitored process [2024-11-09 15:53:33,102 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2024-11-09 15:53:33,111 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2024-11-09 15:53:33,111 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2024-11-09 15:53:33,111 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2024-11-09 15:53:33,111 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2024-11-09 15:53:33,111 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2024-11-09 15:53:33,112 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2024-11-09 15:53:33,112 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2024-11-09 15:53:33,115 INFO L488 LassoAnalysis]: Proving termination failed for this template and these settings. [2024-11-09 15:53:33,126 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (30)] Ended with exit code 0 [2024-11-09 15:53:33,127 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2024-11-09 15:53:33,127 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2024-11-09 15:53:33,129 INFO L229 MonitoredProcess]: Starting monitored process 31 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2024-11-09 15:53:33,130 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (31)] Waiting until timeout for monitored process [2024-11-09 15:53:33,131 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2024-11-09 15:53:33,140 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2024-11-09 15:53:33,140 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2024-11-09 15:53:33,140 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2024-11-09 15:53:33,140 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2024-11-09 15:53:33,140 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2024-11-09 15:53:33,141 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2024-11-09 15:53:33,141 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2024-11-09 15:53:33,142 INFO L488 LassoAnalysis]: Proving termination failed for this template and these settings. [2024-11-09 15:53:33,152 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (31)] Forceful destruction successful, exit code 0 [2024-11-09 15:53:33,152 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2024-11-09 15:53:33,152 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2024-11-09 15:53:33,156 INFO L229 MonitoredProcess]: Starting monitored process 32 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2024-11-09 15:53:33,163 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (32)] Waiting until timeout for monitored process [2024-11-09 15:53:33,164 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2024-11-09 15:53:33,174 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2024-11-09 15:53:33,174 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2024-11-09 15:53:33,174 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2024-11-09 15:53:33,174 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2024-11-09 15:53:33,174 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2024-11-09 15:53:33,174 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2024-11-09 15:53:33,175 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2024-11-09 15:53:33,176 INFO L488 LassoAnalysis]: Proving termination failed for this template and these settings. [2024-11-09 15:53:33,187 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (32)] Ended with exit code 0 [2024-11-09 15:53:33,188 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2024-11-09 15:53:33,188 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2024-11-09 15:53:33,192 INFO L229 MonitoredProcess]: Starting monitored process 33 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2024-11-09 15:53:33,193 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (33)] Waiting until timeout for monitored process [2024-11-09 15:53:33,193 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2024-11-09 15:53:33,202 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2024-11-09 15:53:33,203 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2024-11-09 15:53:33,203 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2024-11-09 15:53:33,203 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2024-11-09 15:53:33,203 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2024-11-09 15:53:33,203 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2024-11-09 15:53:33,203 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2024-11-09 15:53:33,204 INFO L488 LassoAnalysis]: Proving termination failed for this template and these settings. [2024-11-09 15:53:33,214 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (33)] Forceful destruction successful, exit code 0 [2024-11-09 15:53:33,215 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2024-11-09 15:53:33,215 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2024-11-09 15:53:33,216 INFO L229 MonitoredProcess]: Starting monitored process 34 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2024-11-09 15:53:33,218 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (34)] Waiting until timeout for monitored process [2024-11-09 15:53:33,218 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2024-11-09 15:53:33,227 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2024-11-09 15:53:33,228 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2024-11-09 15:53:33,228 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2024-11-09 15:53:33,228 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2024-11-09 15:53:33,228 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2024-11-09 15:53:33,228 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2024-11-09 15:53:33,228 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2024-11-09 15:53:33,229 INFO L488 LassoAnalysis]: Proving termination failed for this template and these settings. [2024-11-09 15:53:33,239 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (34)] Forceful destruction successful, exit code 0 [2024-11-09 15:53:33,240 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2024-11-09 15:53:33,240 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2024-11-09 15:53:33,244 INFO L229 MonitoredProcess]: Starting monitored process 35 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2024-11-09 15:53:33,245 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (35)] Waiting until timeout for monitored process [2024-11-09 15:53:33,249 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2024-11-09 15:53:33,258 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2024-11-09 15:53:33,259 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2024-11-09 15:53:33,259 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2024-11-09 15:53:33,259 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2024-11-09 15:53:33,259 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2024-11-09 15:53:33,259 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2024-11-09 15:53:33,259 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2024-11-09 15:53:33,260 INFO L488 LassoAnalysis]: Proving termination failed for this template and these settings. [2024-11-09 15:53:33,270 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (35)] Forceful destruction successful, exit code 0 [2024-11-09 15:53:33,270 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2024-11-09 15:53:33,271 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2024-11-09 15:53:33,272 INFO L229 MonitoredProcess]: Starting monitored process 36 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2024-11-09 15:53:33,273 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (36)] Waiting until timeout for monitored process [2024-11-09 15:53:33,274 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2024-11-09 15:53:33,283 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2024-11-09 15:53:33,283 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2024-11-09 15:53:33,283 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2024-11-09 15:53:33,283 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2024-11-09 15:53:33,284 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2024-11-09 15:53:33,284 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2024-11-09 15:53:33,284 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2024-11-09 15:53:33,285 INFO L488 LassoAnalysis]: Proving termination failed for this template and these settings. [2024-11-09 15:53:33,295 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (36)] Forceful destruction successful, exit code 0 [2024-11-09 15:53:33,295 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2024-11-09 15:53:33,295 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2024-11-09 15:53:33,297 INFO L229 MonitoredProcess]: Starting monitored process 37 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2024-11-09 15:53:33,300 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (37)] Waiting until timeout for monitored process [2024-11-09 15:53:33,300 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2024-11-09 15:53:33,313 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2024-11-09 15:53:33,313 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2024-11-09 15:53:33,313 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2024-11-09 15:53:33,313 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2024-11-09 15:53:33,313 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2024-11-09 15:53:33,313 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2024-11-09 15:53:33,313 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2024-11-09 15:53:33,314 INFO L488 LassoAnalysis]: Proving termination failed for this template and these settings. [2024-11-09 15:53:33,324 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (37)] Forceful destruction successful, exit code 0 [2024-11-09 15:53:33,325 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2024-11-09 15:53:33,325 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2024-11-09 15:53:33,326 INFO L229 MonitoredProcess]: Starting monitored process 38 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2024-11-09 15:53:33,327 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (38)] Waiting until timeout for monitored process [2024-11-09 15:53:33,327 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2024-11-09 15:53:33,338 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2024-11-09 15:53:33,339 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2024-11-09 15:53:33,339 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2024-11-09 15:53:33,339 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2024-11-09 15:53:33,339 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2024-11-09 15:53:33,339 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2024-11-09 15:53:33,340 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2024-11-09 15:53:33,341 INFO L488 LassoAnalysis]: Proving termination failed for this template and these settings. [2024-11-09 15:53:33,354 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (38)] Ended with exit code 0 [2024-11-09 15:53:33,355 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2024-11-09 15:53:33,355 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2024-11-09 15:53:33,356 INFO L229 MonitoredProcess]: Starting monitored process 39 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2024-11-09 15:53:33,357 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (39)] Waiting until timeout for monitored process [2024-11-09 15:53:33,358 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2024-11-09 15:53:33,368 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2024-11-09 15:53:33,368 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2024-11-09 15:53:33,368 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2024-11-09 15:53:33,368 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2024-11-09 15:53:33,368 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2024-11-09 15:53:33,369 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2024-11-09 15:53:33,369 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2024-11-09 15:53:33,370 INFO L488 LassoAnalysis]: Proving termination failed for this template and these settings. [2024-11-09 15:53:33,381 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (39)] Ended with exit code 0 [2024-11-09 15:53:33,381 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2024-11-09 15:53:33,381 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2024-11-09 15:53:33,382 INFO L229 MonitoredProcess]: Starting monitored process 40 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2024-11-09 15:53:33,384 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (40)] Waiting until timeout for monitored process [2024-11-09 15:53:33,385 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2024-11-09 15:53:33,399 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2024-11-09 15:53:33,399 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2024-11-09 15:53:33,399 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2024-11-09 15:53:33,399 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2024-11-09 15:53:33,399 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2024-11-09 15:53:33,401 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2024-11-09 15:53:33,401 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2024-11-09 15:53:33,408 INFO L488 LassoAnalysis]: Proving termination failed for this template and these settings. [2024-11-09 15:53:33,419 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (40)] Forceful destruction successful, exit code 0 [2024-11-09 15:53:33,419 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2024-11-09 15:53:33,419 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2024-11-09 15:53:33,420 INFO L229 MonitoredProcess]: Starting monitored process 41 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2024-11-09 15:53:33,421 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (41)] Waiting until timeout for monitored process [2024-11-09 15:53:33,422 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2024-11-09 15:53:33,431 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2024-11-09 15:53:33,432 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2024-11-09 15:53:33,432 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2024-11-09 15:53:33,432 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2024-11-09 15:53:33,432 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2024-11-09 15:53:33,432 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2024-11-09 15:53:33,432 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2024-11-09 15:53:33,436 INFO L488 LassoAnalysis]: Proving termination failed for this template and these settings. [2024-11-09 15:53:33,448 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (41)] Forceful destruction successful, exit code 0 [2024-11-09 15:53:33,449 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2024-11-09 15:53:33,449 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2024-11-09 15:53:33,451 INFO L229 MonitoredProcess]: Starting monitored process 42 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2024-11-09 15:53:33,451 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (42)] Waiting until timeout for monitored process [2024-11-09 15:53:33,452 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2024-11-09 15:53:33,462 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2024-11-09 15:53:33,462 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2024-11-09 15:53:33,462 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2024-11-09 15:53:33,462 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2024-11-09 15:53:33,462 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2024-11-09 15:53:33,462 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2024-11-09 15:53:33,462 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2024-11-09 15:53:33,467 INFO L488 LassoAnalysis]: Proving termination failed for this template and these settings. [2024-11-09 15:53:33,477 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (42)] Ended with exit code 0 [2024-11-09 15:53:33,477 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2024-11-09 15:53:33,478 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2024-11-09 15:53:33,479 INFO L229 MonitoredProcess]: Starting monitored process 43 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2024-11-09 15:53:33,480 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (43)] Waiting until timeout for monitored process [2024-11-09 15:53:33,481 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2024-11-09 15:53:33,490 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2024-11-09 15:53:33,490 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2024-11-09 15:53:33,490 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2024-11-09 15:53:33,490 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2024-11-09 15:53:33,490 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2024-11-09 15:53:33,491 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2024-11-09 15:53:33,491 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2024-11-09 15:53:33,492 INFO L488 LassoAnalysis]: Proving termination failed for this template and these settings. [2024-11-09 15:53:33,502 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (43)] Forceful destruction successful, exit code 0 [2024-11-09 15:53:33,503 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2024-11-09 15:53:33,503 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2024-11-09 15:53:33,504 INFO L229 MonitoredProcess]: Starting monitored process 44 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2024-11-09 15:53:33,505 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (44)] Waiting until timeout for monitored process [2024-11-09 15:53:33,507 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2024-11-09 15:53:33,518 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2024-11-09 15:53:33,519 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2024-11-09 15:53:33,519 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2024-11-09 15:53:33,519 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2024-11-09 15:53:33,519 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2024-11-09 15:53:33,519 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2024-11-09 15:53:33,519 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2024-11-09 15:53:33,521 INFO L488 LassoAnalysis]: Proving termination failed for this template and these settings. [2024-11-09 15:53:33,532 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (44)] Forceful destruction successful, exit code 0 [2024-11-09 15:53:33,532 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2024-11-09 15:53:33,533 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2024-11-09 15:53:33,534 INFO L229 MonitoredProcess]: Starting monitored process 45 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2024-11-09 15:53:33,535 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (45)] Waiting until timeout for monitored process [2024-11-09 15:53:33,535 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2024-11-09 15:53:33,546 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2024-11-09 15:53:33,546 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2024-11-09 15:53:33,547 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2024-11-09 15:53:33,547 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2024-11-09 15:53:33,547 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2024-11-09 15:53:33,547 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2024-11-09 15:53:33,547 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2024-11-09 15:53:33,548 INFO L488 LassoAnalysis]: Proving termination failed for this template and these settings. [2024-11-09 15:53:33,558 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (45)] Forceful destruction successful, exit code 0 [2024-11-09 15:53:33,558 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2024-11-09 15:53:33,559 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2024-11-09 15:53:33,563 INFO L229 MonitoredProcess]: Starting monitored process 46 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2024-11-09 15:53:33,564 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (46)] Waiting until timeout for monitored process [2024-11-09 15:53:33,564 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2024-11-09 15:53:33,574 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2024-11-09 15:53:33,574 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2024-11-09 15:53:33,574 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2024-11-09 15:53:33,574 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2024-11-09 15:53:33,574 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2024-11-09 15:53:33,575 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2024-11-09 15:53:33,575 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2024-11-09 15:53:33,576 INFO L488 LassoAnalysis]: Proving termination failed for this template and these settings. [2024-11-09 15:53:33,586 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (46)] Ended with exit code 0 [2024-11-09 15:53:33,586 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2024-11-09 15:53:33,586 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2024-11-09 15:53:33,587 INFO L229 MonitoredProcess]: Starting monitored process 47 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2024-11-09 15:53:33,588 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (47)] Waiting until timeout for monitored process [2024-11-09 15:53:33,589 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2024-11-09 15:53:33,598 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2024-11-09 15:53:33,598 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2024-11-09 15:53:33,599 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2024-11-09 15:53:33,599 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2024-11-09 15:53:33,599 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2024-11-09 15:53:33,599 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2024-11-09 15:53:33,599 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2024-11-09 15:53:33,601 INFO L420 nArgumentSynthesizer]: Found a termination argument, trying to simplify. [2024-11-09 15:53:33,604 INFO L443 ModelExtractionUtils]: Simplification made 3 calls to the SMT solver. [2024-11-09 15:53:33,604 INFO L444 ModelExtractionUtils]: 0 out of 3 variables were initially zero. Simplification set additionally 1 variables to zero. [2024-11-09 15:53:33,605 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2024-11-09 15:53:33,605 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2024-11-09 15:53:33,607 INFO L229 MonitoredProcess]: Starting monitored process 48 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2024-11-09 15:53:33,608 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (48)] Waiting until timeout for monitored process [2024-11-09 15:53:33,608 INFO L435 nArgumentSynthesizer]: Simplifying supporting invariants... [2024-11-09 15:53:33,608 INFO L438 nArgumentSynthesizer]: Removed 0 redundant supporting invariants from a total of 0. [2024-11-09 15:53:33,608 INFO L474 LassoAnalysis]: Proved termination. [2024-11-09 15:53:33,609 INFO L476 LassoAnalysis]: Termination argument consisting of: Ranking function f(~currentFloorID~0) = 1*~currentFloorID~0 Supporting invariants [] [2024-11-09 15:53:33,619 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (47)] Forceful destruction successful, exit code 0 [2024-11-09 15:53:33,621 INFO L156 tatePredicateManager]: 0 out of 0 supporting invariants were superfluous and have been removed [2024-11-09 15:53:33,645 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-09 15:53:33,857 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-09 15:53:33,861 INFO L255 TraceCheckSpWp]: Trace formula consists of 984 conjuncts, 2 conjuncts are in the unsatisfiable core [2024-11-09 15:53:33,867 INFO L278 TraceCheckSpWp]: Computing forward predicates... [2024-11-09 15:53:34,067 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-09 15:53:34,069 INFO L255 TraceCheckSpWp]: Trace formula consists of 171 conjuncts, 18 conjuncts are in the unsatisfiable core [2024-11-09 15:53:34,071 INFO L278 TraceCheckSpWp]: Computing forward predicates... [2024-11-09 15:53:34,271 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-09 15:53:34,276 INFO L141 lantAutomatonBouncer]: Defining deterministic Buchi interpolant automaton with honda bouncer for stem and without honda bouncer for loop.1 stem predicates 8 loop predicates [2024-11-09 15:53:34,277 INFO L71 iDifferenceNCSBLazy3]: Start buchiDifferenceNCSBLazy3. First operand 33248 states and 61935 transitions. cyclomatic complexity: 28692 Second operand has 10 states, 10 states have (on average 19.0) internal successors, (190), 10 states have internal predecessors, (190), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-09 15:53:34,911 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (48)] Ended with exit code 0 [2024-11-09 15:53:37,091 INFO L75 iDifferenceNCSBLazy3]: Finished buchiDifferenceNCSBLazy3. First operand 33248 states and 61935 transitions. cyclomatic complexity: 28692. Second operand has 10 states, 10 states have (on average 19.0) internal successors, (190), 10 states have internal predecessors, (190), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Result 66272 states and 123211 transitions. Complement of second has 21 states. [2024-11-09 15:53:37,094 INFO L141 InterpolantAutomaton]: Switched to read-only mode: Buchi interpolant automaton has 11 states 1 stem states 9 non-accepting loop states 1 accepting loop states [2024-11-09 15:53:37,094 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 10 states, 10 states have (on average 19.0) internal successors, (190), 10 states have internal predecessors, (190), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-09 15:53:37,111 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 11 states to 11 states and 15136 transitions. [2024-11-09 15:53:37,113 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 11 states and 15136 transitions. Stem has 147 letters. Loop has 43 letters. [2024-11-09 15:53:37,117 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2024-11-09 15:53:37,117 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 11 states and 15136 transitions. Stem has 190 letters. Loop has 43 letters. [2024-11-09 15:53:37,118 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2024-11-09 15:53:37,119 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 11 states and 15136 transitions. Stem has 147 letters. Loop has 86 letters. [2024-11-09 15:53:37,120 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2024-11-09 15:53:37,120 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 66272 states and 123211 transitions. [2024-11-09 15:53:37,465 INFO L131 ngComponentsAnalysis]: Automaton has 13 accepting balls. 22187 [2024-11-09 15:53:37,742 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 66272 states to 66272 states and 123211 transitions. [2024-11-09 15:53:37,742 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 49482 [2024-11-09 15:53:38,109 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 49836 [2024-11-09 15:53:38,113 INFO L73 IsDeterministic]: Start isDeterministic. Operand 66272 states and 123211 transitions. [2024-11-09 15:53:38,138 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2024-11-09 15:53:38,139 INFO L218 hiAutomatonCegarLoop]: Abstraction has 66272 states and 123211 transitions. [2024-11-09 15:53:38,220 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 66272 states and 123211 transitions. [2024-11-09 15:53:38,795 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 66272 to 64656. [2024-11-09 15:53:38,864 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 64656 states, 64656 states have (on average 1.8620700321702548) internal successors, (120394), 64655 states have internal predecessors, (120394), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-09 15:53:38,968 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 64656 states to 64656 states and 120394 transitions. [2024-11-09 15:53:38,968 INFO L240 hiAutomatonCegarLoop]: Abstraction has 64656 states and 120394 transitions. [2024-11-09 15:53:38,968 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-09 15:53:38,969 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-11-09 15:53:38,969 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-11-09 15:53:38,969 INFO L87 Difference]: Start difference. First operand 64656 states and 120394 transitions. Second operand has 3 states, 3 states have (on average 49.0) internal successors, (147), 3 states have internal predecessors, (147), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-09 15:53:39,444 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-09 15:53:39,445 INFO L93 Difference]: Finished difference Result 64656 states and 120388 transitions. [2024-11-09 15:53:39,445 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 64656 states and 120388 transitions. [2024-11-09 15:53:39,860 INFO L131 ngComponentsAnalysis]: Automaton has 12 accepting balls. 21209 [2024-11-09 15:53:40,106 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 64656 states to 64656 states and 120388 transitions. [2024-11-09 15:53:40,106 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 48364 [2024-11-09 15:53:40,140 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 48364 [2024-11-09 15:53:40,141 INFO L73 IsDeterministic]: Start isDeterministic. Operand 64656 states and 120388 transitions. [2024-11-09 15:53:40,162 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2024-11-09 15:53:40,162 INFO L218 hiAutomatonCegarLoop]: Abstraction has 64656 states and 120388 transitions. [2024-11-09 15:53:40,200 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 64656 states and 120388 transitions. [2024-11-09 15:53:40,868 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 64656 to 64656. [2024-11-09 15:53:40,925 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 64656 states, 64656 states have (on average 1.8619772333580797) internal successors, (120388), 64655 states have internal predecessors, (120388), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-09 15:53:41,024 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 64656 states to 64656 states and 120388 transitions. [2024-11-09 15:53:41,024 INFO L240 hiAutomatonCegarLoop]: Abstraction has 64656 states and 120388 transitions. [2024-11-09 15:53:41,024 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2024-11-09 15:53:41,026 INFO L425 stractBuchiCegarLoop]: Abstraction has 64656 states and 120388 transitions. [2024-11-09 15:53:41,026 INFO L332 stractBuchiCegarLoop]: ======== Iteration 5 ============ [2024-11-09 15:53:41,026 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 64656 states and 120388 transitions. [2024-11-09 15:53:41,168 INFO L131 ngComponentsAnalysis]: Automaton has 12 accepting balls. 21209 [2024-11-09 15:53:41,168 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-09 15:53:41,168 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-09 15:53:41,172 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-09 15:53:41,172 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-09 15:53:41,172 INFO L745 eck$LassoCheckResult]: Stem: 371613#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 371614#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret28#1, main_~retValue_acc~6#1, main_~tmp~11#1;havoc main_~retValue_acc~6#1;havoc main_~tmp~11#1;assume { :begin_inline_select_helpers } true; 377810#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 377383#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; 373192#valid_product_returnLabel#1 main_#t~ret28#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;assume { :end_inline_valid_product } true;main_~tmp~11#1 := main_#t~ret28#1;havoc main_#t~ret28#1; 373193#L692 assume 0 != main_~tmp~11#1;assume { :begin_inline_setup } true; 373408#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret21#1, bigMacCall_~tmp~8#1;havoc bigMacCall_~tmp~8#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 375153#L241 assume !(0 == getOrigin_~person#1); 377048#L245 assume !(1 == getOrigin_~person#1); 373701#L249 assume !(2 == getOrigin_~person#1); 373702#L253 assume !(3 == getOrigin_~person#1); 376050#L257 assume !(4 == getOrigin_~person#1); 377919#L261 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 376837#getOrigin_returnLabel#1 bigMacCall_#t~ret21#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~8#1 := bigMacCall_#t~ret21#1;havoc bigMacCall_#t~ret21#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~8#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 376838#L1431 assume 0 == initPersonOnFloor_~floor#1; 377619#L1432 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 371013#L1539-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 376690#L1223 assume !(0 == callOnFloor_~floorID#1); 371222#L1226 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 371223#L1235-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 373948#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 372465#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret21#1, bigMacCall_~tmp~8#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 372466#L1160 assume !(0 == isFloorCalling_~floorID#1); 373758#L1164 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 376075#isFloorCalling_returnLabel#1 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 394195#isExecutiveFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret76#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 394136#L2627 assume 0 != stopRequestedAtCurrentFloor_~tmp~22#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 377941#getCurrentFloorID_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret77#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret77#1;havoc stopRequestedAtCurrentFloor_#t~ret77#1; 376840#L2631 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 376594#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret92#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret92#1;havoc timeShift_#t~ret92#1; 393712#L2779 assume !(0 != timeShift_~tmp___9~2#1); 393711#L2870 assume !(1 == ~doorState~0); 393226#L2870-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 391828#L1160-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 374307#isFloorCalling_returnLabel#4 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 373894#isExecutiveFloorCalling_returnLabel#2 stopRequestedInDirection_#t~ret70#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1; 373895#L2510 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 376934#getCurrentFloorID_returnLabel#2 stopRequestedInDirection_#t~ret71#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~19#1 := stopRequestedInDirection_#t~ret71#1;havoc stopRequestedInDirection_#t~ret71#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~19#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 378170#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret99#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret99#1;havoc timeShift_#t~ret99#1; 394502#L2878 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1; 377169#L2567 assume !(1 == ~currentHeading~0); 377170#L2577 assume !(0 == ~currentFloorID~0); 373159#L2577-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 373160#L2583-1 havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 373322#L2887-2 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 377784#L1160-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 377922#isFloorCalling_returnLabel#26 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 374978#isExecutiveFloorCalling_returnLabel#4 __utac_acc__Specification14_spec__1_#t~ret11#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret11#1;havoc __utac_acc__Specification14_spec__1_#t~ret11#1; 374979#L330 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1); 370974#L330-1 havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :end_inline___utac_acc__Specification14_spec__1 } true; 370975#timeShift_returnLabel#1 havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 377745#L1160-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 377746#isFloorCalling_returnLabel#27 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 371456#isExecutiveFloorCalling_returnLabel#5 stopRequestedAtCurrentFloor_#t~ret76#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 371457#L2627-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret74#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret75#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~21#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~21#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 377995#L1160-28 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 371978#isFloorCalling_returnLabel#29 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret74#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret74#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret74#1; 374546#L2600-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1; 373272#stopRequestedAtCurrentFloor__wrappee__empty_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret79#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret74#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret75#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~21#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := stopRequestedAtCurrentFloor_#t~ret79#1;havoc stopRequestedAtCurrentFloor_#t~ret79#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 376110#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret92#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret92#1;havoc timeShift_#t~ret92#1; 374293#L2779-2 assume !(0 != timeShift_~tmp___9~2#1); 374294#L2870-3 assume 1 == ~doorState~0;~doorState~0 := 0; 390830#L2870-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 385013#L1160-29 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 385012#isFloorCalling_returnLabel#30 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 385011#isExecutiveFloorCalling_returnLabel#6 stopRequestedInDirection_#t~ret70#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1; 385010#L2510-2 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 384987#getCurrentFloorID_returnLabel#6 stopRequestedInDirection_#t~ret71#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~19#1 := stopRequestedInDirection_#t~ret71#1;havoc stopRequestedInDirection_#t~ret71#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~19#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 384985#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret99#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret99#1;havoc timeShift_#t~ret99#1; 384983#L2878-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1; 384981#L2567-3 assume !(1 == ~currentHeading~0); 384975#L2577-9 assume !(0 == ~currentFloorID~0); 384973#L2577-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 381910#L2583-7 havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 381909#L2887-5 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 381908#L1160-51 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 378677#isFloorCalling_returnLabel#52 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 381907#isExecutiveFloorCalling_returnLabel#8 __utac_acc__Specification14_spec__1_#t~ret11#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret11#1;havoc __utac_acc__Specification14_spec__1_#t~ret11#1; 381901#L330-2 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1); 381896#L330-3 havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :end_inline___utac_acc__Specification14_spec__1 } true; 381894#timeShift_returnLabel#2 havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 381893#L1160-52 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 378681#isFloorCalling_returnLabel#53 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 381891#isExecutiveFloorCalling_returnLabel#9 stopRequestedAtCurrentFloor_#t~ret76#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 381890#L2627-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret74#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret75#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~21#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~21#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 381883#L1160-54 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 381879#isFloorCalling_returnLabel#55 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret74#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret74#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret74#1; 381877#L2600-5 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1; 381874#stopRequestedAtCurrentFloor__wrappee__empty_returnLabel#6 stopRequestedAtCurrentFloor_#t~ret79#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret74#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret75#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~21#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := stopRequestedAtCurrentFloor_#t~ret79#1;havoc stopRequestedAtCurrentFloor_#t~ret79#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 381871#stopRequestedAtCurrentFloor_returnLabel#3 timeShift_#t~ret92#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret92#1;havoc timeShift_#t~ret92#1; 381869#L2779-4 assume !(0 != timeShift_~tmp___9~2#1); 381867#L2870-6 assume !(1 == ~doorState~0); 381866#L2870-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 381864#L1160-55 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 381861#isFloorCalling_returnLabel#56 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 381858#isExecutiveFloorCalling_returnLabel#10 stopRequestedInDirection_#t~ret70#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1; 381857#L2510-4 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 381822#getCurrentFloorID_returnLabel#10 stopRequestedInDirection_#t~ret71#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~19#1 := stopRequestedInDirection_#t~ret71#1;havoc stopRequestedInDirection_#t~ret71#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~19#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 381821#stopRequestedInDirection_returnLabel#5 timeShift_#t~ret99#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret99#1;havoc timeShift_#t~ret99#1; 381819#L2878-4 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1; 381514#L2567-6 assume !(1 == ~currentHeading~0); 381508#L2577-18 assume !(0 == ~currentFloorID~0); 381504#L2577-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 381501#L2583-13 havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 381498#L2887-8 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 381497#L1160-77 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 378954#isFloorCalling_returnLabel#78 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 381495#isExecutiveFloorCalling_returnLabel#12 __utac_acc__Specification14_spec__1_#t~ret11#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret11#1;havoc __utac_acc__Specification14_spec__1_#t~ret11#1; 381493#L330-4 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1); 381489#L330-5 havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :end_inline___utac_acc__Specification14_spec__1 } true; 381488#timeShift_returnLabel#3 havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true; 381487#threeTS_returnLabel#1 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret16#1, bobCall_~tmp~3#1;havoc bobCall_~tmp~3#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 381476#L241-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 381472#getOrigin_returnLabel#2 bobCall_#t~ret16#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~3#1 := bobCall_#t~ret16#1;havoc bobCall_#t~ret16#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~3#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 379581#L1431-1 assume 0 == initPersonOnFloor_~floor#1; 378863#L1432-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 378764#L1539-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 378720#L1223-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 378710#L1235-5 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 378708#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 378706#bobCall_returnLabel#1 havoc bobCall_#t~ret16#1, bobCall_~tmp~3#1;assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret22#1, cleanup_#t~ret23#1, cleanup_~i~2#1, cleanup_~tmp~9#1, cleanup_~tmp___0~3#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~9#1;havoc cleanup_~tmp___0~3#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 378704#L1160-78 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 378701#isFloorCalling_returnLabel#79 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 378700#isExecutiveFloorCalling_returnLabel#13 stopRequestedAtCurrentFloor_#t~ret76#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 378698#L2627-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~22#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 378697#getCurrentFloorID_returnLabel#13 stopRequestedAtCurrentFloor_#t~ret77#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret77#1;havoc stopRequestedAtCurrentFloor_#t~ret77#1; 378696#L2631-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 371756#stopRequestedAtCurrentFloor_returnLabel#4 timeShift_#t~ret92#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret92#1;havoc timeShift_#t~ret92#1; 378056#L2779-6 assume !(0 != timeShift_~tmp___9~2#1); 376067#L2870-9 assume !(1 == ~doorState~0); 371163#L2870-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 371164#L1160-81 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 371548#isFloorCalling_returnLabel#82 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 376299#isExecutiveFloorCalling_returnLabel#14 stopRequestedInDirection_#t~ret70#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1; 371322#L2510-6 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 371324#getCurrentFloorID_returnLabel#14 stopRequestedInDirection_#t~ret71#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~19#1 := stopRequestedInDirection_#t~ret71#1;havoc stopRequestedInDirection_#t~ret71#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~19#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 397494#stopRequestedInDirection_returnLabel#7 timeShift_#t~ret99#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret99#1;havoc timeShift_#t~ret99#1; 397493#L2878-6 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1; 397492#L2567-9 assume !(1 == ~currentHeading~0); 373206#L2577-27 assume !(0 == ~currentFloorID~0); 373207#L2577-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 375345#L2583-19 havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 370989#L2887-11 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 376753#L1160-103 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 376754#isFloorCalling_returnLabel#104 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 398638#isExecutiveFloorCalling_returnLabel#16 __utac_acc__Specification14_spec__1_#t~ret11#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret11#1;havoc __utac_acc__Specification14_spec__1_#t~ret11#1; 398637#L330-6 assume 0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 398636#getCurrentFloorID_returnLabel#16 __utac_acc__Specification14_spec__1_#t~ret12#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification14_spec__1_~tmp~2#1 := __utac_acc__Specification14_spec__1_#t~ret12#1;havoc __utac_acc__Specification14_spec__1_#t~ret12#1;assume { :begin_inline_isExecutiveFloor } true;isExecutiveFloor_#in~floorID#1 := __utac_acc__Specification14_spec__1_~tmp~2#1;havoc isExecutiveFloor_#res#1;havoc isExecutiveFloor_~floorID#1, isExecutiveFloor_~retValue_acc~29#1;isExecutiveFloor_~floorID#1 := isExecutiveFloor_#in~floorID#1;havoc isExecutiveFloor_~retValue_acc~29#1;isExecutiveFloor_~retValue_acc~29#1 := (if ~executiveFloor~0 == isExecutiveFloor_~floorID#1 then 1 else 0);isExecutiveFloor_#res#1 := isExecutiveFloor_~retValue_acc~29#1; 398635#isExecutiveFloor_returnLabel#4 __utac_acc__Specification14_spec__1_#t~ret13#1 := isExecutiveFloor_#res#1;havoc isExecutiveFloor_~floorID#1, isExecutiveFloor_~retValue_acc~29#1;havoc isExecutiveFloor_#in~floorID#1;assume { :end_inline_isExecutiveFloor } true;__utac_acc__Specification14_spec__1_~tmp___0~2#1 := __utac_acc__Specification14_spec__1_#t~ret13#1;havoc __utac_acc__Specification14_spec__1_#t~ret13#1; 398633#L335-6 assume 0 != __utac_acc__Specification14_spec__1_~tmp___0~2#1; 398631#L330-7 havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :end_inline___utac_acc__Specification14_spec__1 } true; 398630#timeShift_returnLabel#4 havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 398628#L500-2 assume !false; 398629#L501 [2024-11-09 15:53:41,173 INFO L747 eck$LassoCheckResult]: Loop: 398629#L501 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 425163#L504 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 425162#isBlocked_returnLabel#1 cleanup_#t~ret22#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~3#1 := cleanup_#t~ret22#1;havoc cleanup_#t~ret22#1; 425161#L508 assume 1 != cleanup_~tmp___0~3#1; 425160#L508-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret58#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~17#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~17#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret53#1, anyStopRequested_#t~ret54#1, anyStopRequested_#t~ret55#1, anyStopRequested_#t~ret56#1, anyStopRequested_#t~ret57#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~16#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~16#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 425159#L1160-104 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 425158#isFloorCalling_returnLabel#105 anyStopRequested_#t~ret53#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret53#1;havoc anyStopRequested_#t~ret53#1; 425157#L2066 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 425156#anyStopRequested_returnLabel#1 isIdle_#t~ret58#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret53#1, anyStopRequested_#t~ret54#1, anyStopRequested_#t~ret55#1, anyStopRequested_#t~ret56#1, anyStopRequested_#t~ret57#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~16#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~17#1 := isIdle_#t~ret58#1;havoc isIdle_#t~ret58#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~17#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 425155#isIdle_returnLabel#1 cleanup_#t~ret23#1 := isIdle_#res#1;havoc isIdle_#t~ret58#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~17#1;assume { :end_inline_isIdle } true;cleanup_~tmp~9#1 := cleanup_#t~ret23#1;havoc cleanup_#t~ret23#1; 425154#L520 assume !(0 != cleanup_~tmp~9#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 425153#L1160-109 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 416467#isFloorCalling_returnLabel#110 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 425152#isExecutiveFloorCalling_returnLabel#17 stopRequestedAtCurrentFloor_#t~ret76#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 425150#L2627-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret74#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret75#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~21#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~21#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 425142#L1160-111 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 425132#isFloorCalling_returnLabel#112 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret74#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret74#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret74#1; 425127#L2600-9 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1; 425123#stopRequestedAtCurrentFloor__wrappee__empty_returnLabel#10 stopRequestedAtCurrentFloor_#t~ret79#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret74#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret75#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~21#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := stopRequestedAtCurrentFloor_#t~ret79#1;havoc stopRequestedAtCurrentFloor_#t~ret79#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 425121#stopRequestedAtCurrentFloor_returnLabel#5 timeShift_#t~ret92#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret92#1;havoc timeShift_#t~ret92#1; 425119#L2779-8 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 425120#L2781-8 assume !(0 != ~persons_0~0); 427416#L2781-9 assume !(0 != ~persons_1~0); 427410#L2795-4 assume !(0 != ~persons_2~0); 427390#L2809-4 assume !(0 != ~persons_3~0); 427387#L2823-4 assume !(0 != ~persons_4~0); 427382#L2837-4 assume !(0 != ~persons_5~0); 427378#L2851-4 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret80#1, processWaitingOnFloor_#t~ret81#1, processWaitingOnFloor_#t~ret82#1, processWaitingOnFloor_#t~ret83#1, processWaitingOnFloor_#t~ret84#1, processWaitingOnFloor_#t~ret85#1, processWaitingOnFloor_#t~ret86#1, processWaitingOnFloor_#t~ret87#1, processWaitingOnFloor_#t~ret88#1, processWaitingOnFloor_#t~ret89#1, processWaitingOnFloor_#t~ret90#1, processWaitingOnFloor_#t~ret91#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~23#1, processWaitingOnFloor_~tmp___0~10#1, processWaitingOnFloor_~tmp___1~6#1, processWaitingOnFloor_~tmp___2~4#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~23#1;havoc processWaitingOnFloor_~tmp___0~10#1;havoc processWaitingOnFloor_~tmp___1~6#1;havoc processWaitingOnFloor_~tmp___2~4#1;havoc processWaitingOnFloor_~tmp___3~2#1;havoc processWaitingOnFloor_~tmp___4~1#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~11#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~11#1; 427377#L1251-48 assume 0 == isPersonOnFloor_~floor#1; 427367#L1252-24 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~11#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~11#1; 427335#isPersonOnFloor_returnLabel#25 processWaitingOnFloor_#t~ret80#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~11#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~10#1 := processWaitingOnFloor_#t~ret80#1;havoc processWaitingOnFloor_#t~ret80#1; 427333#L2681-12 assume !(0 != processWaitingOnFloor_~tmp___0~10#1); 427331#L2681-14 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~11#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~11#1; 427330#L1251-50 assume 0 == isPersonOnFloor_~floor#1; 427309#L1252-25 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~11#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~11#1; 427294#isPersonOnFloor_returnLabel#26 processWaitingOnFloor_#t~ret82#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~11#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~4#1 := processWaitingOnFloor_#t~ret82#1;havoc processWaitingOnFloor_#t~ret82#1; 427285#L2694-12 assume !(0 != processWaitingOnFloor_~tmp___2~4#1); 427284#L2694-14 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~11#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~11#1; 427283#L1251-52 assume 0 == isPersonOnFloor_~floor#1; 427253#L1252-26 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~11#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~11#1; 427241#isPersonOnFloor_returnLabel#27 processWaitingOnFloor_#t~ret84#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~11#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~1#1 := processWaitingOnFloor_#t~ret84#1;havoc processWaitingOnFloor_#t~ret84#1; 427239#L2707-12 assume !(0 != processWaitingOnFloor_~tmp___4~1#1); 427237#L2707-14 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~11#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~11#1; 427236#L1251-54 assume 0 == isPersonOnFloor_~floor#1; 427226#L1252-27 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~11#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~11#1; 427194#isPersonOnFloor_returnLabel#28 processWaitingOnFloor_#t~ret86#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~11#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret86#1;havoc processWaitingOnFloor_#t~ret86#1; 427192#L2720-12 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 427189#L2720-14 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~11#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~11#1; 427188#L1251-56 assume 0 == isPersonOnFloor_~floor#1; 425584#L1252-28 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~11#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~11#1; 425568#isPersonOnFloor_returnLabel#29 processWaitingOnFloor_#t~ret88#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~11#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret88#1;havoc processWaitingOnFloor_#t~ret88#1; 425562#L2733-12 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 425560#L2733-14 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~11#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~11#1; 425558#L1251-58 assume 0 == isPersonOnFloor_~floor#1; 425504#L1252-29 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~11#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~11#1; 425497#isPersonOnFloor_returnLabel#30 processWaitingOnFloor_#t~ret90#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~11#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret90#1;havoc processWaitingOnFloor_#t~ret90#1; 425493#L2746-12 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 425491#L2746-14 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 425488#L1195-68 assume !(0 == resetCallOnFloor_~floorID#1); 425229#L1198-68 assume 1 == resetCallOnFloor_~floorID#1;~calls_1~0 := 0; 425225#L1207-104 havoc resetCallOnFloor_~floorID#1;havoc resetCallOnFloor_#in~floorID#1;assume { :end_inline_resetCallOnFloor } true; 425224#processWaitingOnFloor_returnLabel#5 havoc processWaitingOnFloor_#t~ret80#1, processWaitingOnFloor_#t~ret81#1, processWaitingOnFloor_#t~ret82#1, processWaitingOnFloor_#t~ret83#1, processWaitingOnFloor_#t~ret84#1, processWaitingOnFloor_#t~ret85#1, processWaitingOnFloor_#t~ret86#1, processWaitingOnFloor_#t~ret87#1, processWaitingOnFloor_#t~ret88#1, processWaitingOnFloor_#t~ret89#1, processWaitingOnFloor_#t~ret90#1, processWaitingOnFloor_#t~ret91#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~23#1, processWaitingOnFloor_~tmp___0~10#1, processWaitingOnFloor_~tmp___1~6#1, processWaitingOnFloor_~tmp___2~4#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;havoc processWaitingOnFloor_#in~floorID#1;assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 425033#L1929-8 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 425029#L1941-14 havoc resetFloorButton_~floorID#1;havoc resetFloorButton_#in~floorID#1;assume { :end_inline_resetFloorButton } true; 425009#L2887-14 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 425010#L1160-134 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 416631#isFloorCalling_returnLabel#135 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 425007#isExecutiveFloorCalling_returnLabel#20 __utac_acc__Specification14_spec__1_#t~ret11#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret11#1;havoc __utac_acc__Specification14_spec__1_#t~ret11#1; 425003#L330-8 assume 0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 425004#getCurrentFloorID_returnLabel#20 __utac_acc__Specification14_spec__1_#t~ret12#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification14_spec__1_~tmp~2#1 := __utac_acc__Specification14_spec__1_#t~ret12#1;havoc __utac_acc__Specification14_spec__1_#t~ret12#1;assume { :begin_inline_isExecutiveFloor } true;isExecutiveFloor_#in~floorID#1 := __utac_acc__Specification14_spec__1_~tmp~2#1;havoc isExecutiveFloor_#res#1;havoc isExecutiveFloor_~floorID#1, isExecutiveFloor_~retValue_acc~29#1;isExecutiveFloor_~floorID#1 := isExecutiveFloor_#in~floorID#1;havoc isExecutiveFloor_~retValue_acc~29#1;isExecutiveFloor_~retValue_acc~29#1 := (if ~executiveFloor~0 == isExecutiveFloor_~floorID#1 then 1 else 0);isExecutiveFloor_#res#1 := isExecutiveFloor_~retValue_acc~29#1; 424999#isExecutiveFloor_returnLabel#5 __utac_acc__Specification14_spec__1_#t~ret13#1 := isExecutiveFloor_#res#1;havoc isExecutiveFloor_~floorID#1, isExecutiveFloor_~retValue_acc~29#1;havoc isExecutiveFloor_#in~floorID#1;assume { :end_inline_isExecutiveFloor } true;__utac_acc__Specification14_spec__1_~tmp___0~2#1 := __utac_acc__Specification14_spec__1_#t~ret13#1;havoc __utac_acc__Specification14_spec__1_#t~ret13#1; 425000#L335-8 assume 0 != __utac_acc__Specification14_spec__1_~tmp___0~2#1; 425165#L330-9 havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :end_inline___utac_acc__Specification14_spec__1 } true; 424994#timeShift_returnLabel#5 havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 425164#L500-2 assume !false; 398629#L501 [2024-11-09 15:53:41,173 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-09 15:53:41,174 INFO L85 PathProgramCache]: Analyzing trace with hash 102036758, now seen corresponding path program 1 times [2024-11-09 15:53:41,174 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-09 15:53:41,174 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1637981727] [2024-11-09 15:53:41,174 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-09 15:53:41,174 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-09 15:53:41,199 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-09 15:53:41,540 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-09 15:53:41,541 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-09 15:53:41,542 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1637981727] [2024-11-09 15:53:41,542 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1637981727] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-09 15:53:41,542 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-09 15:53:41,542 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2024-11-09 15:53:41,542 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [429011711] [2024-11-09 15:53:41,542 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-09 15:53:41,543 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-09 15:53:41,543 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-09 15:53:41,543 INFO L85 PathProgramCache]: Analyzing trace with hash 1412500321, now seen corresponding path program 1 times [2024-11-09 15:53:41,543 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-09 15:53:41,543 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [573616821] [2024-11-09 15:53:41,543 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-09 15:53:41,544 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-09 15:53:41,556 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-09 15:53:41,616 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-09 15:53:41,616 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-09 15:53:41,616 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [573616821] [2024-11-09 15:53:41,616 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [573616821] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-09 15:53:41,616 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-09 15:53:41,616 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2024-11-09 15:53:41,617 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [272075060] [2024-11-09 15:53:41,617 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-09 15:53:41,617 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-09 15:53:41,617 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-09 15:53:41,617 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2024-11-09 15:53:41,617 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=43, Unknown=0, NotChecked=0, Total=56 [2024-11-09 15:53:41,617 INFO L87 Difference]: Start difference. First operand 64656 states and 120388 transitions. cyclomatic complexity: 55750 Second operand has 8 states, 8 states have (on average 9.375) internal successors, (75), 8 states have internal predecessors, (75), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-09 15:53:44,079 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-09 15:53:44,079 INFO L93 Difference]: Finished difference Result 65571 states and 121082 transitions. [2024-11-09 15:53:44,079 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 65571 states and 121082 transitions. [2024-11-09 15:53:44,282 INFO L131 ngComponentsAnalysis]: Automaton has 12 accepting balls. 21498 [2024-11-09 15:53:44,602 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 65571 states to 65571 states and 121082 transitions. [2024-11-09 15:53:44,603 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 49035 [2024-11-09 15:53:44,644 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 49035 [2024-11-09 15:53:44,644 INFO L73 IsDeterministic]: Start isDeterministic. Operand 65571 states and 121082 transitions. [2024-11-09 15:53:44,662 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2024-11-09 15:53:44,662 INFO L218 hiAutomatonCegarLoop]: Abstraction has 65571 states and 121082 transitions. [2024-11-09 15:53:44,704 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 65571 states and 121082 transitions. [2024-11-09 15:53:45,519 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 65571 to 64401. [2024-11-09 15:53:45,607 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 64401 states, 64401 states have (on average 1.8619586652381175) internal successors, (119912), 64400 states have internal predecessors, (119912), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-09 15:53:45,710 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 64401 states to 64401 states and 119912 transitions. [2024-11-09 15:53:45,710 INFO L240 hiAutomatonCegarLoop]: Abstraction has 64401 states and 119912 transitions. [2024-11-09 15:53:45,711 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2024-11-09 15:53:45,711 INFO L425 stractBuchiCegarLoop]: Abstraction has 64401 states and 119912 transitions. [2024-11-09 15:53:45,711 INFO L332 stractBuchiCegarLoop]: ======== Iteration 6 ============ [2024-11-09 15:53:45,711 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 64401 states and 119912 transitions. [2024-11-09 15:53:45,843 INFO L131 ngComponentsAnalysis]: Automaton has 12 accepting balls. 21119 [2024-11-09 15:53:45,844 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-09 15:53:45,844 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-09 15:53:45,847 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-09 15:53:45,847 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-09 15:53:45,847 INFO L745 eck$LassoCheckResult]: Stem: 501860#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 501861#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret28#1, main_~retValue_acc~6#1, main_~tmp~11#1;havoc main_~retValue_acc~6#1;havoc main_~tmp~11#1;assume { :begin_inline_select_helpers } true; 508168#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 507725#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; 503440#valid_product_returnLabel#1 main_#t~ret28#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;assume { :end_inline_valid_product } true;main_~tmp~11#1 := main_#t~ret28#1;havoc main_#t~ret28#1; 503441#L692 assume 0 != main_~tmp~11#1;assume { :begin_inline_setup } true; 503661#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret21#1, bigMacCall_~tmp~8#1;havoc bigMacCall_~tmp~8#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 505402#L241 assume !(0 == getOrigin_~person#1); 507373#L245 assume !(1 == getOrigin_~person#1); 503953#L249 assume !(2 == getOrigin_~person#1); 503954#L253 assume !(3 == getOrigin_~person#1); 506343#L257 assume !(4 == getOrigin_~person#1); 508284#L261 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 507156#getOrigin_returnLabel#1 bigMacCall_#t~ret21#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~8#1 := bigMacCall_#t~ret21#1;havoc bigMacCall_#t~ret21#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~8#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 507157#L1431 assume 0 == initPersonOnFloor_~floor#1; 507976#L1432 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 501263#L1539-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 507003#L1223 assume !(0 == callOnFloor_~floorID#1); 501472#L1226 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 501473#L1235-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 509948#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 509947#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret21#1, bigMacCall_~tmp~8#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 509946#L1160 assume !(0 == isFloorCalling_~floorID#1); 509945#L1164 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 509940#isFloorCalling_returnLabel#1 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 509935#isExecutiveFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret76#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 509932#L2627 assume 0 != stopRequestedAtCurrentFloor_~tmp~22#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 509928#getCurrentFloorID_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret77#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret77#1;havoc stopRequestedAtCurrentFloor_#t~ret77#1; 509926#L2631 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 509923#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret92#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret92#1;havoc timeShift_#t~ret92#1; 509921#L2779 assume !(0 != timeShift_~tmp___9~2#1); 509920#L2870 assume !(1 == ~doorState~0); 509919#L2870-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 509918#L1160-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 504559#isFloorCalling_returnLabel#4 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 504146#isExecutiveFloorCalling_returnLabel#2 stopRequestedInDirection_#t~ret70#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1; 504147#L2510 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 507254#getCurrentFloorID_returnLabel#2 stopRequestedInDirection_#t~ret71#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~19#1 := stopRequestedInDirection_#t~ret71#1;havoc stopRequestedInDirection_#t~ret71#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~19#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 508535#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret99#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret99#1;havoc timeShift_#t~ret99#1; 521550#L2878 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1; 507497#L2567 assume !(1 == ~currentHeading~0); 507498#L2577 assume !(0 == ~currentFloorID~0); 503406#L2577-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 503407#L2583-1 havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 503571#L2887-2 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 508145#L1160-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 508287#isFloorCalling_returnLabel#26 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 505230#isExecutiveFloorCalling_returnLabel#4 __utac_acc__Specification14_spec__1_#t~ret11#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret11#1;havoc __utac_acc__Specification14_spec__1_#t~ret11#1; 505231#L330 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1); 501224#L330-1 havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :end_inline___utac_acc__Specification14_spec__1 } true; 501225#timeShift_returnLabel#1 havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 508105#L1160-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 508106#isFloorCalling_returnLabel#27 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 501704#isExecutiveFloorCalling_returnLabel#5 stopRequestedAtCurrentFloor_#t~ret76#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 501705#L2627-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret74#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret75#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~21#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~21#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 508360#L1160-28 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 502225#isFloorCalling_returnLabel#29 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret74#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret74#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret74#1; 504793#L2600-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1; 503521#stopRequestedAtCurrentFloor__wrappee__empty_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret79#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret74#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret75#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~21#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := stopRequestedAtCurrentFloor_#t~ret79#1;havoc stopRequestedAtCurrentFloor_#t~ret79#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 506402#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret92#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret92#1;havoc timeShift_#t~ret92#1; 504545#L2779-2 assume !(0 != timeShift_~tmp___9~2#1); 504546#L2870-3 assume 1 == ~doorState~0;~doorState~0 := 0; 507185#L2870-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 507186#L1160-29 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 502716#isFloorCalling_returnLabel#30 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 502166#isExecutiveFloorCalling_returnLabel#6 stopRequestedInDirection_#t~ret70#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1; 502167#L2510-2 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 504333#getCurrentFloorID_returnLabel#6 stopRequestedInDirection_#t~ret71#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~19#1 := stopRequestedInDirection_#t~ret71#1;havoc stopRequestedInDirection_#t~ret71#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~19#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 504334#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret99#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret99#1;havoc timeShift_#t~ret99#1; 504056#L2878-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1; 504058#L2567-3 assume !(1 == ~currentHeading~0); 526311#L2577-9 assume !(0 == ~currentFloorID~0); 503584#L2577-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 506321#L2583-7 havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 506322#L2887-5 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 523089#L1160-51 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 509089#isFloorCalling_returnLabel#52 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 523088#isExecutiveFloorCalling_returnLabel#8 __utac_acc__Specification14_spec__1_#t~ret11#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret11#1;havoc __utac_acc__Specification14_spec__1_#t~ret11#1; 523082#L330-2 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1); 523081#L330-3 havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :end_inline___utac_acc__Specification14_spec__1 } true; 523076#timeShift_returnLabel#2 havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 523075#L1160-52 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 509093#isFloorCalling_returnLabel#53 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 523074#isExecutiveFloorCalling_returnLabel#9 stopRequestedAtCurrentFloor_#t~ret76#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 523073#L2627-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret74#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret75#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~21#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~21#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 523070#L1160-54 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 519570#isFloorCalling_returnLabel#55 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret74#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret74#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret74#1; 519567#L2600-5 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1; 519565#stopRequestedAtCurrentFloor__wrappee__empty_returnLabel#6 stopRequestedAtCurrentFloor_#t~ret79#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret74#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret75#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~21#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := stopRequestedAtCurrentFloor_#t~ret79#1;havoc stopRequestedAtCurrentFloor_#t~ret79#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 519564#stopRequestedAtCurrentFloor_returnLabel#3 timeShift_#t~ret92#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret92#1;havoc timeShift_#t~ret92#1; 519556#L2779-4 assume !(0 != timeShift_~tmp___9~2#1); 519557#L2870-6 assume !(1 == ~doorState~0); 525115#L2870-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 502624#L1160-55 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 502625#isFloorCalling_returnLabel#56 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 515390#isExecutiveFloorCalling_returnLabel#10 stopRequestedInDirection_#t~ret70#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1; 515391#L2510-4 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 509052#getCurrentFloorID_returnLabel#10 stopRequestedInDirection_#t~ret71#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~19#1 := stopRequestedInDirection_#t~ret71#1;havoc stopRequestedInDirection_#t~ret71#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~19#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 506317#stopRequestedInDirection_returnLabel#5 timeShift_#t~ret99#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret99#1;havoc timeShift_#t~ret99#1; 506318#L2878-4 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1; 502717#L2567-6 assume !(1 == ~currentHeading~0); 502718#L2577-18 assume !(0 == ~currentFloorID~0); 501886#L2577-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 505509#L2583-13 havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 504584#L2887-8 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 509361#L1160-77 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 509360#isFloorCalling_returnLabel#78 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 509355#isExecutiveFloorCalling_returnLabel#12 __utac_acc__Specification14_spec__1_#t~ret11#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret11#1;havoc __utac_acc__Specification14_spec__1_#t~ret11#1; 509352#L330-4 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1); 509347#L330-5 havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :end_inline___utac_acc__Specification14_spec__1 } true; 509341#timeShift_returnLabel#3 havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true; 509339#threeTS_returnLabel#1 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret16#1, bobCall_~tmp~3#1;havoc bobCall_~tmp~3#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 509323#L241-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 509320#getOrigin_returnLabel#2 bobCall_#t~ret16#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~3#1 := bobCall_#t~ret16#1;havoc bobCall_#t~ret16#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~3#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 509319#L1431-1 assume 0 == initPersonOnFloor_~floor#1; 509196#L1432-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 509132#L1539-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 509122#L1223-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 509117#L1235-5 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 509115#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 509113#bobCall_returnLabel#1 havoc bobCall_#t~ret16#1, bobCall_~tmp~3#1;assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret22#1, cleanup_#t~ret23#1, cleanup_~i~2#1, cleanup_~tmp~9#1, cleanup_~tmp___0~3#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~9#1;havoc cleanup_~tmp___0~3#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 509110#L1160-78 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 509109#isFloorCalling_returnLabel#79 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 509108#isExecutiveFloorCalling_returnLabel#13 stopRequestedAtCurrentFloor_#t~ret76#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 509107#L2627-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~22#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 509106#getCurrentFloorID_returnLabel#13 stopRequestedAtCurrentFloor_#t~ret77#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret77#1;havoc stopRequestedAtCurrentFloor_#t~ret77#1; 509105#L2631-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 503892#stopRequestedAtCurrentFloor_returnLabel#4 timeShift_#t~ret92#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret92#1;havoc timeShift_#t~ret92#1; 527719#L2779-6 assume !(0 != timeShift_~tmp___9~2#1); 527718#L2870-9 assume !(1 == ~doorState~0); 527717#L2870-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 527716#L1160-81 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 527715#isFloorCalling_returnLabel#82 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 527714#isExecutiveFloorCalling_returnLabel#14 stopRequestedInDirection_#t~ret70#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1; 527712#L2510-6 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 506595#getCurrentFloorID_returnLabel#14 stopRequestedInDirection_#t~ret71#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~19#1 := stopRequestedInDirection_#t~ret71#1;havoc stopRequestedInDirection_#t~ret71#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~19#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 506596#stopRequestedInDirection_returnLabel#7 timeShift_#t~ret99#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret99#1;havoc timeShift_#t~ret99#1; 506127#L2878-6 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1; 506128#L2567-9 assume !(1 == ~currentHeading~0); 503453#L2577-27 assume !(0 == ~currentFloorID~0); 503454#L2577-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 505600#L2583-19 havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 501239#L2887-11 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 527637#L1160-103 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 526655#isFloorCalling_returnLabel#104 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 526656#isExecutiveFloorCalling_returnLabel#16 __utac_acc__Specification14_spec__1_#t~ret11#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret11#1;havoc __utac_acc__Specification14_spec__1_#t~ret11#1; 501686#L330-6 assume 0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 501687#getCurrentFloorID_returnLabel#16 __utac_acc__Specification14_spec__1_#t~ret12#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification14_spec__1_~tmp~2#1 := __utac_acc__Specification14_spec__1_#t~ret12#1;havoc __utac_acc__Specification14_spec__1_#t~ret12#1;assume { :begin_inline_isExecutiveFloor } true;isExecutiveFloor_#in~floorID#1 := __utac_acc__Specification14_spec__1_~tmp~2#1;havoc isExecutiveFloor_#res#1;havoc isExecutiveFloor_~floorID#1, isExecutiveFloor_~retValue_acc~29#1;isExecutiveFloor_~floorID#1 := isExecutiveFloor_#in~floorID#1;havoc isExecutiveFloor_~retValue_acc~29#1;isExecutiveFloor_~retValue_acc~29#1 := (if ~executiveFloor~0 == isExecutiveFloor_~floorID#1 then 1 else 0);isExecutiveFloor_#res#1 := isExecutiveFloor_~retValue_acc~29#1; 537864#isExecutiveFloor_returnLabel#4 __utac_acc__Specification14_spec__1_#t~ret13#1 := isExecutiveFloor_#res#1;havoc isExecutiveFloor_~floorID#1, isExecutiveFloor_~retValue_acc~29#1;havoc isExecutiveFloor_#in~floorID#1;assume { :end_inline_isExecutiveFloor } true;__utac_acc__Specification14_spec__1_~tmp___0~2#1 := __utac_acc__Specification14_spec__1_#t~ret13#1;havoc __utac_acc__Specification14_spec__1_#t~ret13#1; 537862#L335-6 assume 0 != __utac_acc__Specification14_spec__1_~tmp___0~2#1; 537860#L330-7 havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :end_inline___utac_acc__Specification14_spec__1 } true; 537859#timeShift_returnLabel#4 havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 537856#L500-2 assume !false; 537857#L501 [2024-11-09 15:53:45,848 INFO L747 eck$LassoCheckResult]: Loop: 537857#L501 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 555288#L504 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 555287#isBlocked_returnLabel#1 cleanup_#t~ret22#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~3#1 := cleanup_#t~ret22#1;havoc cleanup_#t~ret22#1; 555286#L508 assume 1 != cleanup_~tmp___0~3#1; 555285#L508-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret58#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~17#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~17#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret53#1, anyStopRequested_#t~ret54#1, anyStopRequested_#t~ret55#1, anyStopRequested_#t~ret56#1, anyStopRequested_#t~ret57#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~16#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~16#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 555284#L1160-104 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 555283#isFloorCalling_returnLabel#105 anyStopRequested_#t~ret53#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret53#1;havoc anyStopRequested_#t~ret53#1; 555282#L2066 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 555281#anyStopRequested_returnLabel#1 isIdle_#t~ret58#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret53#1, anyStopRequested_#t~ret54#1, anyStopRequested_#t~ret55#1, anyStopRequested_#t~ret56#1, anyStopRequested_#t~ret57#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~16#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~17#1 := isIdle_#t~ret58#1;havoc isIdle_#t~ret58#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~17#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 555280#isIdle_returnLabel#1 cleanup_#t~ret23#1 := isIdle_#res#1;havoc isIdle_#t~ret58#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~17#1;assume { :end_inline_isIdle } true;cleanup_~tmp~9#1 := cleanup_#t~ret23#1;havoc cleanup_#t~ret23#1; 555279#L520 assume !(0 != cleanup_~tmp~9#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 555278#L1160-109 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 550959#isFloorCalling_returnLabel#110 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 555277#isExecutiveFloorCalling_returnLabel#17 stopRequestedAtCurrentFloor_#t~ret76#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 555275#L2627-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~22#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 555272#getCurrentFloorID_returnLabel#17 stopRequestedAtCurrentFloor_#t~ret77#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret77#1;havoc stopRequestedAtCurrentFloor_#t~ret77#1; 555267#L2631-4 assume ~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret74#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret75#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~21#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~21#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 555262#L1160-110 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 555255#isFloorCalling_returnLabel#111 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret74#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret74#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret74#1; 555245#L2600-8 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1; 555242#stopRequestedAtCurrentFloor__wrappee__empty_returnLabel#9 stopRequestedAtCurrentFloor_#t~ret78#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret74#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret75#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~21#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := stopRequestedAtCurrentFloor_#t~ret78#1;havoc stopRequestedAtCurrentFloor_#t~ret78#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 555239#stopRequestedAtCurrentFloor_returnLabel#5 timeShift_#t~ret92#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret92#1;havoc timeShift_#t~ret92#1; 555236#L2779-8 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 555237#L2781-8 assume !(0 != ~persons_0~0); 559153#L2781-9 assume !(0 != ~persons_1~0); 559147#L2795-4 assume !(0 != ~persons_2~0); 559127#L2809-4 assume !(0 != ~persons_3~0); 559124#L2823-4 assume !(0 != ~persons_4~0); 559119#L2837-4 assume !(0 != ~persons_5~0); 559115#L2851-4 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret80#1, processWaitingOnFloor_#t~ret81#1, processWaitingOnFloor_#t~ret82#1, processWaitingOnFloor_#t~ret83#1, processWaitingOnFloor_#t~ret84#1, processWaitingOnFloor_#t~ret85#1, processWaitingOnFloor_#t~ret86#1, processWaitingOnFloor_#t~ret87#1, processWaitingOnFloor_#t~ret88#1, processWaitingOnFloor_#t~ret89#1, processWaitingOnFloor_#t~ret90#1, processWaitingOnFloor_#t~ret91#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~23#1, processWaitingOnFloor_~tmp___0~10#1, processWaitingOnFloor_~tmp___1~6#1, processWaitingOnFloor_~tmp___2~4#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~23#1;havoc processWaitingOnFloor_~tmp___0~10#1;havoc processWaitingOnFloor_~tmp___1~6#1;havoc processWaitingOnFloor_~tmp___2~4#1;havoc processWaitingOnFloor_~tmp___3~2#1;havoc processWaitingOnFloor_~tmp___4~1#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~11#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~11#1; 559113#L1251-48 assume 0 == isPersonOnFloor_~floor#1; 559103#L1252-24 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~11#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~11#1; 559071#isPersonOnFloor_returnLabel#25 processWaitingOnFloor_#t~ret80#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~11#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~10#1 := processWaitingOnFloor_#t~ret80#1;havoc processWaitingOnFloor_#t~ret80#1; 559069#L2681-12 assume !(0 != processWaitingOnFloor_~tmp___0~10#1); 559067#L2681-14 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~11#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~11#1; 559066#L1251-50 assume 0 == isPersonOnFloor_~floor#1; 559045#L1252-25 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~11#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~11#1; 559030#isPersonOnFloor_returnLabel#26 processWaitingOnFloor_#t~ret82#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~11#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~4#1 := processWaitingOnFloor_#t~ret82#1;havoc processWaitingOnFloor_#t~ret82#1; 559021#L2694-12 assume !(0 != processWaitingOnFloor_~tmp___2~4#1); 559020#L2694-14 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~11#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~11#1; 559019#L1251-52 assume 0 == isPersonOnFloor_~floor#1; 558989#L1252-26 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~11#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~11#1; 558977#isPersonOnFloor_returnLabel#27 processWaitingOnFloor_#t~ret84#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~11#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~1#1 := processWaitingOnFloor_#t~ret84#1;havoc processWaitingOnFloor_#t~ret84#1; 558975#L2707-12 assume !(0 != processWaitingOnFloor_~tmp___4~1#1); 558973#L2707-14 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~11#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~11#1; 558971#L1251-54 assume 0 == isPersonOnFloor_~floor#1; 558953#L1252-27 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~11#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~11#1; 558926#isPersonOnFloor_returnLabel#28 processWaitingOnFloor_#t~ret86#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~11#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret86#1;havoc processWaitingOnFloor_#t~ret86#1; 558918#L2720-12 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 558916#L2720-14 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~11#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~11#1; 558915#L1251-56 assume 0 == isPersonOnFloor_~floor#1; 558707#L1252-28 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~11#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~11#1; 558690#isPersonOnFloor_returnLabel#29 processWaitingOnFloor_#t~ret88#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~11#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret88#1;havoc processWaitingOnFloor_#t~ret88#1; 558651#L2733-12 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 558650#L2733-14 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~11#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~11#1; 558649#L1251-58 assume 0 == isPersonOnFloor_~floor#1; 558603#L1252-29 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~11#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~11#1; 558595#isPersonOnFloor_returnLabel#30 processWaitingOnFloor_#t~ret90#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~11#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret90#1;havoc processWaitingOnFloor_#t~ret90#1; 558502#L2746-12 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 558495#L2746-14 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 558490#L1195-68 assume !(0 == resetCallOnFloor_~floorID#1); 558484#L1198-68 assume 1 == resetCallOnFloor_~floorID#1;~calls_1~0 := 0; 558478#L1207-104 havoc resetCallOnFloor_~floorID#1;havoc resetCallOnFloor_#in~floorID#1;assume { :end_inline_resetCallOnFloor } true; 558474#processWaitingOnFloor_returnLabel#5 havoc processWaitingOnFloor_#t~ret80#1, processWaitingOnFloor_#t~ret81#1, processWaitingOnFloor_#t~ret82#1, processWaitingOnFloor_#t~ret83#1, processWaitingOnFloor_#t~ret84#1, processWaitingOnFloor_#t~ret85#1, processWaitingOnFloor_#t~ret86#1, processWaitingOnFloor_#t~ret87#1, processWaitingOnFloor_#t~ret88#1, processWaitingOnFloor_#t~ret89#1, processWaitingOnFloor_#t~ret90#1, processWaitingOnFloor_#t~ret91#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~23#1, processWaitingOnFloor_~tmp___0~10#1, processWaitingOnFloor_~tmp___1~6#1, processWaitingOnFloor_~tmp___2~4#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;havoc processWaitingOnFloor_#in~floorID#1;assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 555189#L1929-8 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 555185#L1941-14 havoc resetFloorButton_~floorID#1;havoc resetFloorButton_#in~floorID#1;assume { :end_inline_resetFloorButton } true; 555165#L2887-14 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 555166#L1160-134 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 551334#isFloorCalling_returnLabel#135 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 555163#isExecutiveFloorCalling_returnLabel#20 __utac_acc__Specification14_spec__1_#t~ret11#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret11#1;havoc __utac_acc__Specification14_spec__1_#t~ret11#1; 555159#L330-8 assume 0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 555160#getCurrentFloorID_returnLabel#20 __utac_acc__Specification14_spec__1_#t~ret12#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification14_spec__1_~tmp~2#1 := __utac_acc__Specification14_spec__1_#t~ret12#1;havoc __utac_acc__Specification14_spec__1_#t~ret12#1;assume { :begin_inline_isExecutiveFloor } true;isExecutiveFloor_#in~floorID#1 := __utac_acc__Specification14_spec__1_~tmp~2#1;havoc isExecutiveFloor_#res#1;havoc isExecutiveFloor_~floorID#1, isExecutiveFloor_~retValue_acc~29#1;isExecutiveFloor_~floorID#1 := isExecutiveFloor_#in~floorID#1;havoc isExecutiveFloor_~retValue_acc~29#1;isExecutiveFloor_~retValue_acc~29#1 := (if ~executiveFloor~0 == isExecutiveFloor_~floorID#1 then 1 else 0);isExecutiveFloor_#res#1 := isExecutiveFloor_~retValue_acc~29#1; 555155#isExecutiveFloor_returnLabel#5 __utac_acc__Specification14_spec__1_#t~ret13#1 := isExecutiveFloor_#res#1;havoc isExecutiveFloor_~floorID#1, isExecutiveFloor_~retValue_acc~29#1;havoc isExecutiveFloor_#in~floorID#1;assume { :end_inline_isExecutiveFloor } true;__utac_acc__Specification14_spec__1_~tmp___0~2#1 := __utac_acc__Specification14_spec__1_#t~ret13#1;havoc __utac_acc__Specification14_spec__1_#t~ret13#1; 555156#L335-8 assume 0 != __utac_acc__Specification14_spec__1_~tmp___0~2#1; 555290#L330-9 havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :end_inline___utac_acc__Specification14_spec__1 } true; 555148#timeShift_returnLabel#5 havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 555289#L500-2 assume !false; 537857#L501 [2024-11-09 15:53:45,848 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-09 15:53:45,848 INFO L85 PathProgramCache]: Analyzing trace with hash 102036758, now seen corresponding path program 2 times [2024-11-09 15:53:45,849 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-09 15:53:45,849 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1590481581] [2024-11-09 15:53:45,849 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-09 15:53:45,849 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-09 15:53:45,872 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-09 15:53:45,981 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-09 15:53:45,981 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-09 15:53:45,981 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1590481581] [2024-11-09 15:53:45,981 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1590481581] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-09 15:53:45,981 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-09 15:53:45,981 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2024-11-09 15:53:45,981 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [189944707] [2024-11-09 15:53:45,981 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-09 15:53:45,982 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-09 15:53:45,982 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-09 15:53:45,982 INFO L85 PathProgramCache]: Analyzing trace with hash -165430407, now seen corresponding path program 1 times [2024-11-09 15:53:45,982 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-09 15:53:45,982 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [764264733] [2024-11-09 15:53:45,982 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-09 15:53:45,982 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-09 15:53:45,996 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-09 15:53:46,039 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-09 15:53:46,039 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-09 15:53:46,039 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [764264733] [2024-11-09 15:53:46,039 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [764264733] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-09 15:53:46,039 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-09 15:53:46,039 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2024-11-09 15:53:46,039 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [149853859] [2024-11-09 15:53:46,039 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-09 15:53:46,040 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-09 15:53:46,040 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-09 15:53:46,040 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2024-11-09 15:53:46,040 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2024-11-09 15:53:46,041 INFO L87 Difference]: Start difference. First operand 64401 states and 119912 transitions. cyclomatic complexity: 55529 Second operand has 6 states, 6 states have (on average 12.833333333333334) internal successors, (77), 6 states have internal predecessors, (77), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-09 15:53:49,628 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-09 15:53:49,628 INFO L93 Difference]: Finished difference Result 65130 states and 119216 transitions. [2024-11-09 15:53:49,628 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 65130 states and 119216 transitions. [2024-11-09 15:53:50,050 INFO L131 ngComponentsAnalysis]: Automaton has 12 accepting balls. 21363 [2024-11-09 15:53:50,190 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 65130 states to 65130 states and 119216 transitions. [2024-11-09 15:53:50,190 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 48718 [2024-11-09 15:53:50,218 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 48718 [2024-11-09 15:53:50,218 INFO L73 IsDeterministic]: Start isDeterministic. Operand 65130 states and 119216 transitions. [2024-11-09 15:53:50,244 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2024-11-09 15:53:50,248 INFO L218 hiAutomatonCegarLoop]: Abstraction has 65130 states and 119216 transitions. [2024-11-09 15:53:50,287 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 65130 states and 119216 transitions. [2024-11-09 15:53:50,927 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 65130 to 64560. [2024-11-09 15:53:50,980 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 64560 states, 64560 states have (on average 1.8377633209417596) internal successors, (118646), 64559 states have internal predecessors, (118646), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-09 15:53:51,106 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 64560 states to 64560 states and 118646 transitions. [2024-11-09 15:53:51,106 INFO L240 hiAutomatonCegarLoop]: Abstraction has 64560 states and 118646 transitions. [2024-11-09 15:53:51,107 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2024-11-09 15:53:51,108 INFO L425 stractBuchiCegarLoop]: Abstraction has 64560 states and 118646 transitions. [2024-11-09 15:53:51,108 INFO L332 stractBuchiCegarLoop]: ======== Iteration 7 ============ [2024-11-09 15:53:51,108 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 64560 states and 118646 transitions. [2024-11-09 15:53:51,299 INFO L131 ngComponentsAnalysis]: Automaton has 12 accepting balls. 21173 [2024-11-09 15:53:51,300 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-09 15:53:51,300 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-09 15:53:51,307 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-09 15:53:51,310 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-09 15:53:51,311 INFO L745 eck$LassoCheckResult]: Stem: 631407#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 631408#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret28#1, main_~retValue_acc~6#1, main_~tmp~11#1;havoc main_~retValue_acc~6#1;havoc main_~tmp~11#1;assume { :begin_inline_select_helpers } true; 637669#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 637226#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; 632990#valid_product_returnLabel#1 main_#t~ret28#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;assume { :end_inline_valid_product } true;main_~tmp~11#1 := main_#t~ret28#1;havoc main_#t~ret28#1; 632991#L692 assume 0 != main_~tmp~11#1;assume { :begin_inline_setup } true; 633207#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret21#1, bigMacCall_~tmp~8#1;havoc bigMacCall_~tmp~8#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 634949#L241 assume !(0 == getOrigin_~person#1); 636890#L245 assume !(1 == getOrigin_~person#1); 633498#L249 assume !(2 == getOrigin_~person#1); 633499#L253 assume !(3 == getOrigin_~person#1); 635865#L257 assume !(4 == getOrigin_~person#1); 637787#L261 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 636674#getOrigin_returnLabel#1 bigMacCall_#t~ret21#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~8#1 := bigMacCall_#t~ret21#1;havoc bigMacCall_#t~ret21#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~8#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 636675#L1431 assume 0 == initPersonOnFloor_~floor#1; 637479#L1432 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 630806#L1539-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 636526#L1223 assume !(0 == callOnFloor_~floorID#1); 631016#L1226 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 631017#L1235-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 633745#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 632259#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret21#1, bigMacCall_~tmp~8#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 632260#L1160 assume !(0 == isFloorCalling_~floorID#1); 633555#L1164 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 635890#isFloorCalling_returnLabel#1 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 647629#isExecutiveFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret76#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 644277#L2627 assume 0 != stopRequestedAtCurrentFloor_~tmp~22#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 644278#getCurrentFloorID_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret77#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret77#1;havoc stopRequestedAtCurrentFloor_#t~ret77#1; 643261#L2631 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 643262#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret92#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret92#1;havoc timeShift_#t~ret92#1; 643323#L2779 assume !(0 != timeShift_~tmp___9~2#1); 643322#L2870 assume !(1 == ~doorState~0); 643321#L2870-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 643320#L1160-3 assume !(0 == isFloorCalling_~floorID#1); 636324#L1164-3 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 636325#isFloorCalling_returnLabel#4 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 638653#isExecutiveFloorCalling_returnLabel#2 stopRequestedInDirection_#t~ret70#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1; 638649#L2510 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 638650#getCurrentFloorID_returnLabel#2 stopRequestedInDirection_#t~ret71#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~19#1 := stopRequestedInDirection_#t~ret71#1;havoc stopRequestedInDirection_#t~ret71#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~19#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 641590#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret99#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret99#1;havoc timeShift_#t~ret99#1; 641588#L2878 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1; 641589#L2567 assume !(1 == ~currentHeading~0); 641854#L2577 assume !(0 == ~currentFloorID~0); 641824#L2577-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 641483#L2583-1 havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 641481#L2887-2 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 641478#L1160-25 assume !(0 == isFloorCalling_~floorID#1); 636493#L1164-25 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 636494#isFloorCalling_returnLabel#26 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 642354#isExecutiveFloorCalling_returnLabel#4 __utac_acc__Specification14_spec__1_#t~ret11#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret11#1;havoc __utac_acc__Specification14_spec__1_#t~ret11#1; 642314#L330 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1); 642036#L330-1 havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :end_inline___utac_acc__Specification14_spec__1 } true; 639243#timeShift_returnLabel#1 havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 638566#L1160-26 assume !(0 == isFloorCalling_~floorID#1); 638567#L1164-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 640371#isFloorCalling_returnLabel#27 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 640365#isExecutiveFloorCalling_returnLabel#5 stopRequestedAtCurrentFloor_#t~ret76#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 640363#L2627-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~22#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 640360#getCurrentFloorID_returnLabel#5 stopRequestedAtCurrentFloor_#t~ret77#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret77#1;havoc stopRequestedAtCurrentFloor_#t~ret77#1; 640312#L2631-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 640309#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret92#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret92#1;havoc timeShift_#t~ret92#1; 640307#L2779-2 assume !(0 != timeShift_~tmp___9~2#1); 640306#L2870-3 assume 1 == ~doorState~0;~doorState~0 := 0; 640305#L2870-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 640304#L1160-29 assume !(0 == isFloorCalling_~floorID#1); 640302#L1164-29 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 640299#isFloorCalling_returnLabel#30 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 640297#isExecutiveFloorCalling_returnLabel#6 stopRequestedInDirection_#t~ret70#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1; 640294#L2510-2 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 640295#getCurrentFloorID_returnLabel#6 stopRequestedInDirection_#t~ret71#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~19#1 := stopRequestedInDirection_#t~ret71#1;havoc stopRequestedInDirection_#t~ret71#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~19#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 641142#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret99#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret99#1;havoc timeShift_#t~ret99#1; 641139#L2878-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1; 641140#L2567-3 assume !(1 == ~currentHeading~0); 641328#L2577-9 assume !(0 == ~currentFloorID~0); 641323#L2577-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 639104#L2583-7 havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 639103#L2887-5 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 639102#L1160-51 assume !(0 == isFloorCalling_~floorID#1); 639101#L1164-51 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 639097#isFloorCalling_returnLabel#52 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 639096#isExecutiveFloorCalling_returnLabel#8 __utac_acc__Specification14_spec__1_#t~ret11#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret11#1;havoc __utac_acc__Specification14_spec__1_#t~ret11#1; 639076#L330-2 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1); 639075#L330-3 havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :end_inline___utac_acc__Specification14_spec__1 } true; 639074#timeShift_returnLabel#2 havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 638575#L1160-52 assume !(0 == isFloorCalling_~floorID#1); 635259#L1164-52 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 632892#isFloorCalling_returnLabel#53 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 650742#isExecutiveFloorCalling_returnLabel#9 stopRequestedAtCurrentFloor_#t~ret76#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 650743#L2627-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~22#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 634363#getCurrentFloorID_returnLabel#9 stopRequestedAtCurrentFloor_#t~ret77#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret77#1;havoc stopRequestedAtCurrentFloor_#t~ret77#1; 634364#L2631-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 635902#stopRequestedAtCurrentFloor_returnLabel#3 timeShift_#t~ret92#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret92#1;havoc timeShift_#t~ret92#1; 647080#L2779-4 assume !(0 != timeShift_~tmp___9~2#1); 646918#L2870-6 assume !(1 == ~doorState~0); 643263#L2870-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 638660#L1160-55 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 632172#isFloorCalling_returnLabel#56 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 644267#isExecutiveFloorCalling_returnLabel#10 stopRequestedInDirection_#t~ret70#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1; 644266#L2510-4 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 644107#getCurrentFloorID_returnLabel#10 stopRequestedInDirection_#t~ret71#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~19#1 := stopRequestedInDirection_#t~ret71#1;havoc stopRequestedInDirection_#t~ret71#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~19#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 644105#stopRequestedInDirection_returnLabel#5 timeShift_#t~ret99#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret99#1;havoc timeShift_#t~ret99#1; 644102#L2878-4 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1; 644100#L2567-6 assume !(1 == ~currentHeading~0); 644095#L2577-18 assume !(0 == ~currentFloorID~0); 643805#L2577-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 635055#L2583-13 havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 634123#L2887-8 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 638849#L1160-77 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 638848#isFloorCalling_returnLabel#78 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 638843#isExecutiveFloorCalling_returnLabel#12 __utac_acc__Specification14_spec__1_#t~ret11#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret11#1;havoc __utac_acc__Specification14_spec__1_#t~ret11#1; 638840#L330-4 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1); 638835#L330-5 havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :end_inline___utac_acc__Specification14_spec__1 } true; 638829#timeShift_returnLabel#3 havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true; 638827#threeTS_returnLabel#1 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret16#1, bobCall_~tmp~3#1;havoc bobCall_~tmp~3#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 638811#L241-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 638808#getOrigin_returnLabel#2 bobCall_#t~ret16#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~3#1 := bobCall_#t~ret16#1;havoc bobCall_#t~ret16#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~3#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 638807#L1431-1 assume 0 == initPersonOnFloor_~floor#1; 638685#L1432-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 638617#L1539-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 638607#L1223-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 638602#L1235-5 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 638600#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 638598#bobCall_returnLabel#1 havoc bobCall_#t~ret16#1, bobCall_~tmp~3#1;assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret22#1, cleanup_#t~ret23#1, cleanup_~i~2#1, cleanup_~tmp~9#1, cleanup_~tmp___0~3#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~9#1;havoc cleanup_~tmp___0~3#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 638596#L1160-78 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 638595#isFloorCalling_returnLabel#79 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 638594#isExecutiveFloorCalling_returnLabel#13 stopRequestedAtCurrentFloor_#t~ret76#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 638593#L2627-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~22#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 638592#getCurrentFloorID_returnLabel#13 stopRequestedAtCurrentFloor_#t~ret77#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret77#1;havoc stopRequestedAtCurrentFloor_#t~ret77#1; 638591#L2631-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 633438#stopRequestedAtCurrentFloor_returnLabel#4 timeShift_#t~ret92#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret92#1;havoc timeShift_#t~ret92#1; 650660#L2779-6 assume !(0 != timeShift_~tmp___9~2#1); 650658#L2870-9 assume !(1 == ~doorState~0); 650657#L2870-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 650656#L1160-81 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 650654#isFloorCalling_returnLabel#82 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 650650#isExecutiveFloorCalling_returnLabel#14 stopRequestedInDirection_#t~ret70#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1; 650651#L2510-6 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 636119#getCurrentFloorID_returnLabel#14 stopRequestedInDirection_#t~ret71#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~19#1 := stopRequestedInDirection_#t~ret71#1;havoc stopRequestedInDirection_#t~ret71#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~19#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 635589#stopRequestedInDirection_returnLabel#7 timeShift_#t~ret99#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret99#1;havoc timeShift_#t~ret99#1; 635590#L2878-6 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1; 635652#L2567-9 assume !(1 == ~currentHeading~0); 656294#L2577-27 assume !(0 == ~currentFloorID~0); 638561#L2577-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 638562#L2583-19 havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 656291#L2887-11 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 659783#L1160-103 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 638655#isFloorCalling_returnLabel#104 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 659782#isExecutiveFloorCalling_returnLabel#16 __utac_acc__Specification14_spec__1_#t~ret11#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret11#1;havoc __utac_acc__Specification14_spec__1_#t~ret11#1; 659781#L330-6 assume 0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 659780#getCurrentFloorID_returnLabel#16 __utac_acc__Specification14_spec__1_#t~ret12#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification14_spec__1_~tmp~2#1 := __utac_acc__Specification14_spec__1_#t~ret12#1;havoc __utac_acc__Specification14_spec__1_#t~ret12#1;assume { :begin_inline_isExecutiveFloor } true;isExecutiveFloor_#in~floorID#1 := __utac_acc__Specification14_spec__1_~tmp~2#1;havoc isExecutiveFloor_#res#1;havoc isExecutiveFloor_~floorID#1, isExecutiveFloor_~retValue_acc~29#1;isExecutiveFloor_~floorID#1 := isExecutiveFloor_#in~floorID#1;havoc isExecutiveFloor_~retValue_acc~29#1;isExecutiveFloor_~retValue_acc~29#1 := (if ~executiveFloor~0 == isExecutiveFloor_~floorID#1 then 1 else 0);isExecutiveFloor_#res#1 := isExecutiveFloor_~retValue_acc~29#1; 659779#isExecutiveFloor_returnLabel#4 __utac_acc__Specification14_spec__1_#t~ret13#1 := isExecutiveFloor_#res#1;havoc isExecutiveFloor_~floorID#1, isExecutiveFloor_~retValue_acc~29#1;havoc isExecutiveFloor_#in~floorID#1;assume { :end_inline_isExecutiveFloor } true;__utac_acc__Specification14_spec__1_~tmp___0~2#1 := __utac_acc__Specification14_spec__1_#t~ret13#1;havoc __utac_acc__Specification14_spec__1_#t~ret13#1; 659777#L335-6 assume 0 != __utac_acc__Specification14_spec__1_~tmp___0~2#1; 659773#L330-7 havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :end_inline___utac_acc__Specification14_spec__1 } true; 659770#timeShift_returnLabel#4 havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 659768#L500-2 assume !false; 659769#L501 [2024-11-09 15:53:51,311 INFO L747 eck$LassoCheckResult]: Loop: 659769#L501 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 676159#L504 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 676158#isBlocked_returnLabel#1 cleanup_#t~ret22#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~3#1 := cleanup_#t~ret22#1;havoc cleanup_#t~ret22#1; 676157#L508 assume 1 != cleanup_~tmp___0~3#1; 676151#L508-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret58#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~17#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~17#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret53#1, anyStopRequested_#t~ret54#1, anyStopRequested_#t~ret55#1, anyStopRequested_#t~ret56#1, anyStopRequested_#t~ret57#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~16#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~16#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 676149#L1160-104 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 676142#isFloorCalling_returnLabel#105 anyStopRequested_#t~ret53#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret53#1;havoc anyStopRequested_#t~ret53#1; 676141#L2066 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 676139#anyStopRequested_returnLabel#1 isIdle_#t~ret58#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret53#1, anyStopRequested_#t~ret54#1, anyStopRequested_#t~ret55#1, anyStopRequested_#t~ret56#1, anyStopRequested_#t~ret57#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~16#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~17#1 := isIdle_#t~ret58#1;havoc isIdle_#t~ret58#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~17#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 676135#isIdle_returnLabel#1 cleanup_#t~ret23#1 := isIdle_#res#1;havoc isIdle_#t~ret58#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~17#1;assume { :end_inline_isIdle } true;cleanup_~tmp~9#1 := cleanup_#t~ret23#1;havoc cleanup_#t~ret23#1; 676133#L520 assume !(0 != cleanup_~tmp~9#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 676130#L1160-109 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 676128#isFloorCalling_returnLabel#110 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 676123#isExecutiveFloorCalling_returnLabel#17 stopRequestedAtCurrentFloor_#t~ret76#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 676121#L2627-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~22#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 676119#getCurrentFloorID_returnLabel#17 stopRequestedAtCurrentFloor_#t~ret77#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret77#1;havoc stopRequestedAtCurrentFloor_#t~ret77#1; 676060#L2631-4 assume ~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret74#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret75#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~21#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~21#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 676061#L1160-110 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 678130#isFloorCalling_returnLabel#111 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret74#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret74#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret74#1; 678129#L2600-8 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1; 678122#stopRequestedAtCurrentFloor__wrappee__empty_returnLabel#9 stopRequestedAtCurrentFloor_#t~ret78#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret74#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret75#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~21#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := stopRequestedAtCurrentFloor_#t~ret78#1;havoc stopRequestedAtCurrentFloor_#t~ret78#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 680835#stopRequestedAtCurrentFloor_returnLabel#5 timeShift_#t~ret92#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret92#1;havoc timeShift_#t~ret92#1; 680834#L2779-8 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 678117#L2781-8 assume !(0 != ~persons_0~0); 680802#L2781-9 assume !(0 != ~persons_1~0); 680796#L2795-4 assume !(0 != ~persons_2~0); 680776#L2809-4 assume !(0 != ~persons_3~0); 680773#L2823-4 assume !(0 != ~persons_4~0); 680768#L2837-4 assume !(0 != ~persons_5~0); 680764#L2851-4 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret80#1, processWaitingOnFloor_#t~ret81#1, processWaitingOnFloor_#t~ret82#1, processWaitingOnFloor_#t~ret83#1, processWaitingOnFloor_#t~ret84#1, processWaitingOnFloor_#t~ret85#1, processWaitingOnFloor_#t~ret86#1, processWaitingOnFloor_#t~ret87#1, processWaitingOnFloor_#t~ret88#1, processWaitingOnFloor_#t~ret89#1, processWaitingOnFloor_#t~ret90#1, processWaitingOnFloor_#t~ret91#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~23#1, processWaitingOnFloor_~tmp___0~10#1, processWaitingOnFloor_~tmp___1~6#1, processWaitingOnFloor_~tmp___2~4#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~23#1;havoc processWaitingOnFloor_~tmp___0~10#1;havoc processWaitingOnFloor_~tmp___1~6#1;havoc processWaitingOnFloor_~tmp___2~4#1;havoc processWaitingOnFloor_~tmp___3~2#1;havoc processWaitingOnFloor_~tmp___4~1#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~11#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~11#1; 680763#L1251-48 assume 0 == isPersonOnFloor_~floor#1; 680753#L1252-24 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~11#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~11#1; 680721#isPersonOnFloor_returnLabel#25 processWaitingOnFloor_#t~ret80#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~11#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~10#1 := processWaitingOnFloor_#t~ret80#1;havoc processWaitingOnFloor_#t~ret80#1; 680719#L2681-12 assume !(0 != processWaitingOnFloor_~tmp___0~10#1); 680717#L2681-14 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~11#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~11#1; 680715#L1251-50 assume 0 == isPersonOnFloor_~floor#1; 680716#L1252-25 assume !(0 == isPersonOnFloor_~person#1); 680693#L1256-25 assume 1 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~11#1 := ~personOnFloor_1_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~11#1; 680680#isPersonOnFloor_returnLabel#26 processWaitingOnFloor_#t~ret82#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~11#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~4#1 := processWaitingOnFloor_#t~ret82#1;havoc processWaitingOnFloor_#t~ret82#1; 680671#L2694-12 assume !(0 != processWaitingOnFloor_~tmp___2~4#1); 680670#L2694-14 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~11#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~11#1; 680668#L1251-52 assume 0 == isPersonOnFloor_~floor#1; 680669#L1252-26 assume !(0 == isPersonOnFloor_~person#1); 680639#L1256-26 assume 1 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~11#1 := ~personOnFloor_1_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~11#1; 680627#isPersonOnFloor_returnLabel#27 processWaitingOnFloor_#t~ret84#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~11#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~1#1 := processWaitingOnFloor_#t~ret84#1;havoc processWaitingOnFloor_#t~ret84#1; 680625#L2707-12 assume !(0 != processWaitingOnFloor_~tmp___4~1#1); 680623#L2707-14 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~11#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~11#1; 680622#L1251-54 assume 0 == isPersonOnFloor_~floor#1; 680619#L1252-27 assume !(0 == isPersonOnFloor_~person#1); 680613#L1256-27 assume 1 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~11#1 := ~personOnFloor_1_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~11#1; 680583#isPersonOnFloor_returnLabel#28 processWaitingOnFloor_#t~ret86#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~11#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret86#1;havoc processWaitingOnFloor_#t~ret86#1; 680581#L2720-12 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 680579#L2720-14 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~11#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~11#1; 680577#L1251-56 assume 0 == isPersonOnFloor_~floor#1; 680578#L1252-28 assume !(0 == isPersonOnFloor_~person#1); 679852#L1256-28 assume 1 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~11#1 := ~personOnFloor_1_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~11#1; 677180#isPersonOnFloor_returnLabel#29 processWaitingOnFloor_#t~ret88#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~11#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret88#1;havoc processWaitingOnFloor_#t~ret88#1; 677177#L2733-12 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 677176#L2733-14 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~11#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~11#1; 677174#L1251-58 assume 0 == isPersonOnFloor_~floor#1; 677175#L1252-29 assume !(0 == isPersonOnFloor_~person#1); 677112#L1256-29 assume 1 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~11#1 := ~personOnFloor_1_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~11#1; 676293#isPersonOnFloor_returnLabel#30 processWaitingOnFloor_#t~ret90#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~11#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret90#1;havoc processWaitingOnFloor_#t~ret90#1; 676291#L2746-12 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 676289#L2746-14 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 676287#L1195-68 assume !(0 == resetCallOnFloor_~floorID#1); 676230#L1198-68 assume 1 == resetCallOnFloor_~floorID#1;~calls_1~0 := 0; 676226#L1207-104 havoc resetCallOnFloor_~floorID#1;havoc resetCallOnFloor_#in~floorID#1;assume { :end_inline_resetCallOnFloor } true; 676223#processWaitingOnFloor_returnLabel#5 havoc processWaitingOnFloor_#t~ret80#1, processWaitingOnFloor_#t~ret81#1, processWaitingOnFloor_#t~ret82#1, processWaitingOnFloor_#t~ret83#1, processWaitingOnFloor_#t~ret84#1, processWaitingOnFloor_#t~ret85#1, processWaitingOnFloor_#t~ret86#1, processWaitingOnFloor_#t~ret87#1, processWaitingOnFloor_#t~ret88#1, processWaitingOnFloor_#t~ret89#1, processWaitingOnFloor_#t~ret90#1, processWaitingOnFloor_#t~ret91#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~23#1, processWaitingOnFloor_~tmp___0~10#1, processWaitingOnFloor_~tmp___1~6#1, processWaitingOnFloor_~tmp___2~4#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;havoc processWaitingOnFloor_#in~floorID#1;assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 676221#L1929-8 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 674888#L1941-14 havoc resetFloorButton_~floorID#1;havoc resetFloorButton_#in~floorID#1;assume { :end_inline_resetFloorButton } true; 674884#L2887-14 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 674881#L1160-134 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 674880#isFloorCalling_returnLabel#135 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 674879#isExecutiveFloorCalling_returnLabel#20 __utac_acc__Specification14_spec__1_#t~ret11#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret11#1;havoc __utac_acc__Specification14_spec__1_#t~ret11#1; 674878#L330-8 assume 0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 674877#getCurrentFloorID_returnLabel#20 __utac_acc__Specification14_spec__1_#t~ret12#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification14_spec__1_~tmp~2#1 := __utac_acc__Specification14_spec__1_#t~ret12#1;havoc __utac_acc__Specification14_spec__1_#t~ret12#1;assume { :begin_inline_isExecutiveFloor } true;isExecutiveFloor_#in~floorID#1 := __utac_acc__Specification14_spec__1_~tmp~2#1;havoc isExecutiveFloor_#res#1;havoc isExecutiveFloor_~floorID#1, isExecutiveFloor_~retValue_acc~29#1;isExecutiveFloor_~floorID#1 := isExecutiveFloor_#in~floorID#1;havoc isExecutiveFloor_~retValue_acc~29#1;isExecutiveFloor_~retValue_acc~29#1 := (if ~executiveFloor~0 == isExecutiveFloor_~floorID#1 then 1 else 0);isExecutiveFloor_#res#1 := isExecutiveFloor_~retValue_acc~29#1; 674876#isExecutiveFloor_returnLabel#5 __utac_acc__Specification14_spec__1_#t~ret13#1 := isExecutiveFloor_#res#1;havoc isExecutiveFloor_~floorID#1, isExecutiveFloor_~retValue_acc~29#1;havoc isExecutiveFloor_#in~floorID#1;assume { :end_inline_isExecutiveFloor } true;__utac_acc__Specification14_spec__1_~tmp___0~2#1 := __utac_acc__Specification14_spec__1_#t~ret13#1;havoc __utac_acc__Specification14_spec__1_#t~ret13#1; 674873#L335-8 assume 0 != __utac_acc__Specification14_spec__1_~tmp___0~2#1; 674874#L330-9 havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :end_inline___utac_acc__Specification14_spec__1 } true; 674869#timeShift_returnLabel#5 havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 676160#L500-2 assume !false; 659769#L501 [2024-11-09 15:53:51,312 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-09 15:53:51,313 INFO L85 PathProgramCache]: Analyzing trace with hash -1544056063, now seen corresponding path program 1 times [2024-11-09 15:53:51,313 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-09 15:53:51,313 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [972301442] [2024-11-09 15:53:51,313 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-09 15:53:51,313 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-09 15:53:51,370 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-09 15:53:51,670 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-09 15:53:51,673 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-09 15:53:51,673 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [972301442] [2024-11-09 15:53:51,673 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [972301442] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-09 15:53:51,673 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-09 15:53:51,673 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2024-11-09 15:53:51,674 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [495241444] [2024-11-09 15:53:51,674 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-09 15:53:51,674 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-09 15:53:51,674 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-09 15:53:51,674 INFO L85 PathProgramCache]: Analyzing trace with hash 1960021465, now seen corresponding path program 1 times [2024-11-09 15:53:51,674 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-09 15:53:51,675 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1195142057] [2024-11-09 15:53:51,675 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-09 15:53:51,675 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-09 15:53:51,710 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-09 15:53:51,767 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-09 15:53:51,768 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-09 15:53:51,768 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1195142057] [2024-11-09 15:53:51,768 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1195142057] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-09 15:53:51,768 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-09 15:53:51,768 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-09 15:53:51,768 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [104849009] [2024-11-09 15:53:51,772 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-09 15:53:51,772 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-09 15:53:51,773 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-09 15:53:51,773 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-11-09 15:53:51,773 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-11-09 15:53:51,773 INFO L87 Difference]: Start difference. First operand 64560 states and 118646 transitions. cyclomatic complexity: 54104 Second operand has 3 states, 3 states have (on average 27.333333333333332) internal successors, (82), 3 states have internal predecessors, (82), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-09 15:53:53,871 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-09 15:53:53,871 INFO L93 Difference]: Finished difference Result 63762 states and 116423 transitions. [2024-11-09 15:53:53,871 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 63762 states and 116423 transitions. [2024-11-09 15:53:54,064 INFO L131 ngComponentsAnalysis]: Automaton has 12 accepting balls. 20907 [2024-11-09 15:53:54,317 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 63762 states to 63762 states and 116423 transitions. [2024-11-09 15:53:54,317 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 47686 [2024-11-09 15:53:54,357 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 47686 [2024-11-09 15:53:54,358 INFO L73 IsDeterministic]: Start isDeterministic. Operand 63762 states and 116423 transitions. [2024-11-09 15:53:54,370 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2024-11-09 15:53:54,370 INFO L218 hiAutomatonCegarLoop]: Abstraction has 63762 states and 116423 transitions. [2024-11-09 15:53:54,409 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 63762 states and 116423 transitions. [2024-11-09 15:53:55,075 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 63762 to 63705. [2024-11-09 15:53:55,131 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 63705 states, 63705 states have (on average 1.8266384114276744) internal successors, (116366), 63704 states have internal predecessors, (116366), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-09 15:53:55,230 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 63705 states to 63705 states and 116366 transitions. [2024-11-09 15:53:55,230 INFO L240 hiAutomatonCegarLoop]: Abstraction has 63705 states and 116366 transitions. [2024-11-09 15:53:55,231 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2024-11-09 15:53:55,232 INFO L425 stractBuchiCegarLoop]: Abstraction has 63705 states and 116366 transitions. [2024-11-09 15:53:55,232 INFO L332 stractBuchiCegarLoop]: ======== Iteration 8 ============ [2024-11-09 15:53:55,232 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 63705 states and 116366 transitions. [2024-11-09 15:53:55,376 INFO L131 ngComponentsAnalysis]: Automaton has 12 accepting balls. 20888 [2024-11-09 15:53:55,376 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-09 15:53:55,376 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-09 15:53:55,383 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-09 15:53:55,384 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-09 15:53:55,385 INFO L745 eck$LassoCheckResult]: Stem: 759722#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 759723#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret28#1, main_~retValue_acc~6#1, main_~tmp~11#1;havoc main_~retValue_acc~6#1;havoc main_~tmp~11#1;assume { :begin_inline_select_helpers } true; 765890#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 765445#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; 761282#valid_product_returnLabel#1 main_#t~ret28#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;assume { :end_inline_valid_product } true;main_~tmp~11#1 := main_#t~ret28#1;havoc main_#t~ret28#1; 761283#L692 assume 0 != main_~tmp~11#1;assume { :begin_inline_setup } true; 761497#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret21#1, bigMacCall_~tmp~8#1;havoc bigMacCall_~tmp~8#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 763220#L241 assume !(0 == getOrigin_~person#1); 765115#L245 assume !(1 == getOrigin_~person#1); 761787#L249 assume !(2 == getOrigin_~person#1); 761788#L253 assume !(3 == getOrigin_~person#1); 764112#L257 assume !(4 == getOrigin_~person#1); 766003#L261 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 764899#getOrigin_returnLabel#1 bigMacCall_#t~ret21#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~8#1 := bigMacCall_#t~ret21#1;havoc bigMacCall_#t~ret21#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~8#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 764900#L1431 assume 0 == initPersonOnFloor_~floor#1; 765700#L1432 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 759132#L1539-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 764753#L1223 assume !(0 == callOnFloor_~floorID#1); 759337#L1226 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 759338#L1235-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 762033#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 760564#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret21#1, bigMacCall_~tmp~8#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 760565#L1160 assume !(0 == isFloorCalling_~floorID#1); 761844#L1164 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 764138#isFloorCalling_returnLabel#1 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 773276#isExecutiveFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret76#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 772188#L2627 assume 0 != stopRequestedAtCurrentFloor_~tmp~22#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 766030#getCurrentFloorID_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret77#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret77#1;havoc stopRequestedAtCurrentFloor_#t~ret77#1; 764902#L2631 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 764904#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret92#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret92#1;havoc timeShift_#t~ret92#1; 771347#L2779 assume !(0 != timeShift_~tmp___9~2#1); 771344#L2870 assume !(1 == ~doorState~0); 771334#L2870-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 767851#L1160-3 assume !(0 == isFloorCalling_~floorID#1); 764558#L1164-3 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 764559#isFloorCalling_returnLabel#4 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 768054#isExecutiveFloorCalling_returnLabel#2 stopRequestedInDirection_#t~ret70#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1; 768050#L2510 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 768051#getCurrentFloorID_returnLabel#2 stopRequestedInDirection_#t~ret71#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~19#1 := stopRequestedInDirection_#t~ret71#1;havoc stopRequestedInDirection_#t~ret71#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~19#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 769285#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret99#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret99#1;havoc timeShift_#t~ret99#1; 769282#L2878 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1; 769279#L2567 assume !(1 == ~currentHeading~0); 769274#L2577 assume !(0 == ~currentFloorID~0); 769273#L2577-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 769252#L2583-1 havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 769243#L2887-2 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 769169#L1160-25 assume !(0 == isFloorCalling_~floorID#1); 764722#L1164-25 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 764723#isFloorCalling_returnLabel#26 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 766925#isExecutiveFloorCalling_returnLabel#4 __utac_acc__Specification14_spec__1_#t~ret11#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret11#1;havoc __utac_acc__Specification14_spec__1_#t~ret11#1; 766910#L330 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1); 766906#L330-1 havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :end_inline___utac_acc__Specification14_spec__1 } true; 766904#timeShift_returnLabel#1 havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 766807#L1160-26 assume !(0 == isFloorCalling_~floorID#1); 761373#L1164-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 761374#isFloorCalling_returnLabel#27 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 772489#isExecutiveFloorCalling_returnLabel#5 stopRequestedAtCurrentFloor_#t~ret76#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 772490#L2627-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~22#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 762241#getCurrentFloorID_returnLabel#5 stopRequestedAtCurrentFloor_#t~ret77#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret77#1;havoc stopRequestedAtCurrentFloor_#t~ret77#1; 762242#L2631-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 762722#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret92#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret92#1;havoc timeShift_#t~ret92#1; 779991#L2779-2 assume !(0 != timeShift_~tmp___9~2#1); 779992#L2870-3 assume 1 == ~doorState~0;~doorState~0 := 0; 779987#L2870-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 779988#L1160-29 assume !(0 == isFloorCalling_~floorID#1); 765031#L1164-29 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 759212#isFloorCalling_returnLabel#30 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 768034#isExecutiveFloorCalling_returnLabel#6 stopRequestedInDirection_#t~ret70#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1; 768032#L2510-2 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 768033#getCurrentFloorID_returnLabel#6 stopRequestedInDirection_#t~ret71#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~19#1 := stopRequestedInDirection_#t~ret71#1;havoc stopRequestedInDirection_#t~ret71#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~19#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 773084#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret99#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret99#1;havoc timeShift_#t~ret99#1; 773079#L2878-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1; 773073#L2567-3 assume !(1 == ~currentHeading~0); 773065#L2577-9 assume !(0 == ~currentFloorID~0); 773059#L2577-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 771389#L2583-7 havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 767417#L2887-5 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 766812#L1160-51 assume !(0 == isFloorCalling_~floorID#1); 765590#L1164-51 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 761022#isFloorCalling_returnLabel#52 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 768080#isExecutiveFloorCalling_returnLabel#8 __utac_acc__Specification14_spec__1_#t~ret11#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret11#1;havoc __utac_acc__Specification14_spec__1_#t~ret11#1; 768074#L330-2 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1); 768068#L330-3 havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :end_inline___utac_acc__Specification14_spec__1 } true; 768066#timeShift_returnLabel#2 havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 766817#L1160-52 assume !(0 == isFloorCalling_~floorID#1); 763525#L1164-52 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 761184#isFloorCalling_returnLabel#53 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 773311#isExecutiveFloorCalling_returnLabel#9 stopRequestedAtCurrentFloor_#t~ret76#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 773308#L2627-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~22#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 773306#getCurrentFloorID_returnLabel#9 stopRequestedAtCurrentFloor_#t~ret77#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret77#1;havoc stopRequestedAtCurrentFloor_#t~ret77#1; 772189#L2631-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 772190#stopRequestedAtCurrentFloor_returnLabel#3 timeShift_#t~ret92#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret92#1;havoc timeShift_#t~ret92#1; 772907#L2779-4 assume !(0 != timeShift_~tmp___9~2#1); 772903#L2870-6 assume !(1 == ~doorState~0); 772901#L2870-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 772899#L1160-55 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 772900#isFloorCalling_returnLabel#56 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 778394#isExecutiveFloorCalling_returnLabel#10 stopRequestedInDirection_#t~ret70#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1; 778391#L2510-4 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 778392#getCurrentFloorID_returnLabel#10 stopRequestedInDirection_#t~ret71#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~19#1 := stopRequestedInDirection_#t~ret71#1;havoc stopRequestedInDirection_#t~ret71#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~19#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 778328#stopRequestedInDirection_returnLabel#5 timeShift_#t~ret99#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret99#1;havoc timeShift_#t~ret99#1; 778111#L2878-4 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1; 778064#L2567-6 assume !(1 == ~currentHeading~0); 778049#L2577-18 assume !(0 == ~currentFloorID~0); 778039#L2577-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 778032#L2583-13 havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 778030#L2887-8 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 778025#L1160-77 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 777350#isFloorCalling_returnLabel#78 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 778024#isExecutiveFloorCalling_returnLabel#12 __utac_acc__Specification14_spec__1_#t~ret11#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret11#1;havoc __utac_acc__Specification14_spec__1_#t~ret11#1; 778017#L330-4 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1); 778013#L330-5 havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :end_inline___utac_acc__Specification14_spec__1 } true; 778012#timeShift_returnLabel#3 havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true; 778011#threeTS_returnLabel#1 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret16#1, bobCall_~tmp~3#1;havoc bobCall_~tmp~3#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 778005#L241-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 777849#getOrigin_returnLabel#2 bobCall_#t~ret16#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~3#1 := bobCall_#t~ret16#1;havoc bobCall_#t~ret16#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~3#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 777542#L1431-1 assume 0 == initPersonOnFloor_~floor#1; 777318#L1432-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 777271#L1539-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 777269#L1223-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 777270#L1235-5 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 780700#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 780699#bobCall_returnLabel#1 havoc bobCall_#t~ret16#1, bobCall_~tmp~3#1;assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret22#1, cleanup_#t~ret23#1, cleanup_~i~2#1, cleanup_~tmp~9#1, cleanup_~tmp___0~3#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~9#1;havoc cleanup_~tmp___0~3#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 780698#L1160-78 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 766824#isFloorCalling_returnLabel#79 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 780697#isExecutiveFloorCalling_returnLabel#13 stopRequestedAtCurrentFloor_#t~ret76#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 763051#L2627-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~22#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 763052#getCurrentFloorID_returnLabel#13 stopRequestedAtCurrentFloor_#t~ret77#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret77#1;havoc stopRequestedAtCurrentFloor_#t~ret77#1; 779495#L2631-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 761725#stopRequestedAtCurrentFloor_returnLabel#4 timeShift_#t~ret92#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret92#1;havoc timeShift_#t~ret92#1; 785389#L2779-6 assume !(0 != timeShift_~tmp___9~2#1); 785388#L2870-9 assume !(1 == ~doorState~0); 785387#L2870-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 785386#L1160-81 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 785385#isFloorCalling_returnLabel#82 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 785384#isExecutiveFloorCalling_returnLabel#14 stopRequestedInDirection_#t~ret70#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1; 785383#L2510-6 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 785224#getCurrentFloorID_returnLabel#14 stopRequestedInDirection_#t~ret71#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~19#1 := stopRequestedInDirection_#t~ret71#1;havoc stopRequestedInDirection_#t~ret71#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~19#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 785223#stopRequestedInDirection_returnLabel#7 timeShift_#t~ret99#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret99#1;havoc timeShift_#t~ret99#1; 763905#L2878-6 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1; 763906#L2567-9 assume !(1 == ~currentHeading~0); 782781#L2577-27 assume !(0 == ~currentFloorID~0); 766804#L2577-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 766805#L2583-19 havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 759137#L2887-11 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 759138#L1160-103 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 766832#isFloorCalling_returnLabel#104 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 793314#isExecutiveFloorCalling_returnLabel#16 __utac_acc__Specification14_spec__1_#t~ret11#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret11#1;havoc __utac_acc__Specification14_spec__1_#t~ret11#1; 759549#L330-6 assume 0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 759550#getCurrentFloorID_returnLabel#16 __utac_acc__Specification14_spec__1_#t~ret12#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification14_spec__1_~tmp~2#1 := __utac_acc__Specification14_spec__1_#t~ret12#1;havoc __utac_acc__Specification14_spec__1_#t~ret12#1;assume { :begin_inline_isExecutiveFloor } true;isExecutiveFloor_#in~floorID#1 := __utac_acc__Specification14_spec__1_~tmp~2#1;havoc isExecutiveFloor_#res#1;havoc isExecutiveFloor_~floorID#1, isExecutiveFloor_~retValue_acc~29#1;isExecutiveFloor_~floorID#1 := isExecutiveFloor_#in~floorID#1;havoc isExecutiveFloor_~retValue_acc~29#1;isExecutiveFloor_~retValue_acc~29#1 := (if ~executiveFloor~0 == isExecutiveFloor_~floorID#1 then 1 else 0);isExecutiveFloor_#res#1 := isExecutiveFloor_~retValue_acc~29#1; 794583#isExecutiveFloor_returnLabel#4 __utac_acc__Specification14_spec__1_#t~ret13#1 := isExecutiveFloor_#res#1;havoc isExecutiveFloor_~floorID#1, isExecutiveFloor_~retValue_acc~29#1;havoc isExecutiveFloor_#in~floorID#1;assume { :end_inline_isExecutiveFloor } true;__utac_acc__Specification14_spec__1_~tmp___0~2#1 := __utac_acc__Specification14_spec__1_#t~ret13#1;havoc __utac_acc__Specification14_spec__1_#t~ret13#1; 794581#L335-6 assume 0 != __utac_acc__Specification14_spec__1_~tmp___0~2#1; 794579#L330-7 havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :end_inline___utac_acc__Specification14_spec__1 } true; 794578#timeShift_returnLabel#4 havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 794576#L500-2 assume !false; 794577#L501 [2024-11-09 15:53:55,388 INFO L747 eck$LassoCheckResult]: Loop: 794577#L501 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 813934#L504 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 810594#isBlocked_returnLabel#1 cleanup_#t~ret22#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~3#1 := cleanup_#t~ret22#1;havoc cleanup_#t~ret22#1; 810595#L508 assume 1 != cleanup_~tmp___0~3#1; 807562#L508-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret58#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~17#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~17#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret53#1, anyStopRequested_#t~ret54#1, anyStopRequested_#t~ret55#1, anyStopRequested_#t~ret56#1, anyStopRequested_#t~ret57#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~16#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~16#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 807563#L1160-104 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 813931#isFloorCalling_returnLabel#105 anyStopRequested_#t~ret53#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret53#1;havoc anyStopRequested_#t~ret53#1; 813925#L2066 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 813924#anyStopRequested_returnLabel#1 isIdle_#t~ret58#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret53#1, anyStopRequested_#t~ret54#1, anyStopRequested_#t~ret55#1, anyStopRequested_#t~ret56#1, anyStopRequested_#t~ret57#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~16#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~17#1 := isIdle_#t~ret58#1;havoc isIdle_#t~ret58#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~17#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 813919#isIdle_returnLabel#1 cleanup_#t~ret23#1 := isIdle_#res#1;havoc isIdle_#t~ret58#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~17#1;assume { :end_inline_isIdle } true;cleanup_~tmp~9#1 := cleanup_#t~ret23#1;havoc cleanup_#t~ret23#1; 813918#L520 assume !(0 != cleanup_~tmp~9#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 802535#L1160-109 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 802536#isFloorCalling_returnLabel#110 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 813917#isExecutiveFloorCalling_returnLabel#17 stopRequestedAtCurrentFloor_#t~ret76#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 802531#L2627-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~22#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 802529#getCurrentFloorID_returnLabel#17 stopRequestedAtCurrentFloor_#t~ret77#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret77#1;havoc stopRequestedAtCurrentFloor_#t~ret77#1; 802530#L2631-4 assume ~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret74#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret75#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~21#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~21#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 813914#L1160-110 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 765118#isFloorCalling_returnLabel#111 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret74#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret74#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret74#1; 764929#L2600-8 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1; 764931#stopRequestedAtCurrentFloor__wrappee__empty_returnLabel#9 stopRequestedAtCurrentFloor_#t~ret78#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret74#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret75#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~21#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := stopRequestedAtCurrentFloor_#t~ret78#1;havoc stopRequestedAtCurrentFloor_#t~ret78#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 820189#stopRequestedAtCurrentFloor_returnLabel#5 timeShift_#t~ret92#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret92#1;havoc timeShift_#t~ret92#1; 820188#L2779-8 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 813904#L2781-8 assume !(0 != ~persons_0~0); 820142#L2781-9 assume !(0 != ~persons_1~0); 820108#L2795-4 assume !(0 != ~persons_2~0); 820088#L2809-4 assume !(0 != ~persons_3~0); 820078#L2823-4 assume !(0 != ~persons_4~0); 820071#L2837-4 assume !(0 != ~persons_5~0); 820067#L2851-4 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret80#1, processWaitingOnFloor_#t~ret81#1, processWaitingOnFloor_#t~ret82#1, processWaitingOnFloor_#t~ret83#1, processWaitingOnFloor_#t~ret84#1, processWaitingOnFloor_#t~ret85#1, processWaitingOnFloor_#t~ret86#1, processWaitingOnFloor_#t~ret87#1, processWaitingOnFloor_#t~ret88#1, processWaitingOnFloor_#t~ret89#1, processWaitingOnFloor_#t~ret90#1, processWaitingOnFloor_#t~ret91#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~23#1, processWaitingOnFloor_~tmp___0~10#1, processWaitingOnFloor_~tmp___1~6#1, processWaitingOnFloor_~tmp___2~4#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~23#1;havoc processWaitingOnFloor_~tmp___0~10#1;havoc processWaitingOnFloor_~tmp___1~6#1;havoc processWaitingOnFloor_~tmp___2~4#1;havoc processWaitingOnFloor_~tmp___3~2#1;havoc processWaitingOnFloor_~tmp___4~1#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~11#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~11#1; 820062#L1251-48 assume 0 == isPersonOnFloor_~floor#1; 820056#L1252-24 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~11#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~11#1; 820024#isPersonOnFloor_returnLabel#25 processWaitingOnFloor_#t~ret80#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~11#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~10#1 := processWaitingOnFloor_#t~ret80#1;havoc processWaitingOnFloor_#t~ret80#1; 820022#L2681-12 assume !(0 != processWaitingOnFloor_~tmp___0~10#1); 820020#L2681-14 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~11#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~11#1; 820018#L1251-50 assume 0 == isPersonOnFloor_~floor#1; 820019#L1252-25 assume !(0 == isPersonOnFloor_~person#1); 819996#L1256-25 assume 1 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~11#1 := ~personOnFloor_1_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~11#1; 819978#isPersonOnFloor_returnLabel#26 processWaitingOnFloor_#t~ret82#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~11#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~4#1 := processWaitingOnFloor_#t~ret82#1;havoc processWaitingOnFloor_#t~ret82#1; 819968#L2694-12 assume !(0 != processWaitingOnFloor_~tmp___2~4#1); 819966#L2694-14 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~11#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~11#1; 819964#L1251-52 assume 0 == isPersonOnFloor_~floor#1; 819965#L1252-26 assume !(0 == isPersonOnFloor_~person#1); 820498#L1256-26 assume !(1 == isPersonOnFloor_~person#1); 819947#L1260-26 assume 2 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~11#1 := ~personOnFloor_2_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~11#1; 815520#isPersonOnFloor_returnLabel#27 processWaitingOnFloor_#t~ret84#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~11#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~1#1 := processWaitingOnFloor_#t~ret84#1;havoc processWaitingOnFloor_#t~ret84#1; 815518#L2707-12 assume !(0 != processWaitingOnFloor_~tmp___4~1#1); 815516#L2707-14 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~11#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~11#1; 815515#L1251-54 assume 0 == isPersonOnFloor_~floor#1; 815512#L1252-27 assume !(0 == isPersonOnFloor_~person#1); 815506#L1256-27 assume 1 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~11#1 := ~personOnFloor_1_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~11#1; 815476#isPersonOnFloor_returnLabel#28 processWaitingOnFloor_#t~ret86#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~11#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret86#1;havoc processWaitingOnFloor_#t~ret86#1; 815474#L2720-12 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 815472#L2720-14 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~11#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~11#1; 815470#L1251-56 assume 0 == isPersonOnFloor_~floor#1; 815471#L1252-28 assume !(0 == isPersonOnFloor_~person#1); 815394#L1256-28 assume 1 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~11#1 := ~personOnFloor_1_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~11#1; 815380#isPersonOnFloor_returnLabel#29 processWaitingOnFloor_#t~ret88#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~11#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret88#1;havoc processWaitingOnFloor_#t~ret88#1; 814277#L2733-12 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 814275#L2733-14 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~11#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~11#1; 814272#L1251-58 assume 0 == isPersonOnFloor_~floor#1; 814273#L1252-29 assume !(0 == isPersonOnFloor_~person#1); 814239#L1256-29 assume 1 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~11#1 := ~personOnFloor_1_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~11#1; 814232#isPersonOnFloor_returnLabel#30 processWaitingOnFloor_#t~ret90#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~11#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret90#1;havoc processWaitingOnFloor_#t~ret90#1; 814227#L2746-12 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 814183#L2746-14 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 814179#L1195-68 assume !(0 == resetCallOnFloor_~floorID#1); 814174#L1198-68 assume 1 == resetCallOnFloor_~floorID#1;~calls_1~0 := 0; 814169#L1207-104 havoc resetCallOnFloor_~floorID#1;havoc resetCallOnFloor_#in~floorID#1;assume { :end_inline_resetCallOnFloor } true; 814165#processWaitingOnFloor_returnLabel#5 havoc processWaitingOnFloor_#t~ret80#1, processWaitingOnFloor_#t~ret81#1, processWaitingOnFloor_#t~ret82#1, processWaitingOnFloor_#t~ret83#1, processWaitingOnFloor_#t~ret84#1, processWaitingOnFloor_#t~ret85#1, processWaitingOnFloor_#t~ret86#1, processWaitingOnFloor_#t~ret87#1, processWaitingOnFloor_#t~ret88#1, processWaitingOnFloor_#t~ret89#1, processWaitingOnFloor_#t~ret90#1, processWaitingOnFloor_#t~ret91#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~23#1, processWaitingOnFloor_~tmp___0~10#1, processWaitingOnFloor_~tmp___1~6#1, processWaitingOnFloor_~tmp___2~4#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;havoc processWaitingOnFloor_#in~floorID#1;assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 813975#L1929-8 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 813963#L1941-14 havoc resetFloorButton_~floorID#1;havoc resetFloorButton_#in~floorID#1;assume { :end_inline_resetFloorButton } true; 813958#L2887-14 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 813956#L1160-134 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 803521#isFloorCalling_returnLabel#135 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 813954#isExecutiveFloorCalling_returnLabel#20 __utac_acc__Specification14_spec__1_#t~ret11#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret11#1;havoc __utac_acc__Specification14_spec__1_#t~ret11#1; 813952#L330-8 assume 0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 813950#getCurrentFloorID_returnLabel#20 __utac_acc__Specification14_spec__1_#t~ret12#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification14_spec__1_~tmp~2#1 := __utac_acc__Specification14_spec__1_#t~ret12#1;havoc __utac_acc__Specification14_spec__1_#t~ret12#1;assume { :begin_inline_isExecutiveFloor } true;isExecutiveFloor_#in~floorID#1 := __utac_acc__Specification14_spec__1_~tmp~2#1;havoc isExecutiveFloor_#res#1;havoc isExecutiveFloor_~floorID#1, isExecutiveFloor_~retValue_acc~29#1;isExecutiveFloor_~floorID#1 := isExecutiveFloor_#in~floorID#1;havoc isExecutiveFloor_~retValue_acc~29#1;isExecutiveFloor_~retValue_acc~29#1 := (if ~executiveFloor~0 == isExecutiveFloor_~floorID#1 then 1 else 0);isExecutiveFloor_#res#1 := isExecutiveFloor_~retValue_acc~29#1; 813948#isExecutiveFloor_returnLabel#5 __utac_acc__Specification14_spec__1_#t~ret13#1 := isExecutiveFloor_#res#1;havoc isExecutiveFloor_~floorID#1, isExecutiveFloor_~retValue_acc~29#1;havoc isExecutiveFloor_#in~floorID#1;assume { :end_inline_isExecutiveFloor } true;__utac_acc__Specification14_spec__1_~tmp___0~2#1 := __utac_acc__Specification14_spec__1_#t~ret13#1;havoc __utac_acc__Specification14_spec__1_#t~ret13#1; 813943#L335-8 assume 0 != __utac_acc__Specification14_spec__1_~tmp___0~2#1; 813940#L330-9 havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :end_inline___utac_acc__Specification14_spec__1 } true; 813938#timeShift_returnLabel#5 havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 813935#L500-2 assume !false; 794577#L501 [2024-11-09 15:53:55,389 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-09 15:53:55,389 INFO L85 PathProgramCache]: Analyzing trace with hash -1544056063, now seen corresponding path program 2 times [2024-11-09 15:53:55,389 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-09 15:53:55,389 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1644562007] [2024-11-09 15:53:55,389 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-09 15:53:55,390 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-09 15:53:55,434 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-09 15:53:55,633 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-09 15:53:55,633 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-09 15:53:55,633 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1644562007] [2024-11-09 15:53:55,637 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1644562007] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-09 15:53:55,637 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-09 15:53:55,637 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2024-11-09 15:53:55,637 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1903135140] [2024-11-09 15:53:55,637 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-09 15:53:55,638 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-09 15:53:55,638 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-09 15:53:55,638 INFO L85 PathProgramCache]: Analyzing trace with hash 2005770827, now seen corresponding path program 1 times [2024-11-09 15:53:55,638 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-09 15:53:55,638 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [860872098] [2024-11-09 15:53:55,638 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-09 15:53:55,638 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-09 15:53:55,664 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-09 15:53:55,698 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-09 15:53:55,698 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-09 15:53:55,698 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [860872098] [2024-11-09 15:53:55,698 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [860872098] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-09 15:53:55,698 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-09 15:53:55,698 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-09 15:53:55,700 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1462646802] [2024-11-09 15:53:55,700 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-09 15:53:55,700 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-09 15:53:55,700 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-09 15:53:55,701 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-11-09 15:53:55,701 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-11-09 15:53:55,701 INFO L87 Difference]: Start difference. First operand 63705 states and 116366 transitions. cyclomatic complexity: 52679 Second operand has 3 states, 3 states have (on average 27.666666666666668) internal successors, (83), 3 states have internal predecessors, (83), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-09 15:53:57,176 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-09 15:53:57,177 INFO L93 Difference]: Finished difference Result 63192 states and 114428 transitions. [2024-11-09 15:53:57,177 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 63192 states and 114428 transitions. [2024-11-09 15:53:57,374 INFO L131 ngComponentsAnalysis]: Automaton has 12 accepting balls. 20717 [2024-11-09 15:53:57,530 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 63192 states to 63192 states and 114428 transitions. [2024-11-09 15:53:57,531 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 47256 [2024-11-09 15:53:57,567 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 47256 [2024-11-09 15:53:57,567 INFO L73 IsDeterministic]: Start isDeterministic. Operand 63192 states and 114428 transitions. [2024-11-09 15:53:57,583 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2024-11-09 15:53:57,583 INFO L218 hiAutomatonCegarLoop]: Abstraction has 63192 states and 114428 transitions. [2024-11-09 15:53:57,622 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 63192 states and 114428 transitions. [2024-11-09 15:53:58,473 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 63192 to 63135. [2024-11-09 15:53:58,526 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 63135 states, 63135 states have (on average 1.8115308465985587) internal successors, (114371), 63134 states have internal predecessors, (114371), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-09 15:53:58,647 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 63135 states to 63135 states and 114371 transitions. [2024-11-09 15:53:58,647 INFO L240 hiAutomatonCegarLoop]: Abstraction has 63135 states and 114371 transitions. [2024-11-09 15:53:58,647 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2024-11-09 15:53:58,648 INFO L425 stractBuchiCegarLoop]: Abstraction has 63135 states and 114371 transitions. [2024-11-09 15:53:58,648 INFO L332 stractBuchiCegarLoop]: ======== Iteration 9 ============ [2024-11-09 15:53:58,648 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 63135 states and 114371 transitions. [2024-11-09 15:53:58,835 INFO L131 ngComponentsAnalysis]: Automaton has 12 accepting balls. 20698 [2024-11-09 15:53:58,835 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-09 15:53:58,835 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-09 15:53:58,838 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-09 15:53:58,838 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-09 15:53:58,839 INFO L745 eck$LassoCheckResult]: Stem: 886629#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 886630#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret28#1, main_~retValue_acc~6#1, main_~tmp~11#1;havoc main_~retValue_acc~6#1;havoc main_~tmp~11#1;assume { :begin_inline_select_helpers } true; 892808#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 892385#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; 888175#valid_product_returnLabel#1 main_#t~ret28#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;assume { :end_inline_valid_product } true;main_~tmp~11#1 := main_#t~ret28#1;havoc main_#t~ret28#1; 888176#L692 assume 0 != main_~tmp~11#1;assume { :begin_inline_setup } true; 888391#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret21#1, bigMacCall_~tmp~8#1;havoc bigMacCall_~tmp~8#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 890130#L241 assume !(0 == getOrigin_~person#1); 892043#L245 assume !(1 == getOrigin_~person#1); 888681#L249 assume !(2 == getOrigin_~person#1); 888682#L253 assume !(3 == getOrigin_~person#1); 891024#L257 assume !(4 == getOrigin_~person#1); 892927#L261 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 891834#getOrigin_returnLabel#1 bigMacCall_#t~ret21#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~8#1 := bigMacCall_#t~ret21#1;havoc bigMacCall_#t~ret21#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~8#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 891835#L1431 assume 0 == initPersonOnFloor_~floor#1; 892615#L1432 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 886039#L1539-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 891679#L1223 assume !(0 == callOnFloor_~floorID#1); 886246#L1226 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 886247#L1235-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 888925#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 887463#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret21#1, bigMacCall_~tmp~8#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 887464#L1160 assume !(0 == isFloorCalling_~floorID#1); 888737#L1164 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 891049#isFloorCalling_returnLabel#1 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 898256#isExecutiveFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret76#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 896055#L2627 assume 0 != stopRequestedAtCurrentFloor_~tmp~22#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 892954#getCurrentFloorID_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret77#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret77#1;havoc stopRequestedAtCurrentFloor_#t~ret77#1; 891838#L2631 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 891840#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret92#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret92#1;havoc timeShift_#t~ret92#1; 897848#L2779 assume !(0 != timeShift_~tmp___9~2#1); 898074#L2870 assume !(1 == ~doorState~0); 898072#L2870-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 898066#L1160-3 assume !(0 == isFloorCalling_~floorID#1); 891479#L1164-3 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 891480#isFloorCalling_returnLabel#4 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 895149#isExecutiveFloorCalling_returnLabel#2 stopRequestedInDirection_#t~ret70#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1; 895146#L2510 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 893188#getCurrentFloorID_returnLabel#2 stopRequestedInDirection_#t~ret71#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~19#1 := stopRequestedInDirection_#t~ret71#1;havoc stopRequestedInDirection_#t~ret71#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~19#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 893189#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret99#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret99#1;havoc timeShift_#t~ret99#1; 895316#L2878 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1; 895317#L2567 assume !(1 == ~currentHeading~0); 895434#L2577 assume !(0 == ~currentFloorID~0); 895431#L2577-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 895188#L2583-1 havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 895182#L2887-2 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 894954#L1160-25 assume !(0 == isFloorCalling_~floorID#1); 891649#L1164-25 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 891650#isFloorCalling_returnLabel#26 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 894884#isExecutiveFloorCalling_returnLabel#4 __utac_acc__Specification14_spec__1_#t~ret11#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret11#1;havoc __utac_acc__Specification14_spec__1_#t~ret11#1; 894878#L330 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1); 894869#L330-1 havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :end_inline___utac_acc__Specification14_spec__1 } true; 894369#timeShift_returnLabel#1 havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 893735#L1160-26 assume !(0 == isFloorCalling_~floorID#1); 888269#L1164-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 888270#isFloorCalling_returnLabel#27 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 895091#isExecutiveFloorCalling_returnLabel#5 stopRequestedAtCurrentFloor_#t~ret76#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 895090#L2627-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~22#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 895089#getCurrentFloorID_returnLabel#5 stopRequestedAtCurrentFloor_#t~ret77#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret77#1;havoc stopRequestedAtCurrentFloor_#t~ret77#1; 895087#L2631-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 891086#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret92#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret92#1;havoc timeShift_#t~ret92#1; 891087#L2779-2 assume !(0 != timeShift_~tmp___9~2#1); 893034#L2870-3 assume 1 == ~doorState~0;~doorState~0 := 0; 891862#L2870-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 891863#L1160-29 assume !(0 == isFloorCalling_~floorID#1); 891964#L1164-29 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 886119#isFloorCalling_returnLabel#30 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 899310#isExecutiveFloorCalling_returnLabel#6 stopRequestedInDirection_#t~ret70#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1; 899306#L2510-2 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 899307#getCurrentFloorID_returnLabel#6 stopRequestedInDirection_#t~ret71#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~19#1 := stopRequestedInDirection_#t~ret71#1;havoc stopRequestedInDirection_#t~ret71#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~19#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 902601#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret99#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret99#1;havoc timeShift_#t~ret99#1; 902597#L2878-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1; 902595#L2567-3 assume !(1 == ~currentHeading~0); 902596#L2577-9 assume !(0 == ~currentFloorID~0); 899282#L2577-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 899283#L2583-7 havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 899243#L2887-5 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 899244#L1160-51 assume !(0 == isFloorCalling_~floorID#1); 892518#L1164-51 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 887917#isFloorCalling_returnLabel#52 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 897361#isExecutiveFloorCalling_returnLabel#8 __utac_acc__Specification14_spec__1_#t~ret11#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret11#1;havoc __utac_acc__Specification14_spec__1_#t~ret11#1; 897362#L330-2 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1); 897348#L330-3 havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :end_inline___utac_acc__Specification14_spec__1 } true; 897349#timeShift_returnLabel#2 havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 893744#L1160-52 assume !(0 == isFloorCalling_~floorID#1); 890427#L1164-52 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 888077#isFloorCalling_returnLabel#53 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 897368#isExecutiveFloorCalling_returnLabel#9 stopRequestedAtCurrentFloor_#t~ret76#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 897366#L2627-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~22#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 897363#getCurrentFloorID_returnLabel#9 stopRequestedAtCurrentFloor_#t~ret77#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret77#1;havoc stopRequestedAtCurrentFloor_#t~ret77#1; 893750#L2631-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 893751#stopRequestedAtCurrentFloor_returnLabel#3 timeShift_#t~ret92#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret92#1;havoc timeShift_#t~ret92#1; 899284#L2779-4 assume !(0 != timeShift_~tmp___9~2#1); 899277#L2870-6 assume !(1 == ~doorState~0); 897369#L2870-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 895102#L1160-55 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 895103#isFloorCalling_returnLabel#56 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 905535#isExecutiveFloorCalling_returnLabel#10 stopRequestedInDirection_#t~ret70#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1; 905476#L2510-4 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 905474#getCurrentFloorID_returnLabel#10 stopRequestedInDirection_#t~ret71#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~19#1 := stopRequestedInDirection_#t~ret71#1;havoc stopRequestedInDirection_#t~ret71#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~19#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 905472#stopRequestedInDirection_returnLabel#5 timeShift_#t~ret99#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret99#1;havoc timeShift_#t~ret99#1; 905467#L2878-4 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1; 905465#L2567-6 assume !(1 == ~currentHeading~0); 905466#L2577-18 assume !(0 == ~currentFloorID~0); 893045#L2577-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 890230#L2583-13 havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 889294#L2887-8 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 889819#L1160-77 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 889820#isFloorCalling_returnLabel#78 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 906108#isExecutiveFloorCalling_returnLabel#12 __utac_acc__Specification14_spec__1_#t~ret11#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret11#1;havoc __utac_acc__Specification14_spec__1_#t~ret11#1; 906107#L330-4 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1); 887899#L330-5 havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :end_inline___utac_acc__Specification14_spec__1 } true; 887027#timeShift_returnLabel#3 havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true; 886198#threeTS_returnLabel#1 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret16#1, bobCall_~tmp~3#1;havoc bobCall_~tmp~3#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 886199#L241-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 887224#getOrigin_returnLabel#2 bobCall_#t~ret16#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~3#1 := bobCall_#t~ret16#1;havoc bobCall_#t~ret16#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~3#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 893131#L1431-1 assume 0 == initPersonOnFloor_~floor#1; 888209#L1432-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 886097#L1539-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 891136#L1223-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 891137#L1235-5 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 907983#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 907982#bobCall_returnLabel#1 havoc bobCall_#t~ret16#1, bobCall_~tmp~3#1;assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret22#1, cleanup_#t~ret23#1, cleanup_~i~2#1, cleanup_~tmp~9#1, cleanup_~tmp___0~3#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~9#1;havoc cleanup_~tmp___0~3#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 907921#L1160-78 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 907920#isFloorCalling_returnLabel#79 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 907919#isExecutiveFloorCalling_returnLabel#13 stopRequestedAtCurrentFloor_#t~ret76#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 902729#L2627-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~22#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 893332#getCurrentFloorID_returnLabel#13 stopRequestedAtCurrentFloor_#t~ret77#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret77#1;havoc stopRequestedAtCurrentFloor_#t~ret77#1; 893333#L2631-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 888619#stopRequestedAtCurrentFloor_returnLabel#4 timeShift_#t~ret92#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret92#1;havoc timeShift_#t~ret92#1; 903043#L2779-6 assume !(0 != timeShift_~tmp___9~2#1); 891041#L2870-9 assume !(1 == ~doorState~0); 886187#L2870-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 886188#L1160-81 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 886566#isFloorCalling_returnLabel#82 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 891284#isExecutiveFloorCalling_returnLabel#14 stopRequestedInDirection_#t~ret70#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1; 886345#L2510-6 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 886347#getCurrentFloorID_returnLabel#14 stopRequestedInDirection_#t~ret71#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~19#1 := stopRequestedInDirection_#t~ret71#1;havoc stopRequestedInDirection_#t~ret71#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~19#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 911987#stopRequestedInDirection_returnLabel#7 timeShift_#t~ret99#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret99#1;havoc timeShift_#t~ret99#1; 890812#L2878-6 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1; 890813#L2567-9 assume !(1 == ~currentHeading~0); 911952#L2577-27 assume !(0 == ~currentFloorID~0); 893730#L2577-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 893731#L2583-19 havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 911949#L2887-11 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 910923#L1160-103 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 910924#isFloorCalling_returnLabel#104 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 893661#isExecutiveFloorCalling_returnLabel#16 __utac_acc__Specification14_spec__1_#t~ret11#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret11#1;havoc __utac_acc__Specification14_spec__1_#t~ret11#1; 893662#L330-6 assume 0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 913148#getCurrentFloorID_returnLabel#16 __utac_acc__Specification14_spec__1_#t~ret12#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification14_spec__1_~tmp~2#1 := __utac_acc__Specification14_spec__1_#t~ret12#1;havoc __utac_acc__Specification14_spec__1_#t~ret12#1;assume { :begin_inline_isExecutiveFloor } true;isExecutiveFloor_#in~floorID#1 := __utac_acc__Specification14_spec__1_~tmp~2#1;havoc isExecutiveFloor_#res#1;havoc isExecutiveFloor_~floorID#1, isExecutiveFloor_~retValue_acc~29#1;isExecutiveFloor_~floorID#1 := isExecutiveFloor_#in~floorID#1;havoc isExecutiveFloor_~retValue_acc~29#1;isExecutiveFloor_~retValue_acc~29#1 := (if ~executiveFloor~0 == isExecutiveFloor_~floorID#1 then 1 else 0);isExecutiveFloor_#res#1 := isExecutiveFloor_~retValue_acc~29#1; 913147#isExecutiveFloor_returnLabel#4 __utac_acc__Specification14_spec__1_#t~ret13#1 := isExecutiveFloor_#res#1;havoc isExecutiveFloor_~floorID#1, isExecutiveFloor_~retValue_acc~29#1;havoc isExecutiveFloor_#in~floorID#1;assume { :end_inline_isExecutiveFloor } true;__utac_acc__Specification14_spec__1_~tmp___0~2#1 := __utac_acc__Specification14_spec__1_#t~ret13#1;havoc __utac_acc__Specification14_spec__1_#t~ret13#1; 913145#L335-6 assume 0 != __utac_acc__Specification14_spec__1_~tmp___0~2#1; 913143#L330-7 havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :end_inline___utac_acc__Specification14_spec__1 } true; 913142#timeShift_returnLabel#4 havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 913139#L500-2 assume !false; 913140#L501 [2024-11-09 15:53:58,840 INFO L747 eck$LassoCheckResult]: Loop: 913140#L501 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 934870#L504 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 934869#isBlocked_returnLabel#1 cleanup_#t~ret22#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~3#1 := cleanup_#t~ret22#1;havoc cleanup_#t~ret22#1; 934868#L508 assume 1 != cleanup_~tmp___0~3#1; 934867#L508-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret58#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~17#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~17#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret53#1, anyStopRequested_#t~ret54#1, anyStopRequested_#t~ret55#1, anyStopRequested_#t~ret56#1, anyStopRequested_#t~ret57#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~16#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~16#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 934866#L1160-104 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 934865#isFloorCalling_returnLabel#105 anyStopRequested_#t~ret53#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret53#1;havoc anyStopRequested_#t~ret53#1; 934864#L2066 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 934863#anyStopRequested_returnLabel#1 isIdle_#t~ret58#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret53#1, anyStopRequested_#t~ret54#1, anyStopRequested_#t~ret55#1, anyStopRequested_#t~ret56#1, anyStopRequested_#t~ret57#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~16#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~17#1 := isIdle_#t~ret58#1;havoc isIdle_#t~ret58#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~17#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 934862#isIdle_returnLabel#1 cleanup_#t~ret23#1 := isIdle_#res#1;havoc isIdle_#t~ret58#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~17#1;assume { :end_inline_isIdle } true;cleanup_~tmp~9#1 := cleanup_#t~ret23#1;havoc cleanup_#t~ret23#1; 934861#L520 assume !(0 != cleanup_~tmp~9#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 934860#L1160-109 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 928995#isFloorCalling_returnLabel#110 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 934859#isExecutiveFloorCalling_returnLabel#17 stopRequestedAtCurrentFloor_#t~ret76#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 934858#L2627-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~22#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 934857#getCurrentFloorID_returnLabel#17 stopRequestedAtCurrentFloor_#t~ret77#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret77#1;havoc stopRequestedAtCurrentFloor_#t~ret77#1; 934369#L2631-4 assume ~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret74#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret75#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~21#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~21#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 934370#L1160-110 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 936254#isFloorCalling_returnLabel#111 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret74#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret74#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret74#1; 936253#L2600-8 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1; 936217#stopRequestedAtCurrentFloor__wrappee__empty_returnLabel#9 stopRequestedAtCurrentFloor_#t~ret78#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret74#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret75#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~21#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := stopRequestedAtCurrentFloor_#t~ret78#1;havoc stopRequestedAtCurrentFloor_#t~ret78#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 940622#stopRequestedAtCurrentFloor_returnLabel#5 timeShift_#t~ret92#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret92#1;havoc timeShift_#t~ret92#1; 940621#L2779-8 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 936209#L2781-8 assume !(0 != ~persons_0~0); 940589#L2781-9 assume !(0 != ~persons_1~0); 940583#L2795-4 assume !(0 != ~persons_2~0); 940563#L2809-4 assume !(0 != ~persons_3~0); 940560#L2823-4 assume !(0 != ~persons_4~0); 940555#L2837-4 assume !(0 != ~persons_5~0); 940551#L2851-4 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret80#1, processWaitingOnFloor_#t~ret81#1, processWaitingOnFloor_#t~ret82#1, processWaitingOnFloor_#t~ret83#1, processWaitingOnFloor_#t~ret84#1, processWaitingOnFloor_#t~ret85#1, processWaitingOnFloor_#t~ret86#1, processWaitingOnFloor_#t~ret87#1, processWaitingOnFloor_#t~ret88#1, processWaitingOnFloor_#t~ret89#1, processWaitingOnFloor_#t~ret90#1, processWaitingOnFloor_#t~ret91#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~23#1, processWaitingOnFloor_~tmp___0~10#1, processWaitingOnFloor_~tmp___1~6#1, processWaitingOnFloor_~tmp___2~4#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~23#1;havoc processWaitingOnFloor_~tmp___0~10#1;havoc processWaitingOnFloor_~tmp___1~6#1;havoc processWaitingOnFloor_~tmp___2~4#1;havoc processWaitingOnFloor_~tmp___3~2#1;havoc processWaitingOnFloor_~tmp___4~1#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~11#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~11#1; 940550#L1251-48 assume 0 == isPersonOnFloor_~floor#1; 940540#L1252-24 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~11#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~11#1; 940508#isPersonOnFloor_returnLabel#25 processWaitingOnFloor_#t~ret80#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~11#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~10#1 := processWaitingOnFloor_#t~ret80#1;havoc processWaitingOnFloor_#t~ret80#1; 940506#L2681-12 assume !(0 != processWaitingOnFloor_~tmp___0~10#1); 940504#L2681-14 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~11#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~11#1; 940502#L1251-50 assume 0 == isPersonOnFloor_~floor#1; 940503#L1252-25 assume !(0 == isPersonOnFloor_~person#1); 940480#L1256-25 assume 1 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~11#1 := ~personOnFloor_1_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~11#1; 940462#isPersonOnFloor_returnLabel#26 processWaitingOnFloor_#t~ret82#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~11#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~4#1 := processWaitingOnFloor_#t~ret82#1;havoc processWaitingOnFloor_#t~ret82#1; 940452#L2694-12 assume !(0 != processWaitingOnFloor_~tmp___2~4#1); 940450#L2694-14 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~11#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~11#1; 940448#L1251-52 assume 0 == isPersonOnFloor_~floor#1; 940449#L1252-26 assume !(0 == isPersonOnFloor_~person#1); 940768#L1256-26 assume !(1 == isPersonOnFloor_~person#1); 940431#L1260-26 assume 2 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~11#1 := ~personOnFloor_2_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~11#1; 940424#isPersonOnFloor_returnLabel#27 processWaitingOnFloor_#t~ret84#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~11#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~1#1 := processWaitingOnFloor_#t~ret84#1;havoc processWaitingOnFloor_#t~ret84#1; 940422#L2707-12 assume !(0 != processWaitingOnFloor_~tmp___4~1#1); 940415#L2707-14 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~11#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~11#1; 940412#L1251-54 assume 0 == isPersonOnFloor_~floor#1; 940413#L1252-27 assume !(0 == isPersonOnFloor_~person#1); 941629#L1256-27 assume !(1 == isPersonOnFloor_~person#1); 941627#L1260-27 assume !(2 == isPersonOnFloor_~person#1); 940386#L1264-27 assume 3 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~11#1 := ~personOnFloor_3_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~11#1; 935225#isPersonOnFloor_returnLabel#28 processWaitingOnFloor_#t~ret86#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~11#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret86#1;havoc processWaitingOnFloor_#t~ret86#1; 935223#L2720-12 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 935221#L2720-14 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~11#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~11#1; 935219#L1251-56 assume 0 == isPersonOnFloor_~floor#1; 935220#L1252-28 assume !(0 == isPersonOnFloor_~person#1); 935197#L1256-28 assume 1 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~11#1 := ~personOnFloor_1_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~11#1; 935184#isPersonOnFloor_returnLabel#29 processWaitingOnFloor_#t~ret88#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~11#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret88#1;havoc processWaitingOnFloor_#t~ret88#1; 935126#L2733-12 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 935125#L2733-14 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~11#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~11#1; 935123#L1251-58 assume 0 == isPersonOnFloor_~floor#1; 935124#L1252-29 assume !(0 == isPersonOnFloor_~person#1); 935083#L1256-29 assume 1 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~11#1 := ~personOnFloor_1_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~11#1; 935070#isPersonOnFloor_returnLabel#30 processWaitingOnFloor_#t~ret90#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~11#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret90#1;havoc processWaitingOnFloor_#t~ret90#1; 935068#L2746-12 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 935066#L2746-14 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 935064#L1195-68 assume !(0 == resetCallOnFloor_~floorID#1); 934897#L1198-68 assume 1 == resetCallOnFloor_~floorID#1;~calls_1~0 := 0; 934894#L1207-104 havoc resetCallOnFloor_~floorID#1;havoc resetCallOnFloor_#in~floorID#1;assume { :end_inline_resetCallOnFloor } true; 934893#processWaitingOnFloor_returnLabel#5 havoc processWaitingOnFloor_#t~ret80#1, processWaitingOnFloor_#t~ret81#1, processWaitingOnFloor_#t~ret82#1, processWaitingOnFloor_#t~ret83#1, processWaitingOnFloor_#t~ret84#1, processWaitingOnFloor_#t~ret85#1, processWaitingOnFloor_#t~ret86#1, processWaitingOnFloor_#t~ret87#1, processWaitingOnFloor_#t~ret88#1, processWaitingOnFloor_#t~ret89#1, processWaitingOnFloor_#t~ret90#1, processWaitingOnFloor_#t~ret91#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~23#1, processWaitingOnFloor_~tmp___0~10#1, processWaitingOnFloor_~tmp___1~6#1, processWaitingOnFloor_~tmp___2~4#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;havoc processWaitingOnFloor_#in~floorID#1;assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 934890#L1929-8 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 934885#L1941-14 havoc resetFloorButton_~floorID#1;havoc resetFloorButton_#in~floorID#1;assume { :end_inline_resetFloorButton } true; 934881#L2887-14 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 934880#L1160-134 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 928957#isFloorCalling_returnLabel#135 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 934879#isExecutiveFloorCalling_returnLabel#20 __utac_acc__Specification14_spec__1_#t~ret11#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret11#1;havoc __utac_acc__Specification14_spec__1_#t~ret11#1; 934878#L330-8 assume 0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 934877#getCurrentFloorID_returnLabel#20 __utac_acc__Specification14_spec__1_#t~ret12#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification14_spec__1_~tmp~2#1 := __utac_acc__Specification14_spec__1_#t~ret12#1;havoc __utac_acc__Specification14_spec__1_#t~ret12#1;assume { :begin_inline_isExecutiveFloor } true;isExecutiveFloor_#in~floorID#1 := __utac_acc__Specification14_spec__1_~tmp~2#1;havoc isExecutiveFloor_#res#1;havoc isExecutiveFloor_~floorID#1, isExecutiveFloor_~retValue_acc~29#1;isExecutiveFloor_~floorID#1 := isExecutiveFloor_#in~floorID#1;havoc isExecutiveFloor_~retValue_acc~29#1;isExecutiveFloor_~retValue_acc~29#1 := (if ~executiveFloor~0 == isExecutiveFloor_~floorID#1 then 1 else 0);isExecutiveFloor_#res#1 := isExecutiveFloor_~retValue_acc~29#1; 934876#isExecutiveFloor_returnLabel#5 __utac_acc__Specification14_spec__1_#t~ret13#1 := isExecutiveFloor_#res#1;havoc isExecutiveFloor_~floorID#1, isExecutiveFloor_~retValue_acc~29#1;havoc isExecutiveFloor_#in~floorID#1;assume { :end_inline_isExecutiveFloor } true;__utac_acc__Specification14_spec__1_~tmp___0~2#1 := __utac_acc__Specification14_spec__1_#t~ret13#1;havoc __utac_acc__Specification14_spec__1_#t~ret13#1; 934874#L335-8 assume 0 != __utac_acc__Specification14_spec__1_~tmp___0~2#1; 934872#L330-9 havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :end_inline___utac_acc__Specification14_spec__1 } true; 932129#timeShift_returnLabel#5 havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 934871#L500-2 assume !false; 913140#L501 [2024-11-09 15:53:58,840 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-09 15:53:58,840 INFO L85 PathProgramCache]: Analyzing trace with hash -1544056063, now seen corresponding path program 3 times [2024-11-09 15:53:58,841 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-09 15:53:58,841 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [184266785] [2024-11-09 15:53:58,841 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-09 15:53:58,841 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-09 15:53:58,873 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-09 15:53:59,029 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-09 15:53:59,029 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-09 15:53:59,029 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [184266785] [2024-11-09 15:53:59,029 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [184266785] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-09 15:53:59,030 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-09 15:53:59,030 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2024-11-09 15:53:59,030 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1557650452] [2024-11-09 15:53:59,030 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-09 15:53:59,030 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-09 15:53:59,030 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-09 15:53:59,030 INFO L85 PathProgramCache]: Analyzing trace with hash 252452464, now seen corresponding path program 1 times [2024-11-09 15:53:59,030 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-09 15:53:59,031 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1212486804] [2024-11-09 15:53:59,031 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-09 15:53:59,031 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-09 15:53:59,053 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-09 15:53:59,399 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-09 15:53:59,400 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-09 15:53:59,400 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1212486804] [2024-11-09 15:53:59,400 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1212486804] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-09 15:53:59,400 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-09 15:53:59,400 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-09 15:53:59,400 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1422375202] [2024-11-09 15:53:59,400 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-09 15:53:59,400 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-09 15:53:59,401 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-09 15:53:59,401 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-11-09 15:53:59,401 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-11-09 15:53:59,401 INFO L87 Difference]: Start difference. First operand 63135 states and 114371 transitions. cyclomatic complexity: 51254 Second operand has 3 states, 3 states have (on average 28.333333333333332) internal successors, (85), 3 states have internal predecessors, (85), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-09 15:54:00,678 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-09 15:54:00,678 INFO L93 Difference]: Finished difference Result 63363 states and 112889 transitions. [2024-11-09 15:54:00,678 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 63363 states and 112889 transitions. [2024-11-09 15:54:00,880 INFO L131 ngComponentsAnalysis]: Automaton has 12 accepting balls. 20774 [2024-11-09 15:54:01,030 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 63363 states to 63363 states and 112889 transitions. [2024-11-09 15:54:01,031 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 47385 [2024-11-09 15:54:01,067 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 47385 [2024-11-09 15:54:01,067 INFO L73 IsDeterministic]: Start isDeterministic. Operand 63363 states and 112889 transitions. [2024-11-09 15:54:01,082 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2024-11-09 15:54:01,083 INFO L218 hiAutomatonCegarLoop]: Abstraction has 63363 states and 112889 transitions. [2024-11-09 15:54:01,122 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 63363 states and 112889 transitions. [2024-11-09 15:54:01,814 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 63363 to 63135. [2024-11-09 15:54:01,872 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 63135 states, 63135 states have (on average 1.7844460283519443) internal successors, (112661), 63134 states have internal predecessors, (112661), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-09 15:54:01,990 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 63135 states to 63135 states and 112661 transitions. [2024-11-09 15:54:01,991 INFO L240 hiAutomatonCegarLoop]: Abstraction has 63135 states and 112661 transitions. [2024-11-09 15:54:01,991 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2024-11-09 15:54:01,992 INFO L425 stractBuchiCegarLoop]: Abstraction has 63135 states and 112661 transitions. [2024-11-09 15:54:01,992 INFO L332 stractBuchiCegarLoop]: ======== Iteration 10 ============ [2024-11-09 15:54:01,992 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 63135 states and 112661 transitions. [2024-11-09 15:54:02,130 INFO L131 ngComponentsAnalysis]: Automaton has 12 accepting balls. 20698 [2024-11-09 15:54:02,130 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-09 15:54:02,130 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-09 15:54:02,132 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-09 15:54:02,133 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1] [2024-11-09 15:54:02,133 INFO L745 eck$LassoCheckResult]: Stem: 1013132#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 1013133#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret28#1, main_~retValue_acc~6#1, main_~tmp~11#1;havoc main_~retValue_acc~6#1;havoc main_~tmp~11#1;assume { :begin_inline_select_helpers } true; 1019277#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1018845#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; 1014693#valid_product_returnLabel#1 main_#t~ret28#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;assume { :end_inline_valid_product } true;main_~tmp~11#1 := main_#t~ret28#1;havoc main_#t~ret28#1; 1014694#L692 assume 0 != main_~tmp~11#1;assume { :begin_inline_setup } true; 1014910#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret21#1, bigMacCall_~tmp~8#1;havoc bigMacCall_~tmp~8#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 1016656#L241 assume !(0 == getOrigin_~person#1); 1018520#L245 assume !(1 == getOrigin_~person#1); 1015203#L249 assume !(2 == getOrigin_~person#1); 1015204#L253 assume !(3 == getOrigin_~person#1); 1017538#L257 assume !(4 == getOrigin_~person#1); 1019403#L261 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 1018316#getOrigin_returnLabel#1 bigMacCall_#t~ret21#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~8#1 := bigMacCall_#t~ret21#1;havoc bigMacCall_#t~ret21#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~8#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1018317#L1431 assume 0 == initPersonOnFloor_~floor#1; 1019085#L1432 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 1012547#L1539-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1018160#L1223 assume !(0 == callOnFloor_~floorID#1); 1012751#L1226 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1012752#L1235-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 1015450#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 1013972#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret21#1, bigMacCall_~tmp~8#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 1013973#L1160 assume !(0 == isFloorCalling_~floorID#1); 1015259#L1164 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 1017562#isFloorCalling_returnLabel#1 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 1022197#isExecutiveFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret76#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 1022195#L2627 assume 0 != stopRequestedAtCurrentFloor_~tmp~22#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1019430#getCurrentFloorID_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret77#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret77#1;havoc stopRequestedAtCurrentFloor_#t~ret77#1; 1018320#L2631 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 1018322#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret92#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret92#1;havoc timeShift_#t~ret92#1; 1023762#L2779 assume !(0 != timeShift_~tmp___9~2#1); 1023439#L2870 assume !(1 == ~doorState~0); 1022067#L2870-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 1021828#L1160-3 assume !(0 == isFloorCalling_~floorID#1); 1017970#L1164-3 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 1017971#isFloorCalling_returnLabel#4 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 1020700#isExecutiveFloorCalling_returnLabel#2 stopRequestedInDirection_#t~ret70#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1; 1020697#L2510 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1020698#getCurrentFloorID_returnLabel#2 stopRequestedInDirection_#t~ret71#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~19#1 := stopRequestedInDirection_#t~ret71#1;havoc stopRequestedInDirection_#t~ret71#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~19#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 1021330#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret99#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret99#1;havoc timeShift_#t~ret99#1; 1021328#L2878 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1; 1021326#L2567 assume !(1 == ~currentHeading~0); 1021233#L2577 assume !(0 == ~currentFloorID~0); 1021231#L2577-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1021216#L2583-1 havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1021212#L2887-2 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 1021207#L1160-25 assume !(0 == isFloorCalling_~floorID#1); 1018129#L1164-25 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 1018130#isFloorCalling_returnLabel#26 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 1020905#isExecutiveFloorCalling_returnLabel#4 __utac_acc__Specification14_spec__1_#t~ret11#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret11#1;havoc __utac_acc__Specification14_spec__1_#t~ret11#1; 1020901#L330 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1); 1020897#L330-1 havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :end_inline___utac_acc__Specification14_spec__1 } true; 1020895#timeShift_returnLabel#1 havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 1020239#L1160-26 assume !(0 == isFloorCalling_~floorID#1); 1020240#L1164-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 1032449#isFloorCalling_returnLabel#27 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 1032252#isExecutiveFloorCalling_returnLabel#5 stopRequestedAtCurrentFloor_#t~ret76#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 1032226#L2627-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~22#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1032220#getCurrentFloorID_returnLabel#5 stopRequestedAtCurrentFloor_#t~ret77#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret77#1;havoc stopRequestedAtCurrentFloor_#t~ret77#1; 1016146#L2631-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 1016148#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret92#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret92#1;havoc timeShift_#t~ret92#1; 1032732#L2779-2 assume !(0 != timeShift_~tmp___9~2#1); 1031326#L2870-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1031325#L2870-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 1031324#L1160-29 assume !(0 == isFloorCalling_~floorID#1); 1018442#L1164-29 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 1012627#isFloorCalling_returnLabel#30 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 1024756#isExecutiveFloorCalling_returnLabel#6 stopRequestedInDirection_#t~ret70#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1; 1024748#L2510-2 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1024749#getCurrentFloorID_returnLabel#6 stopRequestedInDirection_#t~ret71#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~19#1 := stopRequestedInDirection_#t~ret71#1;havoc stopRequestedInDirection_#t~ret71#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~19#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 1030945#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret99#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret99#1;havoc timeShift_#t~ret99#1; 1030943#L2878-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1; 1030942#L2567-3 assume !(1 == ~currentHeading~0); 1030925#L2577-9 assume !(0 == ~currentFloorID~0); 1030922#L2577-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1021936#L2583-7 havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1021827#L2887-5 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 1020244#L1160-51 assume !(0 == isFloorCalling_~floorID#1); 1018981#L1164-51 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 1014431#isFloorCalling_returnLabel#52 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 1024515#isExecutiveFloorCalling_returnLabel#8 __utac_acc__Specification14_spec__1_#t~ret11#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret11#1;havoc __utac_acc__Specification14_spec__1_#t~ret11#1; 1024509#L330-2 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1); 1024505#L330-3 havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :end_inline___utac_acc__Specification14_spec__1 } true; 1024504#timeShift_returnLabel#2 havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 1020249#L1160-52 assume !(0 == isFloorCalling_~floorID#1); 1016958#L1164-52 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 1014594#isFloorCalling_returnLabel#53 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 1021960#isExecutiveFloorCalling_returnLabel#9 stopRequestedAtCurrentFloor_#t~ret76#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 1021952#L2627-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~22#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1021954#getCurrentFloorID_returnLabel#9 stopRequestedAtCurrentFloor_#t~ret77#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret77#1;havoc stopRequestedAtCurrentFloor_#t~ret77#1; 1020254#L2631-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 1020255#stopRequestedAtCurrentFloor_returnLabel#3 timeShift_#t~ret92#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret92#1;havoc timeShift_#t~ret92#1; 1021799#L2779-4 assume !(0 != timeShift_~tmp___9~2#1); 1021798#L2870-6 assume !(1 == ~doorState~0); 1021797#L2870-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 1021795#L1160-55 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 1021796#isFloorCalling_returnLabel#56 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 1030501#isExecutiveFloorCalling_returnLabel#10 stopRequestedInDirection_#t~ret70#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1; 1030500#L2510-4 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1030449#getCurrentFloorID_returnLabel#10 stopRequestedInDirection_#t~ret71#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~19#1 := stopRequestedInDirection_#t~ret71#1;havoc stopRequestedInDirection_#t~ret71#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~19#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 1030448#stopRequestedInDirection_returnLabel#5 timeShift_#t~ret99#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret99#1;havoc timeShift_#t~ret99#1; 1030446#L2878-4 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1; 1030447#L2567-6 assume !(1 == ~currentHeading~0); 1030382#L2577-18 assume !(0 == ~currentFloorID~0); 1030378#L2577-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1030376#L2583-13 havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1030373#L2887-8 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 1030372#L1160-77 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 1020263#isFloorCalling_returnLabel#78 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 1030370#isExecutiveFloorCalling_returnLabel#12 __utac_acc__Specification14_spec__1_#t~ret11#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret11#1;havoc __utac_acc__Specification14_spec__1_#t~ret11#1; 1030368#L330-4 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1); 1030364#L330-5 havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :end_inline___utac_acc__Specification14_spec__1 } true; 1030363#timeShift_returnLabel#3 havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true; 1030362#threeTS_returnLabel#1 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret16#1, bobCall_~tmp~3#1;havoc bobCall_~tmp~3#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 1030357#L241-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 1013898#getOrigin_returnLabel#2 bobCall_#t~ret16#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~3#1 := bobCall_#t~ret16#1;havoc bobCall_#t~ret16#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~3#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1013899#L1431-1 assume 0 == initPersonOnFloor_~floor#1; 1019600#L1432-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 1030070#L1539-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1030066#L1223-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 1030059#L1235-5 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 1030058#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 1030057#bobCall_returnLabel#1 havoc bobCall_#t~ret16#1, bobCall_~tmp~3#1;assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret22#1, cleanup_#t~ret23#1, cleanup_~i~2#1, cleanup_~tmp~9#1, cleanup_~tmp___0~3#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~9#1;havoc cleanup_~tmp___0~3#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 1030056#L1160-78 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 1030054#isFloorCalling_returnLabel#79 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 1030053#isExecutiveFloorCalling_returnLabel#13 stopRequestedAtCurrentFloor_#t~ret76#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 1030052#L2627-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~22#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1019805#getCurrentFloorID_returnLabel#13 stopRequestedAtCurrentFloor_#t~ret77#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret77#1;havoc stopRequestedAtCurrentFloor_#t~ret77#1; 1019806#L2631-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 1015139#stopRequestedAtCurrentFloor_returnLabel#4 timeShift_#t~ret92#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret92#1;havoc timeShift_#t~ret92#1; 1033897#L2779-6 assume !(0 != timeShift_~tmp___9~2#1); 1017554#L2870-9 assume !(1 == ~doorState~0); 1012695#L2870-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 1012696#L1160-81 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 1013070#isFloorCalling_returnLabel#82 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 1017783#isExecutiveFloorCalling_returnLabel#14 stopRequestedInDirection_#t~ret70#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1; 1012849#L2510-6 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1012851#getCurrentFloorID_returnLabel#14 stopRequestedInDirection_#t~ret71#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~19#1 := stopRequestedInDirection_#t~ret71#1;havoc stopRequestedInDirection_#t~ret71#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~19#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 1017282#stopRequestedInDirection_returnLabel#7 timeShift_#t~ret99#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret99#1;havoc timeShift_#t~ret99#1; 1017283#L2878-6 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1; 1015574#L2567-9 assume !(1 == ~currentHeading~0); 1015575#L2577-27 assume !(0 == ~currentFloorID~0); 1020230#L2577-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1020231#L2583-19 havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1039047#L2887-11 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 1039046#L1160-103 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 1039043#isFloorCalling_returnLabel#104 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 1020151#isExecutiveFloorCalling_returnLabel#16 __utac_acc__Specification14_spec__1_#t~ret11#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret11#1;havoc __utac_acc__Specification14_spec__1_#t~ret11#1; 1012963#L330-6 assume 0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1012964#getCurrentFloorID_returnLabel#16 __utac_acc__Specification14_spec__1_#t~ret12#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification14_spec__1_~tmp~2#1 := __utac_acc__Specification14_spec__1_#t~ret12#1;havoc __utac_acc__Specification14_spec__1_#t~ret12#1;assume { :begin_inline_isExecutiveFloor } true;isExecutiveFloor_#in~floorID#1 := __utac_acc__Specification14_spec__1_~tmp~2#1;havoc isExecutiveFloor_#res#1;havoc isExecutiveFloor_~floorID#1, isExecutiveFloor_~retValue_acc~29#1;isExecutiveFloor_~floorID#1 := isExecutiveFloor_#in~floorID#1;havoc isExecutiveFloor_~retValue_acc~29#1;isExecutiveFloor_~retValue_acc~29#1 := (if ~executiveFloor~0 == isExecutiveFloor_~floorID#1 then 1 else 0);isExecutiveFloor_#res#1 := isExecutiveFloor_~retValue_acc~29#1; 1047723#isExecutiveFloor_returnLabel#4 __utac_acc__Specification14_spec__1_#t~ret13#1 := isExecutiveFloor_#res#1;havoc isExecutiveFloor_~floorID#1, isExecutiveFloor_~retValue_acc~29#1;havoc isExecutiveFloor_#in~floorID#1;assume { :end_inline_isExecutiveFloor } true;__utac_acc__Specification14_spec__1_~tmp___0~2#1 := __utac_acc__Specification14_spec__1_#t~ret13#1;havoc __utac_acc__Specification14_spec__1_#t~ret13#1; 1047721#L335-6 assume 0 != __utac_acc__Specification14_spec__1_~tmp___0~2#1; 1047719#L330-7 havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :end_inline___utac_acc__Specification14_spec__1 } true; 1047718#timeShift_returnLabel#4 havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 1047716#L500-2 assume !false; 1047717#L501 [2024-11-09 15:54:02,134 INFO L747 eck$LassoCheckResult]: Loop: 1047717#L501 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 1061762#L504 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 1061760#isBlocked_returnLabel#1 cleanup_#t~ret22#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~3#1 := cleanup_#t~ret22#1;havoc cleanup_#t~ret22#1; 1061757#L508 assume 1 != cleanup_~tmp___0~3#1; 1061756#L508-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret58#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~17#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~17#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret53#1, anyStopRequested_#t~ret54#1, anyStopRequested_#t~ret55#1, anyStopRequested_#t~ret56#1, anyStopRequested_#t~ret57#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~16#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~16#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 1061754#L1160-104 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 1061753#isFloorCalling_returnLabel#105 anyStopRequested_#t~ret53#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret53#1;havoc anyStopRequested_#t~ret53#1; 1061750#L2066 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 1061749#anyStopRequested_returnLabel#1 isIdle_#t~ret58#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret53#1, anyStopRequested_#t~ret54#1, anyStopRequested_#t~ret55#1, anyStopRequested_#t~ret56#1, anyStopRequested_#t~ret57#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~16#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~17#1 := isIdle_#t~ret58#1;havoc isIdle_#t~ret58#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~17#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 1061747#isIdle_returnLabel#1 cleanup_#t~ret23#1 := isIdle_#res#1;havoc isIdle_#t~ret58#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~17#1;assume { :end_inline_isIdle } true;cleanup_~tmp~9#1 := cleanup_#t~ret23#1;havoc cleanup_#t~ret23#1; 1061746#L520 assume !(0 != cleanup_~tmp~9#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 1061743#L1160-109 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 1058714#isFloorCalling_returnLabel#110 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 1061741#isExecutiveFloorCalling_returnLabel#17 stopRequestedAtCurrentFloor_#t~ret76#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 1061740#L2627-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~22#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1061738#getCurrentFloorID_returnLabel#17 stopRequestedAtCurrentFloor_#t~ret77#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret77#1;havoc stopRequestedAtCurrentFloor_#t~ret77#1; 1061737#L2631-4 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 1058238#stopRequestedAtCurrentFloor_returnLabel#5 timeShift_#t~ret92#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret92#1;havoc timeShift_#t~ret92#1; 1058239#L2779-8 assume !(0 != timeShift_~tmp___9~2#1); 1062613#L2870-12 assume 1 == ~doorState~0;~doorState~0 := 0; 1062360#L2870-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 1062359#L1160-112 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 1062358#isFloorCalling_returnLabel#113 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 1062356#isExecutiveFloorCalling_returnLabel#18 stopRequestedInDirection_#t~ret70#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1; 1062355#L2510-8 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1057709#getCurrentFloorID_returnLabel#18 stopRequestedInDirection_#t~ret71#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~19#1 := stopRequestedInDirection_#t~ret71#1;havoc stopRequestedInDirection_#t~ret71#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~19#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 1057706#stopRequestedInDirection_returnLabel#9 timeShift_#t~ret99#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret99#1;havoc timeShift_#t~ret99#1; 1057703#L2878-8 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1; 1057698#L2567-12 assume !(1 == ~currentHeading~0); 1057699#L2577-36 assume !(0 == ~currentFloorID~0); 1057076#L2577-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1057054#L2583-25 havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1057053#L2887-14 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 1057052#L1160-134 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 1056862#isFloorCalling_returnLabel#135 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 1057050#isExecutiveFloorCalling_returnLabel#20 __utac_acc__Specification14_spec__1_#t~ret11#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret11#1;havoc __utac_acc__Specification14_spec__1_#t~ret11#1; 1057049#L330-8 assume 0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1057017#getCurrentFloorID_returnLabel#20 __utac_acc__Specification14_spec__1_#t~ret12#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification14_spec__1_~tmp~2#1 := __utac_acc__Specification14_spec__1_#t~ret12#1;havoc __utac_acc__Specification14_spec__1_#t~ret12#1;assume { :begin_inline_isExecutiveFloor } true;isExecutiveFloor_#in~floorID#1 := __utac_acc__Specification14_spec__1_~tmp~2#1;havoc isExecutiveFloor_#res#1;havoc isExecutiveFloor_~floorID#1, isExecutiveFloor_~retValue_acc~29#1;isExecutiveFloor_~floorID#1 := isExecutiveFloor_#in~floorID#1;havoc isExecutiveFloor_~retValue_acc~29#1;isExecutiveFloor_~retValue_acc~29#1 := (if ~executiveFloor~0 == isExecutiveFloor_~floorID#1 then 1 else 0);isExecutiveFloor_#res#1 := isExecutiveFloor_~retValue_acc~29#1; 1056984#isExecutiveFloor_returnLabel#5 __utac_acc__Specification14_spec__1_#t~ret13#1 := isExecutiveFloor_#res#1;havoc isExecutiveFloor_~floorID#1, isExecutiveFloor_~retValue_acc~29#1;havoc isExecutiveFloor_#in~floorID#1;assume { :end_inline_isExecutiveFloor } true;__utac_acc__Specification14_spec__1_~tmp___0~2#1 := __utac_acc__Specification14_spec__1_#t~ret13#1;havoc __utac_acc__Specification14_spec__1_#t~ret13#1; 1056981#L335-8 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___0~2#1);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 1056971#areDoorsOpen_returnLabel#5 __utac_acc__Specification14_spec__1_#t~ret14#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification14_spec__1_~tmp___1~2#1 := __utac_acc__Specification14_spec__1_#t~ret14#1;havoc __utac_acc__Specification14_spec__1_#t~ret14#1; 1056968#L341-12 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___1~2#1); 1056966#L330-9 havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :end_inline___utac_acc__Specification14_spec__1 } true; 1056958#timeShift_returnLabel#5 havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 1056950#L500-2 assume !false; 1056943#L501 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 1056935#L504 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 1056920#isBlocked_returnLabel#1 cleanup_#t~ret22#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~3#1 := cleanup_#t~ret22#1;havoc cleanup_#t~ret22#1; 1056913#L508 assume 1 != cleanup_~tmp___0~3#1; 1056907#L508-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret58#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~17#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~17#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret53#1, anyStopRequested_#t~ret54#1, anyStopRequested_#t~ret55#1, anyStopRequested_#t~ret56#1, anyStopRequested_#t~ret57#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~16#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~16#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 1056904#L1160-104 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 1056896#isFloorCalling_returnLabel#105 anyStopRequested_#t~ret53#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret53#1;havoc anyStopRequested_#t~ret53#1; 1056886#L2066 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 1056878#anyStopRequested_returnLabel#1 isIdle_#t~ret58#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret53#1, anyStopRequested_#t~ret54#1, anyStopRequested_#t~ret55#1, anyStopRequested_#t~ret56#1, anyStopRequested_#t~ret57#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~16#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~17#1 := isIdle_#t~ret58#1;havoc isIdle_#t~ret58#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~17#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 1056870#isIdle_returnLabel#1 cleanup_#t~ret23#1 := isIdle_#res#1;havoc isIdle_#t~ret58#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~17#1;assume { :end_inline_isIdle } true;cleanup_~tmp~9#1 := cleanup_#t~ret23#1;havoc cleanup_#t~ret23#1; 1056866#L520 assume !(0 != cleanup_~tmp~9#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 1056477#L1160-109 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 1056475#isFloorCalling_returnLabel#110 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 1056474#isExecutiveFloorCalling_returnLabel#17 stopRequestedAtCurrentFloor_#t~ret76#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 1056473#L2627-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~22#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1056472#getCurrentFloorID_returnLabel#17 stopRequestedAtCurrentFloor_#t~ret77#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret77#1;havoc stopRequestedAtCurrentFloor_#t~ret77#1; 1056441#L2631-4 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 1056439#stopRequestedAtCurrentFloor_returnLabel#5 timeShift_#t~ret92#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret92#1;havoc timeShift_#t~ret92#1; 1056437#L2779-8 assume !(0 != timeShift_~tmp___9~2#1); 1056438#L2870-12 assume 1 == ~doorState~0;~doorState~0 := 0; 1058681#L2870-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 1058680#L1160-112 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 1058524#isFloorCalling_returnLabel#113 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 1058673#isExecutiveFloorCalling_returnLabel#18 stopRequestedInDirection_#t~ret70#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1; 1058669#L2510-8 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1058670#getCurrentFloorID_returnLabel#18 stopRequestedInDirection_#t~ret71#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~19#1 := stopRequestedInDirection_#t~ret71#1;havoc stopRequestedInDirection_#t~ret71#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~19#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 1061916#stopRequestedInDirection_returnLabel#9 timeShift_#t~ret99#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret99#1;havoc timeShift_#t~ret99#1; 1061914#L2878-8 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1; 1061915#L2567-12 assume !(1 == ~currentHeading~0); 1057160#L2577-36 assume !(0 == ~currentFloorID~0); 1057158#L2577-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1061783#L2583-25 havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1061782#L2887-14 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 1061781#L1160-134 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 1058779#isFloorCalling_returnLabel#135 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 1061780#isExecutiveFloorCalling_returnLabel#20 __utac_acc__Specification14_spec__1_#t~ret11#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret11#1;havoc __utac_acc__Specification14_spec__1_#t~ret11#1; 1061779#L330-8 assume 0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1061778#getCurrentFloorID_returnLabel#20 __utac_acc__Specification14_spec__1_#t~ret12#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification14_spec__1_~tmp~2#1 := __utac_acc__Specification14_spec__1_#t~ret12#1;havoc __utac_acc__Specification14_spec__1_#t~ret12#1;assume { :begin_inline_isExecutiveFloor } true;isExecutiveFloor_#in~floorID#1 := __utac_acc__Specification14_spec__1_~tmp~2#1;havoc isExecutiveFloor_#res#1;havoc isExecutiveFloor_~floorID#1, isExecutiveFloor_~retValue_acc~29#1;isExecutiveFloor_~floorID#1 := isExecutiveFloor_#in~floorID#1;havoc isExecutiveFloor_~retValue_acc~29#1;isExecutiveFloor_~retValue_acc~29#1 := (if ~executiveFloor~0 == isExecutiveFloor_~floorID#1 then 1 else 0);isExecutiveFloor_#res#1 := isExecutiveFloor_~retValue_acc~29#1; 1061777#isExecutiveFloor_returnLabel#5 __utac_acc__Specification14_spec__1_#t~ret13#1 := isExecutiveFloor_#res#1;havoc isExecutiveFloor_~floorID#1, isExecutiveFloor_~retValue_acc~29#1;havoc isExecutiveFloor_#in~floorID#1;assume { :end_inline_isExecutiveFloor } true;__utac_acc__Specification14_spec__1_~tmp___0~2#1 := __utac_acc__Specification14_spec__1_#t~ret13#1;havoc __utac_acc__Specification14_spec__1_#t~ret13#1; 1061771#L335-8 assume 0 != __utac_acc__Specification14_spec__1_~tmp___0~2#1; 1061768#L330-9 havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :end_inline___utac_acc__Specification14_spec__1 } true; 1061767#timeShift_returnLabel#5 havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 1061766#L500-2 assume !false; 1047717#L501 [2024-11-09 15:54:02,134 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-09 15:54:02,134 INFO L85 PathProgramCache]: Analyzing trace with hash -1544056063, now seen corresponding path program 4 times [2024-11-09 15:54:02,135 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-09 15:54:02,135 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1401198886] [2024-11-09 15:54:02,135 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-09 15:54:02,135 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-09 15:54:02,157 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-09 15:54:02,242 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-09 15:54:02,242 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-09 15:54:02,242 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1401198886] [2024-11-09 15:54:02,242 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1401198886] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-09 15:54:02,242 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-09 15:54:02,242 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2024-11-09 15:54:02,243 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1296439848] [2024-11-09 15:54:02,243 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-09 15:54:02,243 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-09 15:54:02,243 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-09 15:54:02,243 INFO L85 PathProgramCache]: Analyzing trace with hash 504565996, now seen corresponding path program 1 times [2024-11-09 15:54:02,243 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-09 15:54:02,243 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [832832787] [2024-11-09 15:54:02,243 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-09 15:54:02,244 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-09 15:54:02,261 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-09 15:54:02,623 INFO L134 CoverageAnalysis]: Checked inductivity of 43 backedges. 41 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-09 15:54:02,624 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-09 15:54:02,627 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [832832787] [2024-11-09 15:54:02,627 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [832832787] provided 0 perfect and 1 imperfect interpolant sequences [2024-11-09 15:54:02,627 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [834266893] [2024-11-09 15:54:02,627 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-09 15:54:02,627 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-11-09 15:54:02,627 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2024-11-09 15:54:02,629 INFO L229 MonitoredProcess]: Starting monitored process 49 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-11-09 15:54:02,630 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (49)] Waiting until timeout for monitored process [2024-11-09 15:54:02,995 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-09 15:54:02,997 INFO L255 TraceCheckSpWp]: Trace formula consists of 350 conjuncts, 2 conjuncts are in the unsatisfiable core [2024-11-09 15:54:02,999 INFO L278 TraceCheckSpWp]: Computing forward predicates... [2024-11-09 15:54:03,045 INFO L134 CoverageAnalysis]: Checked inductivity of 43 backedges. 43 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-09 15:54:03,045 INFO L307 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2024-11-09 15:54:03,046 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [834266893] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-09 15:54:03,046 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2024-11-09 15:54:03,046 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [5] total 6 [2024-11-09 15:54:03,046 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2110976425] [2024-11-09 15:54:03,046 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-09 15:54:03,046 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-09 15:54:03,046 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-09 15:54:03,047 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-11-09 15:54:03,047 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2024-11-09 15:54:03,047 INFO L87 Difference]: Start difference. First operand 63135 states and 112661 transitions. cyclomatic complexity: 49544 Second operand has 3 states, 3 states have (on average 29.333333333333332) internal successors, (88), 3 states have internal predecessors, (88), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-09 15:54:03,292 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-09 15:54:03,292 INFO L93 Difference]: Finished difference Result 82708 states and 147880 transitions. [2024-11-09 15:54:03,292 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 82708 states and 147880 transitions. [2024-11-09 15:54:03,561 INFO L131 ngComponentsAnalysis]: Automaton has 12 accepting balls. 26875 [2024-11-09 15:54:03,775 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 82708 states to 82708 states and 147880 transitions. [2024-11-09 15:54:03,775 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 61604 [2024-11-09 15:54:03,822 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 61604 [2024-11-09 15:54:03,823 INFO L73 IsDeterministic]: Start isDeterministic. Operand 82708 states and 147880 transitions. [2024-11-09 15:54:03,843 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2024-11-09 15:54:03,843 INFO L218 hiAutomatonCegarLoop]: Abstraction has 82708 states and 147880 transitions. [2024-11-09 15:54:04,655 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 82708 states and 147880 transitions. [2024-11-09 15:54:05,424 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 82708 to 82584. [2024-11-09 15:54:05,500 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 82584 states, 82584 states have (on average 1.7891601278698053) internal successors, (147756), 82583 states have internal predecessors, (147756), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-09 15:54:05,672 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 82584 states to 82584 states and 147756 transitions. [2024-11-09 15:54:05,673 INFO L240 hiAutomatonCegarLoop]: Abstraction has 82584 states and 147756 transitions. [2024-11-09 15:54:05,673 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2024-11-09 15:54:05,673 INFO L425 stractBuchiCegarLoop]: Abstraction has 82584 states and 147756 transitions. [2024-11-09 15:54:05,674 INFO L332 stractBuchiCegarLoop]: ======== Iteration 11 ============ [2024-11-09 15:54:05,674 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 82584 states and 147756 transitions. [2024-11-09 15:54:06,211 INFO L131 ngComponentsAnalysis]: Automaton has 12 accepting balls. 26827 [2024-11-09 15:54:06,212 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-09 15:54:06,212 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-09 15:54:06,214 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-09 15:54:06,214 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1] [2024-11-09 15:54:06,215 INFO L745 eck$LassoCheckResult]: Stem: 1159249#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 1159250#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret28#1, main_~retValue_acc~6#1, main_~tmp~11#1;havoc main_~retValue_acc~6#1;havoc main_~tmp~11#1;assume { :begin_inline_select_helpers } true; 1165359#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1164922#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; 1160797#valid_product_returnLabel#1 main_#t~ret28#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;assume { :end_inline_valid_product } true;main_~tmp~11#1 := main_#t~ret28#1;havoc main_#t~ret28#1; 1160798#L692 assume 0 != main_~tmp~11#1;assume { :begin_inline_setup } true; 1161011#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret21#1, bigMacCall_~tmp~8#1;havoc bigMacCall_~tmp~8#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 1162726#L241 assume !(0 == getOrigin_~person#1); 1164590#L245 assume !(1 == getOrigin_~person#1); 1161300#L249 assume !(2 == getOrigin_~person#1); 1161301#L253 assume !(3 == getOrigin_~person#1); 1163614#L257 assume !(4 == getOrigin_~person#1); 1165473#L261 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 1164384#getOrigin_returnLabel#1 bigMacCall_#t~ret21#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~8#1 := bigMacCall_#t~ret21#1;havoc bigMacCall_#t~ret21#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~8#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1164385#L1431 assume 0 == initPersonOnFloor_~floor#1; 1165164#L1432 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 1158664#L1539-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1164241#L1223 assume !(0 == callOnFloor_~floorID#1); 1158867#L1226 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1158868#L1235-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 1166200#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 1160083#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret21#1, bigMacCall_~tmp~8#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 1160084#L1160 assume !(0 == isFloorCalling_~floorID#1); 1166249#L1164 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 1171738#isFloorCalling_returnLabel#1 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 1171737#isExecutiveFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret76#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 1171735#L2627 assume 0 != stopRequestedAtCurrentFloor_~tmp~22#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1171734#getCurrentFloorID_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret77#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret77#1;havoc stopRequestedAtCurrentFloor_#t~ret77#1; 1171732#L2631 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 1171729#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret92#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret92#1;havoc timeShift_#t~ret92#1; 1171727#L2779 assume !(0 != timeShift_~tmp___9~2#1); 1171725#L2870 assume 1 == ~doorState~0;~doorState~0 := 0; 1171724#L2870-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 1171722#L1160-3 assume !(0 == isFloorCalling_~floorID#1); 1171719#L1164-3 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 1171717#isFloorCalling_returnLabel#4 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 1171716#isExecutiveFloorCalling_returnLabel#2 stopRequestedInDirection_#t~ret70#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1; 1171715#L2510 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1171663#getCurrentFloorID_returnLabel#2 stopRequestedInDirection_#t~ret71#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~19#1 := stopRequestedInDirection_#t~ret71#1;havoc stopRequestedInDirection_#t~ret71#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~19#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 1171662#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret99#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret99#1;havoc timeShift_#t~ret99#1; 1171661#L2878 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1; 1167043#L2567 assume !(1 == ~currentHeading~0); 1167044#L2577 assume !(0 == ~currentFloorID~0); 1167007#L2577-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1167008#L2583-1 havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1171613#L2887-2 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 1171612#L1160-25 assume !(0 == isFloorCalling_~floorID#1); 1171610#L1164-25 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 1171607#isFloorCalling_returnLabel#26 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 1171606#isExecutiveFloorCalling_returnLabel#4 __utac_acc__Specification14_spec__1_#t~ret11#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret11#1;havoc __utac_acc__Specification14_spec__1_#t~ret11#1; 1171605#L330 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1); 1171604#L330-1 havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :end_inline___utac_acc__Specification14_spec__1 } true; 1171603#timeShift_returnLabel#1 havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 1171601#L1160-26 assume !(0 == isFloorCalling_~floorID#1); 1171598#L1164-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 1171596#isFloorCalling_returnLabel#27 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 1171595#isExecutiveFloorCalling_returnLabel#5 stopRequestedAtCurrentFloor_#t~ret76#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 1171594#L2627-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~22#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1166639#getCurrentFloorID_returnLabel#5 stopRequestedAtCurrentFloor_#t~ret77#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret77#1;havoc stopRequestedAtCurrentFloor_#t~ret77#1; 1166640#L2631-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 1171578#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret92#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret92#1;havoc timeShift_#t~ret92#1; 1171577#L2779-2 assume !(0 != timeShift_~tmp___9~2#1); 1166603#L2870-3 assume !(1 == ~doorState~0); 1166602#L2870-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 1166600#L1160-29 assume !(0 == isFloorCalling_~floorID#1); 1166598#L1164-29 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 1166593#isFloorCalling_returnLabel#30 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 1166590#isExecutiveFloorCalling_returnLabel#6 stopRequestedInDirection_#t~ret70#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1; 1166585#L2510-2 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1166586#getCurrentFloorID_returnLabel#6 stopRequestedInDirection_#t~ret71#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~19#1 := stopRequestedInDirection_#t~ret71#1;havoc stopRequestedInDirection_#t~ret71#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~19#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 1170981#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret99#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret99#1;havoc timeShift_#t~ret99#1; 1170980#L2878-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1; 1170979#L2567-3 assume !(1 == ~currentHeading~0); 1170978#L2577-9 assume !(0 == ~currentFloorID~0); 1170977#L2577-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1166431#L2583-7 havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1166432#L2887-5 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 1166427#L1160-51 assume !(0 == isFloorCalling_~floorID#1); 1166428#L1164-51 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 1170956#isFloorCalling_returnLabel#52 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 1170955#isExecutiveFloorCalling_returnLabel#8 __utac_acc__Specification14_spec__1_#t~ret11#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret11#1;havoc __utac_acc__Specification14_spec__1_#t~ret11#1; 1166370#L330-2 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1); 1166371#L330-3 havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :end_inline___utac_acc__Specification14_spec__1 } true; 1166366#timeShift_returnLabel#2 havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 1166367#L1160-52 assume !(0 == isFloorCalling_~floorID#1); 1166362#L1164-52 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 1166350#isFloorCalling_returnLabel#53 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 1166347#isExecutiveFloorCalling_returnLabel#9 stopRequestedAtCurrentFloor_#t~ret76#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 1166331#L2627-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~22#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1166321#getCurrentFloorID_returnLabel#9 stopRequestedAtCurrentFloor_#t~ret77#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret77#1;havoc stopRequestedAtCurrentFloor_#t~ret77#1; 1166287#L2631-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 1166288#stopRequestedAtCurrentFloor_returnLabel#3 timeShift_#t~ret92#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret92#1;havoc timeShift_#t~ret92#1; 1166303#L2779-4 assume !(0 != timeShift_~tmp___9~2#1); 1166304#L2870-6 assume !(1 == ~doorState~0); 1183150#L2870-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 1186165#L1160-55 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 1186166#isFloorCalling_returnLabel#56 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 1186464#isExecutiveFloorCalling_returnLabel#10 stopRequestedInDirection_#t~ret70#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1; 1186463#L2510-4 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1186408#getCurrentFloorID_returnLabel#10 stopRequestedInDirection_#t~ret71#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~19#1 := stopRequestedInDirection_#t~ret71#1;havoc stopRequestedInDirection_#t~ret71#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~19#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 1186407#stopRequestedInDirection_returnLabel#5 timeShift_#t~ret99#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret99#1;havoc timeShift_#t~ret99#1; 1186406#L2878-4 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1; 1186299#L2567-6 assume !(1 == ~currentHeading~0); 1186293#L2577-18 assume !(0 == ~currentFloorID~0); 1186289#L2577-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1186286#L2583-13 havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1186284#L2887-8 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 1186283#L1160-77 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 1186065#isFloorCalling_returnLabel#78 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 1186281#isExecutiveFloorCalling_returnLabel#12 __utac_acc__Specification14_spec__1_#t~ret11#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret11#1;havoc __utac_acc__Specification14_spec__1_#t~ret11#1; 1186279#L330-4 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1); 1186275#L330-5 havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :end_inline___utac_acc__Specification14_spec__1 } true; 1186274#timeShift_returnLabel#3 havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true; 1186273#threeTS_returnLabel#1 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret16#1, bobCall_~tmp~3#1;havoc bobCall_~tmp~3#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 1186269#L241-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 1186266#getOrigin_returnLabel#2 bobCall_#t~ret16#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~3#1 := bobCall_#t~ret16#1;havoc bobCall_#t~ret16#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~3#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1186265#L1431-1 assume 0 == initPersonOnFloor_~floor#1; 1186251#L1432-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 1186230#L1539-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1186229#L1223-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 1160635#L1235-5 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 1160668#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 1164774#bobCall_returnLabel#1 havoc bobCall_#t~ret16#1, bobCall_~tmp~3#1;assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret22#1, cleanup_#t~ret23#1, cleanup_~i~2#1, cleanup_~tmp~9#1, cleanup_~tmp___0~3#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~9#1;havoc cleanup_~tmp___0~3#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 1163193#L1160-78 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 1163194#isFloorCalling_returnLabel#79 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 1182118#isExecutiveFloorCalling_returnLabel#13 stopRequestedAtCurrentFloor_#t~ret76#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 1182119#L2627-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~22#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1177076#getCurrentFloorID_returnLabel#13 stopRequestedAtCurrentFloor_#t~ret77#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret77#1;havoc stopRequestedAtCurrentFloor_#t~ret77#1; 1177077#L2631-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 1182883#stopRequestedAtCurrentFloor_returnLabel#4 timeShift_#t~ret92#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret92#1;havoc timeShift_#t~ret92#1; 1189153#L2779-6 assume !(0 != timeShift_~tmp___9~2#1); 1163632#L2870-9 assume !(1 == ~doorState~0); 1163633#L2870-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 1202429#L1160-81 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 1202428#isFloorCalling_returnLabel#82 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 1202427#isExecutiveFloorCalling_returnLabel#14 stopRequestedInDirection_#t~ret70#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1; 1202426#L2510-6 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1202354#getCurrentFloorID_returnLabel#14 stopRequestedInDirection_#t~ret71#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~19#1 := stopRequestedInDirection_#t~ret71#1;havoc stopRequestedInDirection_#t~ret71#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~19#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 1202353#stopRequestedInDirection_returnLabel#7 timeShift_#t~ret99#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret99#1;havoc timeShift_#t~ret99#1; 1202351#L2878-6 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1; 1202352#L2567-9 assume !(1 == ~currentHeading~0); 1202543#L2577-27 assume !(0 == ~currentFloorID~0); 1202541#L2577-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1190389#L2583-19 havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1158669#L2887-11 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 1158670#L1160-103 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 1189275#isFloorCalling_returnLabel#104 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 1189276#isExecutiveFloorCalling_returnLabel#16 __utac_acc__Specification14_spec__1_#t~ret11#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret11#1;havoc __utac_acc__Specification14_spec__1_#t~ret11#1; 1202160#L330-6 assume 0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1199485#getCurrentFloorID_returnLabel#16 __utac_acc__Specification14_spec__1_#t~ret12#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification14_spec__1_~tmp~2#1 := __utac_acc__Specification14_spec__1_#t~ret12#1;havoc __utac_acc__Specification14_spec__1_#t~ret12#1;assume { :begin_inline_isExecutiveFloor } true;isExecutiveFloor_#in~floorID#1 := __utac_acc__Specification14_spec__1_~tmp~2#1;havoc isExecutiveFloor_#res#1;havoc isExecutiveFloor_~floorID#1, isExecutiveFloor_~retValue_acc~29#1;isExecutiveFloor_~floorID#1 := isExecutiveFloor_#in~floorID#1;havoc isExecutiveFloor_~retValue_acc~29#1;isExecutiveFloor_~retValue_acc~29#1 := (if ~executiveFloor~0 == isExecutiveFloor_~floorID#1 then 1 else 0);isExecutiveFloor_#res#1 := isExecutiveFloor_~retValue_acc~29#1; 1199486#isExecutiveFloor_returnLabel#4 __utac_acc__Specification14_spec__1_#t~ret13#1 := isExecutiveFloor_#res#1;havoc isExecutiveFloor_~floorID#1, isExecutiveFloor_~retValue_acc~29#1;havoc isExecutiveFloor_#in~floorID#1;assume { :end_inline_isExecutiveFloor } true;__utac_acc__Specification14_spec__1_~tmp___0~2#1 := __utac_acc__Specification14_spec__1_#t~ret13#1;havoc __utac_acc__Specification14_spec__1_#t~ret13#1; 1199479#L335-6 assume 0 != __utac_acc__Specification14_spec__1_~tmp___0~2#1; 1199478#L330-7 havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :end_inline___utac_acc__Specification14_spec__1 } true; 1199473#timeShift_returnLabel#4 havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 1199474#L500-2 assume !false; 1202145#L501 [2024-11-09 15:54:06,215 INFO L747 eck$LassoCheckResult]: Loop: 1202145#L501 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 1221952#L504 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 1221950#isBlocked_returnLabel#1 cleanup_#t~ret22#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~3#1 := cleanup_#t~ret22#1;havoc cleanup_#t~ret22#1; 1221948#L508 assume 1 != cleanup_~tmp___0~3#1; 1221946#L508-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret58#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~17#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~17#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret53#1, anyStopRequested_#t~ret54#1, anyStopRequested_#t~ret55#1, anyStopRequested_#t~ret56#1, anyStopRequested_#t~ret57#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~16#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~16#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 1221944#L1160-104 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 1221942#isFloorCalling_returnLabel#105 anyStopRequested_#t~ret53#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret53#1;havoc anyStopRequested_#t~ret53#1; 1221940#L2066 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 1221938#anyStopRequested_returnLabel#1 isIdle_#t~ret58#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret53#1, anyStopRequested_#t~ret54#1, anyStopRequested_#t~ret55#1, anyStopRequested_#t~ret56#1, anyStopRequested_#t~ret57#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~16#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~17#1 := isIdle_#t~ret58#1;havoc isIdle_#t~ret58#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~17#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 1221936#isIdle_returnLabel#1 cleanup_#t~ret23#1 := isIdle_#res#1;havoc isIdle_#t~ret58#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~17#1;assume { :end_inline_isIdle } true;cleanup_~tmp~9#1 := cleanup_#t~ret23#1;havoc cleanup_#t~ret23#1; 1221934#L520 assume !(0 != cleanup_~tmp~9#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 1221932#L1160-109 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 1217168#isFloorCalling_returnLabel#110 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 1221930#isExecutiveFloorCalling_returnLabel#17 stopRequestedAtCurrentFloor_#t~ret76#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 1221928#L2627-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~22#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1221926#getCurrentFloorID_returnLabel#17 stopRequestedAtCurrentFloor_#t~ret77#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret77#1;havoc stopRequestedAtCurrentFloor_#t~ret77#1; 1221923#L2631-4 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 1221924#stopRequestedAtCurrentFloor_returnLabel#5 timeShift_#t~ret92#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret92#1;havoc timeShift_#t~ret92#1; 1223386#L2779-8 assume !(0 != timeShift_~tmp___9~2#1); 1223385#L2870-12 assume !(1 == ~doorState~0); 1223010#L2870-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 1223384#L1160-112 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 1223383#isFloorCalling_returnLabel#113 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 1223382#isExecutiveFloorCalling_returnLabel#18 stopRequestedInDirection_#t~ret70#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1; 1223380#L2510-8 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1223343#getCurrentFloorID_returnLabel#18 stopRequestedInDirection_#t~ret71#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~19#1 := stopRequestedInDirection_#t~ret71#1;havoc stopRequestedInDirection_#t~ret71#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~19#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 1223342#stopRequestedInDirection_returnLabel#9 timeShift_#t~ret99#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret99#1;havoc timeShift_#t~ret99#1; 1223341#L2878-8 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1; 1223339#L2567-12 assume !(1 == ~currentHeading~0); 1223338#L2577-36 assume !(0 == ~currentFloorID~0); 1223335#L2577-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1221036#L2583-25 havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1221035#L2887-14 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 1221034#L1160-134 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 1220258#isFloorCalling_returnLabel#135 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 1221033#isExecutiveFloorCalling_returnLabel#20 __utac_acc__Specification14_spec__1_#t~ret11#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret11#1;havoc __utac_acc__Specification14_spec__1_#t~ret11#1; 1221032#L330-8 assume 0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1221031#getCurrentFloorID_returnLabel#20 __utac_acc__Specification14_spec__1_#t~ret12#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification14_spec__1_~tmp~2#1 := __utac_acc__Specification14_spec__1_#t~ret12#1;havoc __utac_acc__Specification14_spec__1_#t~ret12#1;assume { :begin_inline_isExecutiveFloor } true;isExecutiveFloor_#in~floorID#1 := __utac_acc__Specification14_spec__1_~tmp~2#1;havoc isExecutiveFloor_#res#1;havoc isExecutiveFloor_~floorID#1, isExecutiveFloor_~retValue_acc~29#1;isExecutiveFloor_~floorID#1 := isExecutiveFloor_#in~floorID#1;havoc isExecutiveFloor_~retValue_acc~29#1;isExecutiveFloor_~retValue_acc~29#1 := (if ~executiveFloor~0 == isExecutiveFloor_~floorID#1 then 1 else 0);isExecutiveFloor_#res#1 := isExecutiveFloor_~retValue_acc~29#1; 1221030#isExecutiveFloor_returnLabel#5 __utac_acc__Specification14_spec__1_#t~ret13#1 := isExecutiveFloor_#res#1;havoc isExecutiveFloor_~floorID#1, isExecutiveFloor_~retValue_acc~29#1;havoc isExecutiveFloor_#in~floorID#1;assume { :end_inline_isExecutiveFloor } true;__utac_acc__Specification14_spec__1_~tmp___0~2#1 := __utac_acc__Specification14_spec__1_#t~ret13#1;havoc __utac_acc__Specification14_spec__1_#t~ret13#1; 1221029#L335-8 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___0~2#1);assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 1221028#areDoorsOpen_returnLabel#5 __utac_acc__Specification14_spec__1_#t~ret14#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification14_spec__1_~tmp___1~2#1 := __utac_acc__Specification14_spec__1_#t~ret14#1;havoc __utac_acc__Specification14_spec__1_#t~ret14#1; 1221027#L341-12 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___1~2#1); 1221026#L330-9 havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :end_inline___utac_acc__Specification14_spec__1 } true; 1221025#timeShift_returnLabel#5 havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 1221024#L500-2 assume !false; 1221023#L501 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 1221022#L504 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 1221021#isBlocked_returnLabel#1 cleanup_#t~ret22#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~3#1 := cleanup_#t~ret22#1;havoc cleanup_#t~ret22#1; 1221020#L508 assume 1 != cleanup_~tmp___0~3#1; 1221017#L508-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret58#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~17#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~17#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret53#1, anyStopRequested_#t~ret54#1, anyStopRequested_#t~ret55#1, anyStopRequested_#t~ret56#1, anyStopRequested_#t~ret57#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~16#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~16#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 1221016#L1160-104 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 1216854#isFloorCalling_returnLabel#105 anyStopRequested_#t~ret53#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret53#1;havoc anyStopRequested_#t~ret53#1; 1215997#L2066 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 1215985#anyStopRequested_returnLabel#1 isIdle_#t~ret58#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret53#1, anyStopRequested_#t~ret54#1, anyStopRequested_#t~ret55#1, anyStopRequested_#t~ret56#1, anyStopRequested_#t~ret57#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~16#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~17#1 := isIdle_#t~ret58#1;havoc isIdle_#t~ret58#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~17#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 1215982#isIdle_returnLabel#1 cleanup_#t~ret23#1 := isIdle_#res#1;havoc isIdle_#t~ret58#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~17#1;assume { :end_inline_isIdle } true;cleanup_~tmp~9#1 := cleanup_#t~ret23#1;havoc cleanup_#t~ret23#1; 1215979#L520 assume !(0 != cleanup_~tmp~9#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 1215975#L1160-109 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 1215974#isFloorCalling_returnLabel#110 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 1215973#isExecutiveFloorCalling_returnLabel#17 stopRequestedAtCurrentFloor_#t~ret76#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 1215972#L2627-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~22#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1215971#getCurrentFloorID_returnLabel#17 stopRequestedAtCurrentFloor_#t~ret77#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret77#1;havoc stopRequestedAtCurrentFloor_#t~ret77#1; 1215947#L2631-4 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 1215949#stopRequestedAtCurrentFloor_returnLabel#5 timeShift_#t~ret92#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret92#1;havoc timeShift_#t~ret92#1; 1215907#L2779-8 assume !(0 != timeShift_~tmp___9~2#1); 1215908#L2870-12 assume !(1 == ~doorState~0); 1222322#L2870-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 1223436#L1160-112 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 1217969#isFloorCalling_returnLabel#113 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 1222594#isExecutiveFloorCalling_returnLabel#18 stopRequestedInDirection_#t~ret70#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1; 1222164#L2510-8 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1222139#getCurrentFloorID_returnLabel#18 stopRequestedInDirection_#t~ret71#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~19#1 := stopRequestedInDirection_#t~ret71#1;havoc stopRequestedInDirection_#t~ret71#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~19#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 1222138#stopRequestedInDirection_returnLabel#9 timeShift_#t~ret99#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret99#1;havoc timeShift_#t~ret99#1; 1222136#L2878-8 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1; 1222133#L2567-12 assume !(1 == ~currentHeading~0); 1222131#L2577-36 assume !(0 == ~currentFloorID~0); 1222001#L2577-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1221981#L2583-25 havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1221976#L2887-14 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 1221974#L1160-134 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 1217298#isFloorCalling_returnLabel#135 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 1221972#isExecutiveFloorCalling_returnLabel#20 __utac_acc__Specification14_spec__1_#t~ret11#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret11#1;havoc __utac_acc__Specification14_spec__1_#t~ret11#1; 1221970#L330-8 assume 0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1221968#getCurrentFloorID_returnLabel#20 __utac_acc__Specification14_spec__1_#t~ret12#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification14_spec__1_~tmp~2#1 := __utac_acc__Specification14_spec__1_#t~ret12#1;havoc __utac_acc__Specification14_spec__1_#t~ret12#1;assume { :begin_inline_isExecutiveFloor } true;isExecutiveFloor_#in~floorID#1 := __utac_acc__Specification14_spec__1_~tmp~2#1;havoc isExecutiveFloor_#res#1;havoc isExecutiveFloor_~floorID#1, isExecutiveFloor_~retValue_acc~29#1;isExecutiveFloor_~floorID#1 := isExecutiveFloor_#in~floorID#1;havoc isExecutiveFloor_~retValue_acc~29#1;isExecutiveFloor_~retValue_acc~29#1 := (if ~executiveFloor~0 == isExecutiveFloor_~floorID#1 then 1 else 0);isExecutiveFloor_#res#1 := isExecutiveFloor_~retValue_acc~29#1; 1221966#isExecutiveFloor_returnLabel#5 __utac_acc__Specification14_spec__1_#t~ret13#1 := isExecutiveFloor_#res#1;havoc isExecutiveFloor_~floorID#1, isExecutiveFloor_~retValue_acc~29#1;havoc isExecutiveFloor_#in~floorID#1;assume { :end_inline_isExecutiveFloor } true;__utac_acc__Specification14_spec__1_~tmp___0~2#1 := __utac_acc__Specification14_spec__1_#t~ret13#1;havoc __utac_acc__Specification14_spec__1_#t~ret13#1; 1221963#L335-8 assume 0 != __utac_acc__Specification14_spec__1_~tmp___0~2#1; 1221958#L330-9 havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :end_inline___utac_acc__Specification14_spec__1 } true; 1221956#timeShift_returnLabel#5 havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 1221954#L500-2 assume !false; 1202145#L501 [2024-11-09 15:54:06,216 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-09 15:54:06,216 INFO L85 PathProgramCache]: Analyzing trace with hash 920364357, now seen corresponding path program 1 times [2024-11-09 15:54:06,218 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-09 15:54:06,218 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [771635897] [2024-11-09 15:54:06,219 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-09 15:54:06,219 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-09 15:54:06,257 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-09 15:54:06,342 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-09 15:54:06,342 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-09 15:54:06,342 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [771635897] [2024-11-09 15:54:06,342 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [771635897] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-09 15:54:06,343 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-09 15:54:06,343 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2024-11-09 15:54:06,343 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [487602314] [2024-11-09 15:54:06,343 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-09 15:54:06,343 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-09 15:54:06,343 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-09 15:54:06,343 INFO L85 PathProgramCache]: Analyzing trace with hash -122073684, now seen corresponding path program 1 times [2024-11-09 15:54:06,344 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-09 15:54:06,344 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1943833545] [2024-11-09 15:54:06,344 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-09 15:54:06,344 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-09 15:54:06,363 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-09 15:54:06,395 INFO L134 CoverageAnalysis]: Checked inductivity of 43 backedges. 41 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2024-11-09 15:54:06,395 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-09 15:54:06,395 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1943833545] [2024-11-09 15:54:06,395 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1943833545] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-09 15:54:06,395 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-09 15:54:06,395 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-09 15:54:06,396 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [163754923] [2024-11-09 15:54:06,396 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-09 15:54:06,397 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-11-09 15:54:06,397 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-09 15:54:06,397 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-11-09 15:54:06,397 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-11-09 15:54:06,397 INFO L87 Difference]: Start difference. First operand 82584 states and 147756 transitions. cyclomatic complexity: 65190 Second operand has 3 states, 3 states have (on average 29.0) internal successors, (87), 3 states have internal predecessors, (87), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-09 15:54:06,947 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-09 15:54:06,947 INFO L93 Difference]: Finished difference Result 139910 states and 249835 transitions. [2024-11-09 15:54:06,948 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 139910 states and 249835 transitions. [2024-11-09 15:54:07,846 INFO L131 ngComponentsAnalysis]: Automaton has 21 accepting balls. 41994 [2024-11-09 15:54:08,208 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 139910 states to 139910 states and 249835 transitions. [2024-11-09 15:54:08,208 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 106898 [2024-11-09 15:54:08,281 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 106898 [2024-11-09 15:54:08,282 INFO L73 IsDeterministic]: Start isDeterministic. Operand 139910 states and 249835 transitions. [2024-11-09 15:54:08,283 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2024-11-09 15:54:08,283 INFO L218 hiAutomatonCegarLoop]: Abstraction has 139910 states and 249835 transitions. [2024-11-09 15:54:08,363 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 139910 states and 249835 transitions. [2024-11-09 15:54:10,106 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 139910 to 139510. [2024-11-09 15:54:10,213 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 139510 states, 139510 states have (on average 1.7871335388144218) internal successors, (249323), 139509 states have internal predecessors, (249323), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-09 15:54:10,512 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 139510 states to 139510 states and 249323 transitions. [2024-11-09 15:54:10,512 INFO L240 hiAutomatonCegarLoop]: Abstraction has 139510 states and 249323 transitions. [2024-11-09 15:54:10,512 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2024-11-09 15:54:10,513 INFO L425 stractBuchiCegarLoop]: Abstraction has 139510 states and 249323 transitions. [2024-11-09 15:54:10,513 INFO L332 stractBuchiCegarLoop]: ======== Iteration 12 ============ [2024-11-09 15:54:10,513 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 139510 states and 249323 transitions. [2024-11-09 15:54:10,937 INFO L131 ngComponentsAnalysis]: Automaton has 21 accepting balls. 41914 [2024-11-09 15:54:10,937 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-09 15:54:10,937 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-09 15:54:10,939 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-09 15:54:10,939 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-09 15:54:10,940 INFO L745 eck$LassoCheckResult]: Stem: 1381753#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 1381754#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret28#1, main_~retValue_acc~6#1, main_~tmp~11#1;havoc main_~retValue_acc~6#1;havoc main_~tmp~11#1;assume { :begin_inline_select_helpers } true; 1388061#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1387604#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; 1383324#valid_product_returnLabel#1 main_#t~ret28#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;assume { :end_inline_valid_product } true;main_~tmp~11#1 := main_#t~ret28#1;havoc main_#t~ret28#1; 1383325#L692 assume 0 != main_~tmp~11#1;assume { :begin_inline_setup } true; 1383539#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret21#1, bigMacCall_~tmp~8#1;havoc bigMacCall_~tmp~8#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 1385295#L241 assume !(0 == getOrigin_~person#1); 1387261#L245 assume !(1 == getOrigin_~person#1); 1383839#L249 assume !(2 == getOrigin_~person#1); 1383840#L253 assume !(3 == getOrigin_~person#1); 1386205#L257 assume !(4 == getOrigin_~person#1); 1388197#L261 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 1387039#getOrigin_returnLabel#1 bigMacCall_#t~ret21#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~8#1 := bigMacCall_#t~ret21#1;havoc bigMacCall_#t~ret21#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~8#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1387040#L1431 assume 0 == initPersonOnFloor_~floor#1; 1387856#L1432 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 1381168#L1539-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1386885#L1223 assume !(0 == callOnFloor_~floorID#1); 1381372#L1226 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1381373#L1235-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 1389088#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 1382596#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret21#1, bigMacCall_~tmp~8#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 1382597#L1160 assume !(0 == isFloorCalling_~floorID#1); 1386238#L1164 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 1386239#isFloorCalling_returnLabel#1 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 1389134#isExecutiveFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret76#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 1389133#L2627 assume 0 != stopRequestedAtCurrentFloor_~tmp~22#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1389132#getCurrentFloorID_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret77#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret77#1;havoc stopRequestedAtCurrentFloor_#t~ret77#1; 1389130#L2631 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 1389131#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret92#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret92#1;havoc timeShift_#t~ret92#1; 1389159#L2779 assume !(0 != timeShift_~tmp___9~2#1); 1389157#L2870 assume !(1 == ~doorState~0); 1389149#L2870-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 1389150#L1160-3 assume !(0 == isFloorCalling_~floorID#1); 1386692#L1164-3 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 1386693#isFloorCalling_returnLabel#4 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 1391302#isExecutiveFloorCalling_returnLabel#2 stopRequestedInDirection_#t~ret70#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1; 1391299#L2510 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1391300#getCurrentFloorID_returnLabel#2 stopRequestedInDirection_#t~ret71#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~19#1 := stopRequestedInDirection_#t~ret71#1;havoc stopRequestedInDirection_#t~ret71#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~19#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 1399685#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret99#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret99#1;havoc timeShift_#t~ret99#1; 1399684#L2878 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1; 1399683#L2567 assume !(1 == ~currentHeading~0); 1399680#L2577 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1399679#L2577-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1391164#L2583-1 havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1391162#L2887-2 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 1391160#L1160-25 assume !(0 == isFloorCalling_~floorID#1); 1391158#L1164-25 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 1391156#isFloorCalling_returnLabel#26 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 1399608#isExecutiveFloorCalling_returnLabel#4 __utac_acc__Specification14_spec__1_#t~ret11#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret11#1;havoc __utac_acc__Specification14_spec__1_#t~ret11#1; 1399607#L330 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1); 1391137#L330-1 havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :end_inline___utac_acc__Specification14_spec__1 } true; 1391138#timeShift_returnLabel#1 havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 1391132#L1160-26 assume !(0 == isFloorCalling_~floorID#1); 1391120#L1164-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 1391116#isFloorCalling_returnLabel#27 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 1391115#isExecutiveFloorCalling_returnLabel#5 stopRequestedAtCurrentFloor_#t~ret76#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 1391114#L2627-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~22#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1391113#getCurrentFloorID_returnLabel#5 stopRequestedAtCurrentFloor_#t~ret77#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret77#1;havoc stopRequestedAtCurrentFloor_#t~ret77#1; 1391037#L2631-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 1391033#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret92#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret92#1;havoc timeShift_#t~ret92#1; 1391029#L2779-2 assume !(0 != timeShift_~tmp___9~2#1); 1391027#L2870-3 assume !(1 == ~doorState~0); 1391026#L2870-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 1391024#L1160-29 assume !(0 == isFloorCalling_~floorID#1); 1391014#L1164-29 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 1391011#isFloorCalling_returnLabel#30 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 1391010#isExecutiveFloorCalling_returnLabel#6 stopRequestedInDirection_#t~ret70#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1; 1391008#L2510-2 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1391009#getCurrentFloorID_returnLabel#6 stopRequestedInDirection_#t~ret71#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~19#1 := stopRequestedInDirection_#t~ret71#1;havoc stopRequestedInDirection_#t~ret71#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~19#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 1391622#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret99#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret99#1;havoc timeShift_#t~ret99#1; 1391620#L2878-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1; 1391619#L2567-3 assume !(1 == ~currentHeading~0); 1391608#L2577-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1391602#L2577-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1390577#L2583-7 havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1390576#L2887-5 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 1390574#L1160-51 assume !(0 == isFloorCalling_~floorID#1); 1390573#L1164-51 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 1390566#isFloorCalling_returnLabel#52 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 1390564#isExecutiveFloorCalling_returnLabel#8 __utac_acc__Specification14_spec__1_#t~ret11#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret11#1;havoc __utac_acc__Specification14_spec__1_#t~ret11#1; 1389899#L330-2 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1); 1389893#L330-3 havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :end_inline___utac_acc__Specification14_spec__1 } true; 1389891#timeShift_returnLabel#2 havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 1389888#L1160-52 assume !(0 == isFloorCalling_~floorID#1); 1389885#L1164-52 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 1389875#isFloorCalling_returnLabel#53 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 1389873#isExecutiveFloorCalling_returnLabel#9 stopRequestedAtCurrentFloor_#t~ret76#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 1389870#L2627-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~22#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1389867#getCurrentFloorID_returnLabel#9 stopRequestedAtCurrentFloor_#t~ret77#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret77#1;havoc stopRequestedAtCurrentFloor_#t~ret77#1; 1389864#L2631-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 1389858#stopRequestedAtCurrentFloor_returnLabel#3 timeShift_#t~ret92#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret92#1;havoc timeShift_#t~ret92#1; 1389856#L2779-4 assume !(0 != timeShift_~tmp___9~2#1); 1389851#L2870-6 assume !(1 == ~doorState~0); 1389852#L2870-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 1397957#L1160-55 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 1397958#isFloorCalling_returnLabel#56 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 1421980#isExecutiveFloorCalling_returnLabel#10 stopRequestedInDirection_#t~ret70#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1; 1421978#L2510-4 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1389083#getCurrentFloorID_returnLabel#10 stopRequestedInDirection_#t~ret71#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~19#1 := stopRequestedInDirection_#t~ret71#1;havoc stopRequestedInDirection_#t~ret71#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~19#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 1386180#stopRequestedInDirection_returnLabel#5 timeShift_#t~ret99#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret99#1;havoc timeShift_#t~ret99#1; 1386181#L2878-4 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1; 1387850#L2567-6 assume !(1 == ~currentHeading~0); 1411265#L2577-18 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1388172#L2577-20 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1385397#L2583-13 havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1384458#L2887-8 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 1384984#L1160-77 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 1384985#isFloorCalling_returnLabel#78 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 1411269#isExecutiveFloorCalling_returnLabel#12 __utac_acc__Specification14_spec__1_#t~ret11#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret11#1;havoc __utac_acc__Specification14_spec__1_#t~ret11#1; 1411266#L330-4 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1); 1411268#L330-5 havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :end_inline___utac_acc__Specification14_spec__1 } true; 1420785#timeShift_returnLabel#3 havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true; 1420783#threeTS_returnLabel#1 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret16#1, bobCall_~tmp~3#1;havoc bobCall_~tmp~3#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 1420784#L241-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 1425998#getOrigin_returnLabel#2 bobCall_#t~ret16#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~3#1 := bobCall_#t~ret16#1;havoc bobCall_#t~ret16#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~3#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1425997#L1431-1 assume 0 == initPersonOnFloor_~floor#1; 1420995#L1432-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 1420975#L1539-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1386329#L1223-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 1386330#L1235-5 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 1409768#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 1409769#bobCall_returnLabel#1 havoc bobCall_#t~ret16#1, bobCall_~tmp~3#1;assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret22#1, cleanup_#t~ret23#1, cleanup_~i~2#1, cleanup_~tmp~9#1, cleanup_~tmp___0~3#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~9#1;havoc cleanup_~tmp___0~3#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 1402284#L1160-78 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 1402285#isFloorCalling_returnLabel#79 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 1420902#isExecutiveFloorCalling_returnLabel#13 stopRequestedAtCurrentFloor_#t~ret76#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 1420903#L2627-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~22#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1420882#getCurrentFloorID_returnLabel#13 stopRequestedAtCurrentFloor_#t~ret77#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret77#1;havoc stopRequestedAtCurrentFloor_#t~ret77#1; 1420883#L2631-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 1423029#stopRequestedAtCurrentFloor_returnLabel#4 timeShift_#t~ret92#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret92#1;havoc timeShift_#t~ret92#1; 1423030#L2779-6 assume !(0 != timeShift_~tmp___9~2#1); 1425233#L2870-9 assume !(1 == ~doorState~0); 1456852#L2870-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~19#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 1456849#L1160-81 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 1456848#isFloorCalling_returnLabel#82 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 1456481#isExecutiveFloorCalling_returnLabel#14 stopRequestedInDirection_#t~ret70#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret70#1;havoc stopRequestedInDirection_#t~ret70#1; 1456274#L2510-6 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1456131#getCurrentFloorID_returnLabel#14 stopRequestedInDirection_#t~ret71#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~19#1 := stopRequestedInDirection_#t~ret71#1;havoc stopRequestedInDirection_#t~ret71#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~19#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 1456032#stopRequestedInDirection_returnLabel#7 timeShift_#t~ret99#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~19#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret99#1;havoc timeShift_#t~ret99#1; 1456029#L2878-6 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~20#1;~currentHeading~0 := continueInDirection_~dir#1; 1456025#L2567-9 assume !(1 == ~currentHeading~0); 1456026#L2577-27 assume !(0 == ~currentFloorID~0); 1455964#L2577-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1455886#L2583-19 havoc continueInDirection_#t~ret73#1, continueInDirection_~dir#1, continueInDirection_~tmp~20#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1459108#L2887-11 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 1459107#L1160-103 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 1446823#isFloorCalling_returnLabel#104 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 1459106#isExecutiveFloorCalling_returnLabel#16 __utac_acc__Specification14_spec__1_#t~ret11#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret11#1;havoc __utac_acc__Specification14_spec__1_#t~ret11#1; 1459105#L330-6 assume 0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1459104#getCurrentFloorID_returnLabel#16 __utac_acc__Specification14_spec__1_#t~ret12#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification14_spec__1_~tmp~2#1 := __utac_acc__Specification14_spec__1_#t~ret12#1;havoc __utac_acc__Specification14_spec__1_#t~ret12#1;assume { :begin_inline_isExecutiveFloor } true;isExecutiveFloor_#in~floorID#1 := __utac_acc__Specification14_spec__1_~tmp~2#1;havoc isExecutiveFloor_#res#1;havoc isExecutiveFloor_~floorID#1, isExecutiveFloor_~retValue_acc~29#1;isExecutiveFloor_~floorID#1 := isExecutiveFloor_#in~floorID#1;havoc isExecutiveFloor_~retValue_acc~29#1;isExecutiveFloor_~retValue_acc~29#1 := (if ~executiveFloor~0 == isExecutiveFloor_~floorID#1 then 1 else 0);isExecutiveFloor_#res#1 := isExecutiveFloor_~retValue_acc~29#1; 1459103#isExecutiveFloor_returnLabel#4 __utac_acc__Specification14_spec__1_#t~ret13#1 := isExecutiveFloor_#res#1;havoc isExecutiveFloor_~floorID#1, isExecutiveFloor_~retValue_acc~29#1;havoc isExecutiveFloor_#in~floorID#1;assume { :end_inline_isExecutiveFloor } true;__utac_acc__Specification14_spec__1_~tmp___0~2#1 := __utac_acc__Specification14_spec__1_#t~ret13#1;havoc __utac_acc__Specification14_spec__1_#t~ret13#1; 1459101#L335-6 assume 0 != __utac_acc__Specification14_spec__1_~tmp___0~2#1; 1458991#L330-7 havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :end_inline___utac_acc__Specification14_spec__1 } true; 1458992#timeShift_returnLabel#4 havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 1458980#L500-2 assume !false; 1458981#L501 [2024-11-09 15:54:10,941 INFO L747 eck$LassoCheckResult]: Loop: 1458981#L501 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 1500276#L504 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 1500274#isBlocked_returnLabel#1 cleanup_#t~ret22#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~3#1 := cleanup_#t~ret22#1;havoc cleanup_#t~ret22#1; 1500272#L508 assume 1 != cleanup_~tmp___0~3#1; 1500270#L508-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret58#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~17#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~17#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret53#1, anyStopRequested_#t~ret54#1, anyStopRequested_#t~ret55#1, anyStopRequested_#t~ret56#1, anyStopRequested_#t~ret57#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~16#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~16#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 1500268#L1160-104 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 1500266#isFloorCalling_returnLabel#105 anyStopRequested_#t~ret53#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret53#1;havoc anyStopRequested_#t~ret53#1; 1500264#L2066 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 1500262#anyStopRequested_returnLabel#1 isIdle_#t~ret58#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret53#1, anyStopRequested_#t~ret54#1, anyStopRequested_#t~ret55#1, anyStopRequested_#t~ret56#1, anyStopRequested_#t~ret57#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~16#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~0#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~17#1 := isIdle_#t~ret58#1;havoc isIdle_#t~ret58#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~17#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 1500260#isIdle_returnLabel#1 cleanup_#t~ret23#1 := isIdle_#res#1;havoc isIdle_#t~ret58#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~17#1;assume { :end_inline_isIdle } true;cleanup_~tmp~9#1 := cleanup_#t~ret23#1;havoc cleanup_#t~ret23#1; 1500258#L520 assume !(0 != cleanup_~tmp~9#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 1500256#L1160-109 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 1486732#isFloorCalling_returnLabel#110 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 1500254#isExecutiveFloorCalling_returnLabel#17 stopRequestedAtCurrentFloor_#t~ret76#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 1500252#L2627-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~22#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1500250#getCurrentFloorID_returnLabel#17 stopRequestedAtCurrentFloor_#t~ret77#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret77#1;havoc stopRequestedAtCurrentFloor_#t~ret77#1; 1500246#L2631-4 assume ~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret74#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret75#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~21#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~21#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 1500244#L1160-110 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 1500242#isFloorCalling_returnLabel#111 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret74#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret74#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret74#1; 1500240#L2600-8 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1; 1500226#stopRequestedAtCurrentFloor__wrappee__empty_returnLabel#9 stopRequestedAtCurrentFloor_#t~ret78#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret74#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret75#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~21#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := stopRequestedAtCurrentFloor_#t~ret78#1;havoc stopRequestedAtCurrentFloor_#t~ret78#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 1500838#stopRequestedAtCurrentFloor_returnLabel#5 timeShift_#t~ret92#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_#t~ret77#1, stopRequestedAtCurrentFloor_#t~ret78#1, stopRequestedAtCurrentFloor_#t~ret79#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret92#1;havoc timeShift_#t~ret92#1; 1500837#L2779-8 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 1500219#L2781-8 assume !(0 != ~persons_0~0); 1500817#L2781-9 assume !(0 != ~persons_1~0); 1500811#L2795-4 assume !(0 != ~persons_2~0); 1500790#L2809-4 assume !(0 != ~persons_3~0); 1500788#L2823-4 assume !(0 != ~persons_4~0); 1500783#L2837-4 assume !(0 != ~persons_5~0); 1500775#L2851-4 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret80#1, processWaitingOnFloor_#t~ret81#1, processWaitingOnFloor_#t~ret82#1, processWaitingOnFloor_#t~ret83#1, processWaitingOnFloor_#t~ret84#1, processWaitingOnFloor_#t~ret85#1, processWaitingOnFloor_#t~ret86#1, processWaitingOnFloor_#t~ret87#1, processWaitingOnFloor_#t~ret88#1, processWaitingOnFloor_#t~ret89#1, processWaitingOnFloor_#t~ret90#1, processWaitingOnFloor_#t~ret91#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~23#1, processWaitingOnFloor_~tmp___0~10#1, processWaitingOnFloor_~tmp___1~6#1, processWaitingOnFloor_~tmp___2~4#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~23#1;havoc processWaitingOnFloor_~tmp___0~10#1;havoc processWaitingOnFloor_~tmp___1~6#1;havoc processWaitingOnFloor_~tmp___2~4#1;havoc processWaitingOnFloor_~tmp___3~2#1;havoc processWaitingOnFloor_~tmp___4~1#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~11#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~11#1; 1500773#L1251-48 assume 0 == isPersonOnFloor_~floor#1; 1500762#L1252-24 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~11#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~11#1; 1500730#isPersonOnFloor_returnLabel#25 processWaitingOnFloor_#t~ret80#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~11#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~10#1 := processWaitingOnFloor_#t~ret80#1;havoc processWaitingOnFloor_#t~ret80#1; 1500728#L2681-12 assume !(0 != processWaitingOnFloor_~tmp___0~10#1); 1500726#L2681-14 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~11#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~11#1; 1500723#L1251-50 assume 0 == isPersonOnFloor_~floor#1; 1500724#L1252-25 assume !(0 == isPersonOnFloor_~person#1); 1500701#L1256-25 assume 1 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~11#1 := ~personOnFloor_1_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~11#1; 1500682#isPersonOnFloor_returnLabel#26 processWaitingOnFloor_#t~ret82#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~11#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~4#1 := processWaitingOnFloor_#t~ret82#1;havoc processWaitingOnFloor_#t~ret82#1; 1500679#L2694-12 assume !(0 != processWaitingOnFloor_~tmp___2~4#1); 1500676#L2694-14 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~11#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~11#1; 1500671#L1251-52 assume 0 == isPersonOnFloor_~floor#1; 1500670#L1252-26 assume !(0 == isPersonOnFloor_~person#1); 1500665#L1256-26 assume !(1 == isPersonOnFloor_~person#1); 1500535#L1260-26 assume 2 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~11#1 := ~personOnFloor_2_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~11#1; 1500528#isPersonOnFloor_returnLabel#27 processWaitingOnFloor_#t~ret84#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~11#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~1#1 := processWaitingOnFloor_#t~ret84#1;havoc processWaitingOnFloor_#t~ret84#1; 1500526#L2707-12 assume !(0 != processWaitingOnFloor_~tmp___4~1#1); 1500524#L2707-14 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~11#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~11#1; 1500522#L1251-54 assume 0 == isPersonOnFloor_~floor#1; 1500523#L1252-27 assume !(0 == isPersonOnFloor_~person#1); 1500550#L1256-27 assume !(1 == isPersonOnFloor_~person#1); 1500549#L1260-27 assume !(2 == isPersonOnFloor_~person#1); 1500505#L1264-27 assume 3 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~11#1 := ~personOnFloor_3_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~11#1; 1500498#isPersonOnFloor_returnLabel#28 processWaitingOnFloor_#t~ret86#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~11#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret86#1;havoc processWaitingOnFloor_#t~ret86#1; 1500496#L2720-12 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 1500494#L2720-14 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~11#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~11#1; 1500492#L1251-56 assume 0 == isPersonOnFloor_~floor#1; 1500490#L1252-28 assume !(0 == isPersonOnFloor_~person#1); 1500488#L1256-28 assume !(1 == isPersonOnFloor_~person#1); 1500487#L1260-28 assume !(2 == isPersonOnFloor_~person#1); 1500486#L1264-28 assume !(3 == isPersonOnFloor_~person#1); 1500409#L1268-28 assume 4 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~11#1 := ~personOnFloor_4_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~11#1; 1500399#isPersonOnFloor_returnLabel#29 processWaitingOnFloor_#t~ret88#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~11#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret88#1;havoc processWaitingOnFloor_#t~ret88#1; 1500392#L2733-12 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 1500390#L2733-14 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~11#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~11#1; 1500378#L1251-58 assume !(0 == isPersonOnFloor_~floor#1); 1500372#L1284-58 assume !(1 == isPersonOnFloor_~floor#1); 1500371#L1317-58 assume !(2 == isPersonOnFloor_~floor#1); 1500368#L1350-58 assume !(3 == isPersonOnFloor_~floor#1); 1500365#L1383-87 assume !(4 == isPersonOnFloor_~floor#1); 1500349#L1383-89 isPersonOnFloor_~retValue_acc~11#1 := 0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~11#1; 1500344#isPersonOnFloor_returnLabel#30 processWaitingOnFloor_#t~ret90#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~11#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret90#1;havoc processWaitingOnFloor_#t~ret90#1; 1500336#L2746-12 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 1500334#L2746-14 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 1500332#L1195-68 assume !(0 == resetCallOnFloor_~floorID#1); 1500330#L1198-68 assume 1 == resetCallOnFloor_~floorID#1;~calls_1~0 := 0; 1500327#L1207-104 havoc resetCallOnFloor_~floorID#1;havoc resetCallOnFloor_#in~floorID#1;assume { :end_inline_resetCallOnFloor } true; 1500326#processWaitingOnFloor_returnLabel#5 havoc processWaitingOnFloor_#t~ret80#1, processWaitingOnFloor_#t~ret81#1, processWaitingOnFloor_#t~ret82#1, processWaitingOnFloor_#t~ret83#1, processWaitingOnFloor_#t~ret84#1, processWaitingOnFloor_#t~ret85#1, processWaitingOnFloor_#t~ret86#1, processWaitingOnFloor_#t~ret87#1, processWaitingOnFloor_#t~ret88#1, processWaitingOnFloor_#t~ret89#1, processWaitingOnFloor_#t~ret90#1, processWaitingOnFloor_#t~ret91#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~23#1, processWaitingOnFloor_~tmp___0~10#1, processWaitingOnFloor_~tmp___1~6#1, processWaitingOnFloor_~tmp___2~4#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;havoc processWaitingOnFloor_#in~floorID#1;assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 1500319#L1929-8 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 1500305#L1941-14 havoc resetFloorButton_~floorID#1;havoc resetFloorButton_#in~floorID#1;assume { :end_inline_resetFloorButton } true; 1500300#L2887-14 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification14_spec__1_~tmp~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~10#1; 1500298#L1160-134 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~10#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~10#1; 1486821#isFloorCalling_returnLabel#135 isExecutiveFloorCalling_#t~ret129#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~10#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret129#1;havoc isExecutiveFloorCalling_#t~ret129#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 1500296#isExecutiveFloorCalling_returnLabel#20 __utac_acc__Specification14_spec__1_#t~ret11#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret129#1, isExecutiveFloorCalling_~retValue_acc~28#1;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~0#1 := __utac_acc__Specification14_spec__1_#t~ret11#1;havoc __utac_acc__Specification14_spec__1_#t~ret11#1; 1500294#L330-8 assume 0 != __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1500292#getCurrentFloorID_returnLabel#20 __utac_acc__Specification14_spec__1_#t~ret12#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification14_spec__1_~tmp~2#1 := __utac_acc__Specification14_spec__1_#t~ret12#1;havoc __utac_acc__Specification14_spec__1_#t~ret12#1;assume { :begin_inline_isExecutiveFloor } true;isExecutiveFloor_#in~floorID#1 := __utac_acc__Specification14_spec__1_~tmp~2#1;havoc isExecutiveFloor_#res#1;havoc isExecutiveFloor_~floorID#1, isExecutiveFloor_~retValue_acc~29#1;isExecutiveFloor_~floorID#1 := isExecutiveFloor_#in~floorID#1;havoc isExecutiveFloor_~retValue_acc~29#1;isExecutiveFloor_~retValue_acc~29#1 := (if ~executiveFloor~0 == isExecutiveFloor_~floorID#1 then 1 else 0);isExecutiveFloor_#res#1 := isExecutiveFloor_~retValue_acc~29#1; 1500290#isExecutiveFloor_returnLabel#5 __utac_acc__Specification14_spec__1_#t~ret13#1 := isExecutiveFloor_#res#1;havoc isExecutiveFloor_~floorID#1, isExecutiveFloor_~retValue_acc~29#1;havoc isExecutiveFloor_#in~floorID#1;assume { :end_inline_isExecutiveFloor } true;__utac_acc__Specification14_spec__1_~tmp___0~2#1 := __utac_acc__Specification14_spec__1_#t~ret13#1;havoc __utac_acc__Specification14_spec__1_#t~ret13#1; 1500285#L335-8 assume 0 != __utac_acc__Specification14_spec__1_~tmp___0~2#1; 1500282#L330-9 havoc __utac_acc__Specification14_spec__1_#t~ret11#1, __utac_acc__Specification14_spec__1_#t~ret12#1, __utac_acc__Specification14_spec__1_#t~ret13#1, __utac_acc__Specification14_spec__1_#t~ret14#1, __utac_acc__Specification14_spec__1_~tmp~2#1, __utac_acc__Specification14_spec__1_~tmp___0~2#1, __utac_acc__Specification14_spec__1_~tmp___1~2#1, __utac_acc__Specification14_spec__1_~tmp___2~0#1;assume { :end_inline___utac_acc__Specification14_spec__1 } true; 1500280#timeShift_returnLabel#5 havoc timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_~tmp~24#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 1500278#L500-2 assume !false; 1458981#L501 [2024-11-09 15:54:10,942 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-09 15:54:10,942 INFO L85 PathProgramCache]: Analyzing trace with hash -349772861, now seen corresponding path program 1 times [2024-11-09 15:54:10,942 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-09 15:54:10,942 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1532835874] [2024-11-09 15:54:10,942 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-09 15:54:10,942 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-09 15:54:10,977 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat