./Ultimate.py --spec ../../sv-benchmarks/c/Termination.prp --file ../../sv-benchmarks/c/product-lines/elevator_spec14_product19_true-unreach-call_true-termination.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for termination Using default analysis Version 5842f4b8 Calling Ultimate with: java -Dosgi.configuration.area=/tmp/vcloud-vcloud-master/worker/working_dir_1565a7fb-9549-4849-b471-ed1ec8354dd7/bin-2019/uautomizer/data/config -Xmx12G -Xms1G -jar /tmp/vcloud-vcloud-master/worker/working_dir_1565a7fb-9549-4849-b471-ed1ec8354dd7/bin-2019/uautomizer/plugins/org.eclipse.equinox.launcher_1.3.100.v20150511-1540.jar -data @noDefault -ultimatedata /tmp/vcloud-vcloud-master/worker/working_dir_1565a7fb-9549-4849-b471-ed1ec8354dd7/bin-2019/uautomizer/data -tc /tmp/vcloud-vcloud-master/worker/working_dir_1565a7fb-9549-4849-b471-ed1ec8354dd7/bin-2019/uautomizer/config/AutomizerTermination.xml -i ../../sv-benchmarks/c/product-lines/elevator_spec14_product19_true-unreach-call_true-termination.cil.c -s /tmp/vcloud-vcloud-master/worker/working_dir_1565a7fb-9549-4849-b471-ed1ec8354dd7/bin-2019/uautomizer/config/svcomp-Termination-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud-vcloud-master/worker/working_dir_1565a7fb-9549-4849-b471-ed1ec8354dd7/bin-2019/uautomizer --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(F end) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 7081c0762c221e2c23313e8cd77b3fddf82a21d6 ........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................ Execution finished normally Writing output log to file Ultimate.log Result: TRUE --- Real Ultimate output --- This is Ultimate 0.1.23-5842f4b [2018-11-18 15:37:48,290 INFO L170 SettingsManager]: Resetting all preferences to default values... [2018-11-18 15:37:48,292 INFO L174 SettingsManager]: Resetting UltimateCore preferences to default values [2018-11-18 15:37:48,300 INFO L177 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2018-11-18 15:37:48,300 INFO L174 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2018-11-18 15:37:48,300 INFO L174 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2018-11-18 15:37:48,301 INFO L174 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2018-11-18 15:37:48,302 INFO L174 SettingsManager]: Resetting LassoRanker preferences to default values [2018-11-18 15:37:48,303 INFO L174 SettingsManager]: Resetting Reaching Definitions preferences to default values [2018-11-18 15:37:48,304 INFO L174 SettingsManager]: Resetting SyntaxChecker preferences to default values [2018-11-18 15:37:48,304 INFO L177 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2018-11-18 15:37:48,304 INFO L174 SettingsManager]: Resetting LTL2Aut preferences to default values [2018-11-18 15:37:48,305 INFO L174 SettingsManager]: Resetting PEA to Boogie preferences to default values [2018-11-18 15:37:48,306 INFO L174 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2018-11-18 15:37:48,306 INFO L174 SettingsManager]: Resetting ChcToBoogie preferences to default values [2018-11-18 15:37:48,307 INFO L174 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2018-11-18 15:37:48,307 INFO L174 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2018-11-18 15:37:48,308 INFO L174 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2018-11-18 15:37:48,309 INFO L174 SettingsManager]: Resetting CodeCheck preferences to default values [2018-11-18 15:37:48,310 INFO L174 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2018-11-18 15:37:48,311 INFO L174 SettingsManager]: Resetting RCFGBuilder preferences to default values [2018-11-18 15:37:48,312 INFO L174 SettingsManager]: Resetting TraceAbstraction preferences to default values [2018-11-18 15:37:48,313 INFO L177 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2018-11-18 15:37:48,313 INFO L177 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2018-11-18 15:37:48,313 INFO L174 SettingsManager]: Resetting TreeAutomizer preferences to default values [2018-11-18 15:37:48,314 INFO L174 SettingsManager]: Resetting IcfgTransformer preferences to default values [2018-11-18 15:37:48,314 INFO L174 SettingsManager]: Resetting Boogie Printer preferences to default values [2018-11-18 15:37:48,315 INFO L174 SettingsManager]: Resetting ReqPrinter preferences to default values [2018-11-18 15:37:48,315 INFO L174 SettingsManager]: Resetting Witness Printer preferences to default values [2018-11-18 15:37:48,316 INFO L177 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2018-11-18 15:37:48,316 INFO L174 SettingsManager]: Resetting CDTParser preferences to default values [2018-11-18 15:37:48,317 INFO L177 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2018-11-18 15:37:48,317 INFO L177 SettingsManager]: ReqParser provides no preferences, ignoring... [2018-11-18 15:37:48,317 INFO L174 SettingsManager]: Resetting SmtParser preferences to default values [2018-11-18 15:37:48,318 INFO L174 SettingsManager]: Resetting Witness Parser preferences to default values [2018-11-18 15:37:48,318 INFO L181 SettingsManager]: Finished resetting all preferences to default values... [2018-11-18 15:37:48,318 INFO L98 SettingsManager]: Beginning loading settings from /tmp/vcloud-vcloud-master/worker/working_dir_1565a7fb-9549-4849-b471-ed1ec8354dd7/bin-2019/uautomizer/config/svcomp-Termination-32bit-Automizer_Default.epf [2018-11-18 15:37:48,328 INFO L110 SettingsManager]: Loading preferences was successful [2018-11-18 15:37:48,328 INFO L112 SettingsManager]: Preferences different from defaults after loading the file: [2018-11-18 15:37:48,329 INFO L131 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2018-11-18 15:37:48,329 INFO L133 SettingsManager]: * Create parallel compositions if possible=false [2018-11-18 15:37:48,329 INFO L133 SettingsManager]: * Use SBE=true [2018-11-18 15:37:48,329 INFO L131 SettingsManager]: Preferences of BuchiAutomizer differ from their defaults: [2018-11-18 15:37:48,329 INFO L133 SettingsManager]: * NCSB implementation=INTSET_LAZY3 [2018-11-18 15:37:48,330 INFO L133 SettingsManager]: * Use old map elimination=false [2018-11-18 15:37:48,330 INFO L133 SettingsManager]: * Use external solver (rank synthesis)=false [2018-11-18 15:37:48,330 INFO L133 SettingsManager]: * Use only trivial implications for array writes=true [2018-11-18 15:37:48,330 INFO L133 SettingsManager]: * Rank analysis=LINEAR_WITH_GUESSES [2018-11-18 15:37:48,330 INFO L131 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2018-11-18 15:37:48,330 INFO L133 SettingsManager]: * sizeof long=4 [2018-11-18 15:37:48,330 INFO L133 SettingsManager]: * Check unreachability of error function in SV-COMP mode=false [2018-11-18 15:37:48,330 INFO L133 SettingsManager]: * Overapproximate operations on floating types=true [2018-11-18 15:37:48,330 INFO L133 SettingsManager]: * sizeof POINTER=4 [2018-11-18 15:37:48,331 INFO L133 SettingsManager]: * Check division by zero=IGNORE [2018-11-18 15:37:48,331 INFO L133 SettingsManager]: * Pointer to allocated memory at dereference=ASSUME [2018-11-18 15:37:48,331 INFO L133 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=ASSUME [2018-11-18 15:37:48,331 INFO L133 SettingsManager]: * Check array bounds for arrays that are off heap=ASSUME [2018-11-18 15:37:48,331 INFO L133 SettingsManager]: * sizeof long double=12 [2018-11-18 15:37:48,331 INFO L133 SettingsManager]: * Check if freed pointer was valid=false [2018-11-18 15:37:48,331 INFO L133 SettingsManager]: * Assume nondeterminstic values are in range=false [2018-11-18 15:37:48,331 INFO L133 SettingsManager]: * Use constant arrays=true [2018-11-18 15:37:48,331 INFO L133 SettingsManager]: * Pointer base address is valid at dereference=ASSUME [2018-11-18 15:37:48,332 INFO L131 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2018-11-18 15:37:48,332 INFO L133 SettingsManager]: * Size of a code block=SequenceOfStatements [2018-11-18 15:37:48,332 INFO L133 SettingsManager]: * To the following directory=/home/matthias/ultimate/dump [2018-11-18 15:37:48,332 INFO L131 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2018-11-18 15:37:48,332 INFO L133 SettingsManager]: * Trace refinement strategy=CAMEL [2018-11-18 15:37:48,332 INFO L133 SettingsManager]: * Dump automata to the following directory=/home/matthias/ultimate/dump/auto [2018-11-18 15:37:48,333 INFO L131 SettingsManager]: Preferences of IcfgTransformer differ from their defaults: [2018-11-18 15:37:48,333 INFO L133 SettingsManager]: * TransformationType=MODULO_NEIGHBOR Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud-vcloud-master/worker/working_dir_1565a7fb-9549-4849-b471-ed1ec8354dd7/bin-2019/uautomizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(F end) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 7081c0762c221e2c23313e8cd77b3fddf82a21d6 [2018-11-18 15:37:48,354 INFO L81 nceAwareModelManager]: Repository-Root is: /tmp [2018-11-18 15:37:48,363 INFO L258 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2018-11-18 15:37:48,365 INFO L214 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2018-11-18 15:37:48,366 INFO L271 PluginConnector]: Initializing CDTParser... [2018-11-18 15:37:48,366 INFO L276 PluginConnector]: CDTParser initialized [2018-11-18 15:37:48,367 INFO L418 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud-vcloud-master/worker/working_dir_1565a7fb-9549-4849-b471-ed1ec8354dd7/bin-2019/uautomizer/../../sv-benchmarks/c/product-lines/elevator_spec14_product19_true-unreach-call_true-termination.cil.c [2018-11-18 15:37:48,410 INFO L221 CDTParser]: Created temporary CDT project at /tmp/vcloud-vcloud-master/worker/working_dir_1565a7fb-9549-4849-b471-ed1ec8354dd7/bin-2019/uautomizer/data/75b01d8c6/8bfeedcf088546f79540d7279bbd7828/FLAG321440565 [2018-11-18 15:37:48,883 INFO L307 CDTParser]: Found 1 translation units. [2018-11-18 15:37:48,884 INFO L161 CDTParser]: Scanning /tmp/vcloud-vcloud-master/worker/working_dir_1565a7fb-9549-4849-b471-ed1ec8354dd7/sv-benchmarks/c/product-lines/elevator_spec14_product19_true-unreach-call_true-termination.cil.c [2018-11-18 15:37:48,895 INFO L355 CDTParser]: About to delete temporary CDT project at /tmp/vcloud-vcloud-master/worker/working_dir_1565a7fb-9549-4849-b471-ed1ec8354dd7/bin-2019/uautomizer/data/75b01d8c6/8bfeedcf088546f79540d7279bbd7828/FLAG321440565 [2018-11-18 15:37:49,388 INFO L363 CDTParser]: Successfully deleted /tmp/vcloud-vcloud-master/worker/working_dir_1565a7fb-9549-4849-b471-ed1ec8354dd7/bin-2019/uautomizer/data/75b01d8c6/8bfeedcf088546f79540d7279bbd7828 [2018-11-18 15:37:49,390 INFO L296 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2018-11-18 15:37:49,391 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2018-11-18 15:37:49,392 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2018-11-18 15:37:49,392 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2018-11-18 15:37:49,394 INFO L276 PluginConnector]: CACSL2BoogieTranslator initialized [2018-11-18 15:37:49,395 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 18.11 03:37:49" (1/1) ... [2018-11-18 15:37:49,397 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@7764f50d and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 03:37:49, skipping insertion in model container [2018-11-18 15:37:49,397 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 18.11 03:37:49" (1/1) ... [2018-11-18 15:37:49,403 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2018-11-18 15:37:49,446 INFO L176 MainTranslator]: Built tables and reachable declarations [2018-11-18 15:37:49,854 INFO L201 PostProcessor]: Analyzing one entry point: main [2018-11-18 15:37:49,862 INFO L191 MainTranslator]: Completed pre-run [2018-11-18 15:37:49,934 INFO L201 PostProcessor]: Analyzing one entry point: main [2018-11-18 15:37:49,963 INFO L195 MainTranslator]: Completed translation [2018-11-18 15:37:49,963 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 03:37:49 WrapperNode [2018-11-18 15:37:49,963 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2018-11-18 15:37:49,964 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2018-11-18 15:37:49,964 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2018-11-18 15:37:49,964 INFO L276 PluginConnector]: Boogie Procedure Inliner initialized [2018-11-18 15:37:49,969 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 03:37:49" (1/1) ... [2018-11-18 15:37:49,992 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 03:37:49" (1/1) ... [2018-11-18 15:37:50,141 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2018-11-18 15:37:50,141 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2018-11-18 15:37:50,141 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2018-11-18 15:37:50,142 INFO L276 PluginConnector]: Boogie Preprocessor initialized [2018-11-18 15:37:50,149 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 03:37:49" (1/1) ... [2018-11-18 15:37:50,149 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 03:37:49" (1/1) ... [2018-11-18 15:37:50,170 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 03:37:49" (1/1) ... [2018-11-18 15:37:50,171 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 03:37:49" (1/1) ... [2018-11-18 15:37:50,223 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 03:37:49" (1/1) ... [2018-11-18 15:37:50,278 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 03:37:49" (1/1) ... [2018-11-18 15:37:50,298 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 03:37:49" (1/1) ... [2018-11-18 15:37:50,324 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2018-11-18 15:37:50,324 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2018-11-18 15:37:50,324 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2018-11-18 15:37:50,324 INFO L276 PluginConnector]: RCFGBuilder initialized [2018-11-18 15:37:50,325 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 03:37:49" (1/1) ... No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_1565a7fb-9549-4849-b471-ed1ec8354dd7/bin-2019/uautomizer/z3 Starting monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 15:37:50,365 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.alloc [2018-11-18 15:37:50,366 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2018-11-18 15:37:50,366 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2018-11-18 15:37:56,750 INFO L278 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2018-11-18 15:37:56,751 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 18.11 03:37:56 BoogieIcfgContainer [2018-11-18 15:37:56,751 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2018-11-18 15:37:56,751 INFO L113 PluginConnector]: ------------------------BuchiAutomizer---------------------------- [2018-11-18 15:37:56,751 INFO L271 PluginConnector]: Initializing BuchiAutomizer... [2018-11-18 15:37:56,753 INFO L276 PluginConnector]: BuchiAutomizer initialized [2018-11-18 15:37:56,754 INFO L102 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2018-11-18 15:37:56,754 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "CDTParser AST 18.11 03:37:49" (1/3) ... [2018-11-18 15:37:56,755 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@520f61c4 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 18.11 03:37:56, skipping insertion in model container [2018-11-18 15:37:56,755 INFO L102 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2018-11-18 15:37:56,755 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 03:37:49" (2/3) ... [2018-11-18 15:37:56,755 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@520f61c4 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 18.11 03:37:56, skipping insertion in model container [2018-11-18 15:37:56,755 INFO L102 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2018-11-18 15:37:56,755 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 18.11 03:37:56" (3/3) ... [2018-11-18 15:37:56,757 INFO L375 chiAutomizerObserver]: Analyzing ICFG elevator_spec14_product19_true-unreach-call_true-termination.cil.c [2018-11-18 15:37:56,793 INFO L133 ementStrategyFactory]: Using default assertion order modulation [2018-11-18 15:37:56,794 INFO L374 BuchiCegarLoop]: Interprodecural is true [2018-11-18 15:37:56,794 INFO L375 BuchiCegarLoop]: Hoare is false [2018-11-18 15:37:56,794 INFO L376 BuchiCegarLoop]: Compute interpolants for ForwardPredicates [2018-11-18 15:37:56,794 INFO L377 BuchiCegarLoop]: Backedges is STRAIGHT_LINE [2018-11-18 15:37:56,794 INFO L378 BuchiCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2018-11-18 15:37:56,794 INFO L379 BuchiCegarLoop]: Difference is false [2018-11-18 15:37:56,794 INFO L380 BuchiCegarLoop]: Minimize is MINIMIZE_SEVPA [2018-11-18 15:37:56,794 INFO L383 BuchiCegarLoop]: ======== Iteration 0==of CEGAR loop == BuchiCegarLoop======== [2018-11-18 15:37:56,916 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 6037 states. [2018-11-18 15:37:56,997 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1224 [2018-11-18 15:37:56,997 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-18 15:37:56,997 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-18 15:37:57,011 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 15:37:57,011 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 15:37:57,011 INFO L442 BuchiCegarLoop]: ======== Iteration 1============ [2018-11-18 15:37:57,011 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 6037 states. [2018-11-18 15:37:57,046 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1224 [2018-11-18 15:37:57,046 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-18 15:37:57,046 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-18 15:37:57,049 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 15:37:57,049 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 15:37:57,056 INFO L794 eck$LassoCheckResult]: Stem: 3697#ULTIMATE.startENTRYtrue assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];call #t~string52.base, #t~string52.offset := #Ultimate.alloc(10);call #t~string54.base, #t~string54.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string54.base,#t~string54.offset := 91];#memory_int := #memory_int[#t~string54.base,1 + #t~string54.offset := 95];#memory_int := #memory_int[#t~string54.base,2 + #t~string54.offset := 93];#memory_int := #memory_int[#t~string54.base,3 + #t~string54.offset := 0];call #t~string56.base, #t~string56.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string56.base,#t~string56.offset := 91];#memory_int := #memory_int[#t~string56.base,1 + #t~string56.offset := 93];#memory_int := #memory_int[#t~string56.base,2 + #t~string56.offset := 32];#memory_int := #memory_int[#t~string56.base,3 + #t~string56.offset := 0];call #t~string58.base, #t~string58.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string58.base,#t~string58.offset := 32];#memory_int := #memory_int[#t~string58.base,1 + #t~string58.offset := 97];#memory_int := #memory_int[#t~string58.base,2 + #t~string58.offset := 116];#memory_int := #memory_int[#t~string58.base,3 + #t~string58.offset := 32];#memory_int := #memory_int[#t~string58.base,4 + #t~string58.offset := 0];call #t~string60.base, #t~string60.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string60.base,#t~string60.offset := 37];#memory_int := #memory_int[#t~string60.base,1 + #t~string60.offset := 105];#memory_int := #memory_int[#t~string60.base,2 + #t~string60.offset := 0];call #t~string62.base, #t~string62.offset := #Ultimate.alloc(10);call #t~string64.base, #t~string64.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string64.base,#t~string64.offset := 117];#memory_int := #memory_int[#t~string64.base,1 + #t~string64.offset := 112];#memory_int := #memory_int[#t~string64.base,2 + #t~string64.offset := 0];call #t~string66.base, #t~string66.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string66.base,#t~string66.offset := 100];#memory_int := #memory_int[#t~string66.base,1 + #t~string66.offset := 111];#memory_int := #memory_int[#t~string66.base,2 + #t~string66.offset := 119];#memory_int := #memory_int[#t~string66.base,3 + #t~string66.offset := 110];#memory_int := #memory_int[#t~string66.base,4 + #t~string66.offset := 0];call #t~string68.base, #t~string68.offset := #Ultimate.alloc(7);#memory_int := #memory_int[#t~string68.base,#t~string68.offset := 32];#memory_int := #memory_int[#t~string68.base,1 + #t~string68.offset := 73];#memory_int := #memory_int[#t~string68.base,2 + #t~string68.offset := 76];#memory_int := #memory_int[#t~string68.base,3 + #t~string68.offset := 95];#memory_int := #memory_int[#t~string68.base,4 + #t~string68.offset := 112];#memory_int := #memory_int[#t~string68.base,5 + #t~string68.offset := 58];#memory_int := #memory_int[#t~string68.base,6 + #t~string68.offset := 0];call #t~string70.base, #t~string70.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string70.base,#t~string70.offset := 32];#memory_int := #memory_int[#t~string70.base,1 + #t~string70.offset := 37];#memory_int := #memory_int[#t~string70.base,2 + #t~string70.offset := 105];#memory_int := #memory_int[#t~string70.base,3 + #t~string70.offset := 0];call #t~string72.base, #t~string72.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string72.base,#t~string72.offset := 32];#memory_int := #memory_int[#t~string72.base,1 + #t~string72.offset := 37];#memory_int := #memory_int[#t~string72.base,2 + #t~string72.offset := 105];#memory_int := #memory_int[#t~string72.base,3 + #t~string72.offset := 0];call #t~string74.base, #t~string74.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string74.base,#t~string74.offset := 32];#memory_int := #memory_int[#t~string74.base,1 + #t~string74.offset := 37];#memory_int := #memory_int[#t~string74.base,2 + #t~string74.offset := 105];#memory_int := #memory_int[#t~string74.base,3 + #t~string74.offset := 0];call #t~string76.base, #t~string76.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string76.base,#t~string76.offset := 32];#memory_int := #memory_int[#t~string76.base,1 + #t~string76.offset := 37];#memory_int := #memory_int[#t~string76.base,2 + #t~string76.offset := 105];#memory_int := #memory_int[#t~string76.base,3 + #t~string76.offset := 0];call #t~string78.base, #t~string78.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string78.base,#t~string78.offset := 32];#memory_int := #memory_int[#t~string78.base,1 + #t~string78.offset := 37];#memory_int := #memory_int[#t~string78.base,2 + #t~string78.offset := 105];#memory_int := #memory_int[#t~string78.base,3 + #t~string78.offset := 0];call #t~string80.base, #t~string80.offset := #Ultimate.alloc(6);#memory_int := #memory_int[#t~string80.base,#t~string80.offset := 32];#memory_int := #memory_int[#t~string80.base,1 + #t~string80.offset := 70];#memory_int := #memory_int[#t~string80.base,2 + #t~string80.offset := 95];#memory_int := #memory_int[#t~string80.base,3 + #t~string80.offset := 112];#memory_int := #memory_int[#t~string80.base,4 + #t~string80.offset := 58];#memory_int := #memory_int[#t~string80.base,5 + #t~string80.offset := 0];call #t~string83.base, #t~string83.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string83.base,#t~string83.offset := 32];#memory_int := #memory_int[#t~string83.base,1 + #t~string83.offset := 37];#memory_int := #memory_int[#t~string83.base,2 + #t~string83.offset := 105];#memory_int := #memory_int[#t~string83.base,3 + #t~string83.offset := 0];call #t~string86.base, #t~string86.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string86.base,#t~string86.offset := 32];#memory_int := #memory_int[#t~string86.base,1 + #t~string86.offset := 37];#memory_int := #memory_int[#t~string86.base,2 + #t~string86.offset := 105];#memory_int := #memory_int[#t~string86.base,3 + #t~string86.offset := 0];call #t~string89.base, #t~string89.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string89.base,#t~string89.offset := 32];#memory_int := #memory_int[#t~string89.base,1 + #t~string89.offset := 37];#memory_int := #memory_int[#t~string89.base,2 + #t~string89.offset := 105];#memory_int := #memory_int[#t~string89.base,3 + #t~string89.offset := 0];call #t~string92.base, #t~string92.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string92.base,#t~string92.offset := 32];#memory_int := #memory_int[#t~string92.base,1 + #t~string92.offset := 37];#memory_int := #memory_int[#t~string92.base,2 + #t~string92.offset := 105];#memory_int := #memory_int[#t~string92.base,3 + #t~string92.offset := 0];call #t~string95.base, #t~string95.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string95.base,#t~string95.offset := 32];#memory_int := #memory_int[#t~string95.base,1 + #t~string95.offset := 37];#memory_int := #memory_int[#t~string95.base,2 + #t~string95.offset := 105];#memory_int := #memory_int[#t~string95.base,3 + #t~string95.offset := 0];call #t~string97.base, #t~string97.offset := #Ultimate.alloc(2);#memory_int := #memory_int[#t~string97.base,#t~string97.offset := 10];#memory_int := #memory_int[#t~string97.base,1 + #t~string97.offset := 0];call #t~string128.base, #t~string128.offset := #Ultimate.alloc(30);call #t~string129.base, #t~string129.offset := #Ultimate.alloc(9);call #t~string130.base, #t~string130.offset := #Ultimate.alloc(21);call #t~string131.base, #t~string131.offset := #Ultimate.alloc(30);call #t~string132.base, #t~string132.offset := #Ultimate.alloc(9);call #t~string133.base, #t~string133.offset := #Ultimate.alloc(21);call #t~string137.base, #t~string137.offset := #Ultimate.alloc(30);call #t~string138.base, #t~string138.offset := #Ultimate.alloc(9);call #t~string139.base, #t~string139.offset := #Ultimate.alloc(25);call #t~string140.base, #t~string140.offset := #Ultimate.alloc(30);call #t~string141.base, #t~string141.offset := #Ultimate.alloc(9);call #t~string142.base, #t~string142.offset := #Ultimate.alloc(25);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 4947#L-1true assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res;havoc main_#t~ret159, main_~retValue_acc~26, main_~tmp~26;havoc main_~retValue_acc~26;havoc main_~tmp~26;assume { :begin_inline_select_helpers } true; 6008#L2122true assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 4814#L2115true assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res;havoc valid_product_~retValue_acc~21;havoc valid_product_~retValue_acc~21;valid_product_~retValue_acc~21 := 1;valid_product_#res := valid_product_~retValue_acc~21; 5454#L2130true main_#t~ret159 := valid_product_#res;assume { :end_inline_valid_product } true;main_~tmp~26 := main_#t~ret159;havoc main_#t~ret159; 1978#L2596true assume 0 != main_~tmp~26;assume { :begin_inline_setup } true; 3879#L2573true assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret152, bigMacCall_~tmp~23;havoc bigMacCall_~tmp~23;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~23;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~23; 459#L2178true assume 0 == getOrigin_~person;getOrigin_~retValue_acc~23 := 4;getOrigin_#res := getOrigin_~retValue_acc~23; 4826#L2203true bigMacCall_#t~ret152 := getOrigin_#res;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~23 := bigMacCall_#t~ret152;havoc bigMacCall_#t~ret152;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~23;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 2407#L2963true assume 0 == initPersonOnFloor_~floor; 2580#L2964true assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 1264#L3071-1true assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 3563#L2755true assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 3954#L2767-2true assume { :end_inline_callOnFloor } true; 3589#L3107true assume { :end_inline_initPersonOnFloor } true; 5086#L2378true assume { :end_inline_bigMacCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_~tmp~10, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~10;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~8, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~8;havoc stopRequestedAtCurrentFloor_~tmp___0~4;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 1519#L2692true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 1261#L2719true isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 5#L1568true stopRequestedAtCurrentFloor_#t~ret25 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 97#L952true assume 0 != stopRequestedAtCurrentFloor_~tmp~8;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 3851#L283true stopRequestedAtCurrentFloor_#t~ret26 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 1177#L956true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 5054#L969true timeShift_#t~ret41 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret41;havoc timeShift_#t~ret41; 1458#L1105true assume !(0 != timeShift_~tmp___9~2); 2963#L1196true assume !(1 == ~doorState~0); 2970#L1196-2true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 1523#L2692-3true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 1250#L2719-3true isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 7#L1568-1true stopRequestedInDirection_#t~ret19 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 1740#L835true assume 0 != stopRequestedInDirection_~tmp___0~2;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 3849#L283-1true stopRequestedInDirection_#t~ret20 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~5 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 2803#L848true timeShift_#t~ret48 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret48;havoc timeShift_#t~ret48; 2136#L1204true assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret22, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 5771#L892true assume !(1 == ~currentHeading~0); 3749#L902true assume !(0 == ~currentFloorID~0); 3735#L902-2true assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 3439#L908-1true assume { :end_inline_continueInDirection } true; 336#L1213-2true assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret106, __utac_acc__Specification14_spec__1_#t~ret107, __utac_acc__Specification14_spec__1_#t~ret108, __utac_acc__Specification14_spec__1_#t~ret109, __utac_acc__Specification14_spec__1_~tmp~14, __utac_acc__Specification14_spec__1_~tmp___0~10, __utac_acc__Specification14_spec__1_~tmp___1~7, __utac_acc__Specification14_spec__1_~tmp___2~5;havoc __utac_acc__Specification14_spec__1_~tmp~14;havoc __utac_acc__Specification14_spec__1_~tmp___0~10;havoc __utac_acc__Specification14_spec__1_~tmp___1~7;havoc __utac_acc__Specification14_spec__1_~tmp___2~5;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 3057#L2692-25true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 1202#L2719-25true isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 122#L1568-3true __utac_acc__Specification14_spec__1_#t~ret106 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5 := __utac_acc__Specification14_spec__1_#t~ret106;havoc __utac_acc__Specification14_spec__1_#t~ret106; 5607#L1687true assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5); 5611#L1687-1true assume { :end_inline___utac_acc__Specification14_spec__1 } true; 1017#L1228true assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_~tmp~10, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~10;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~8, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~8;havoc stopRequestedAtCurrentFloor_~tmp___0~4;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 3067#L2692-26true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 1203#L2719-26true isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 124#L1568-4true stopRequestedAtCurrentFloor_#t~ret25 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 100#L952-1true assume 0 != stopRequestedAtCurrentFloor_~tmp~8;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 3869#L283-4true stopRequestedAtCurrentFloor_#t~ret26 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 1178#L956-1true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 5056#L969-1true timeShift_#t~ret41 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret41;havoc timeShift_#t~ret41; 1465#L1105-2true assume !(0 != timeShift_~tmp___9~2); 2925#L1196-3true assume !(1 == ~doorState~0); 2936#L1196-5true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 3028#L2692-29true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 1191#L2719-29true isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 126#L1568-5true stopRequestedInDirection_#t~ret19 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 1746#L835-2true assume 0 != stopRequestedInDirection_~tmp___0~2;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 3867#L283-5true stopRequestedInDirection_#t~ret20 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~5 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 2784#L848-2true timeShift_#t~ret48 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret48;havoc timeShift_#t~ret48; 2143#L1204-2true assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret22, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 5753#L892-3true assume !(1 == ~currentHeading~0); 3727#L902-9true assume !(0 == ~currentFloorID~0); 3731#L902-11true assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 3431#L908-7true assume { :end_inline_continueInDirection } true; 317#L1213-5true assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret106, __utac_acc__Specification14_spec__1_#t~ret107, __utac_acc__Specification14_spec__1_#t~ret108, __utac_acc__Specification14_spec__1_#t~ret109, __utac_acc__Specification14_spec__1_~tmp~14, __utac_acc__Specification14_spec__1_~tmp___0~10, __utac_acc__Specification14_spec__1_~tmp___1~7, __utac_acc__Specification14_spec__1_~tmp___2~5;havoc __utac_acc__Specification14_spec__1_~tmp~14;havoc __utac_acc__Specification14_spec__1_~tmp___0~10;havoc __utac_acc__Specification14_spec__1_~tmp___1~7;havoc __utac_acc__Specification14_spec__1_~tmp___2~5;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 2940#L2692-51true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 1066#L2719-51true isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 113#L1568-7true __utac_acc__Specification14_spec__1_#t~ret106 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5 := __utac_acc__Specification14_spec__1_#t~ret106;havoc __utac_acc__Specification14_spec__1_#t~ret106; 5612#L1687-2true assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5); 5582#L1687-3true assume { :end_inline___utac_acc__Specification14_spec__1 } true; 1018#L1228-1true assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_~tmp~10, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~10;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~8, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~8;havoc stopRequestedAtCurrentFloor_~tmp___0~4;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 2949#L2692-52true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 1063#L2719-52true isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 115#L1568-8true stopRequestedAtCurrentFloor_#t~ret25 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 102#L952-2true assume 0 != stopRequestedAtCurrentFloor_~tmp~8;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 3826#L283-8true stopRequestedAtCurrentFloor_#t~ret26 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 1180#L956-2true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 5058#L969-2true timeShift_#t~ret41 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret41;havoc timeShift_#t~ret41; 1443#L1105-4true assume !(0 != timeShift_~tmp___9~2); 2942#L1196-6true assume !(1 == ~doorState~0); 2897#L1196-8true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 2904#L2692-55true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 1053#L2719-55true isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 116#L1568-9true stopRequestedInDirection_#t~ret19 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 1753#L835-4true assume 0 != stopRequestedInDirection_~tmp___0~2;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 3824#L283-9true stopRequestedInDirection_#t~ret20 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~5 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 2788#L848-4true timeShift_#t~ret48 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret48;havoc timeShift_#t~ret48; 2149#L1204-4true assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret22, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 5760#L892-6true assume !(1 == ~currentHeading~0); 3695#L902-18true assume !(0 == ~currentFloorID~0); 3699#L902-20true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 3423#L908-13true assume { :end_inline_continueInDirection } true; 323#L1213-8true assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret106, __utac_acc__Specification14_spec__1_#t~ret107, __utac_acc__Specification14_spec__1_#t~ret108, __utac_acc__Specification14_spec__1_#t~ret109, __utac_acc__Specification14_spec__1_~tmp~14, __utac_acc__Specification14_spec__1_~tmp___0~10, __utac_acc__Specification14_spec__1_~tmp___1~7, __utac_acc__Specification14_spec__1_~tmp___2~5;havoc __utac_acc__Specification14_spec__1_~tmp~14;havoc __utac_acc__Specification14_spec__1_~tmp___0~10;havoc __utac_acc__Specification14_spec__1_~tmp___1~7;havoc __utac_acc__Specification14_spec__1_~tmp___2~5;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 3173#L2692-77true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 1146#L2719-77true isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 118#L1568-11true __utac_acc__Specification14_spec__1_#t~ret106 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5 := __utac_acc__Specification14_spec__1_#t~ret106;havoc __utac_acc__Specification14_spec__1_#t~ret106; 5584#L1687-4true assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5); 5589#L1687-5true assume { :end_inline___utac_acc__Specification14_spec__1 } true; 1019#L1228-2true assume { :end_inline_timeShift } true; 5526#L2390true assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret147, bobCall_~tmp~18;havoc bobCall_~tmp~18;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~23;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~23; 468#L2178-1true assume 0 == getOrigin_~person;getOrigin_~retValue_acc~23 := 4;getOrigin_#res := getOrigin_~retValue_acc~23; 4828#L2203-1true bobCall_#t~ret147 := getOrigin_#res;assume { :end_inline_getOrigin } true;bobCall_~tmp~18 := bobCall_#t~ret147;havoc bobCall_#t~ret147;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~18;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 2417#L2963-1true assume 0 == initPersonOnFloor_~floor; 2583#L2964-2true assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 1270#L3071-3true assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 3570#L2755-2true assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 3960#L2767-5true assume { :end_inline_callOnFloor } true; 3594#L3107-1true assume { :end_inline_initPersonOnFloor } true; 4433#L2323true assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret153, cleanup_#t~ret154, cleanup_~i~3, cleanup_~tmp~24, cleanup_~tmp___0~11, cleanup_~__cil_tmp4~2;havoc cleanup_~i~3;havoc cleanup_~tmp~24;havoc cleanup_~tmp___0~11;havoc cleanup_~__cil_tmp4~2;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_~tmp~10, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~10;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~8, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~8;havoc stopRequestedAtCurrentFloor_~tmp___0~4;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 3179#L2692-78true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 1147#L2719-78true isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 105#L1568-12true stopRequestedAtCurrentFloor_#t~ret25 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 104#L952-3true assume 0 != stopRequestedAtCurrentFloor_~tmp~8;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 3814#L283-12true stopRequestedAtCurrentFloor_#t~ret26 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 1172#L956-3true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 5059#L969-3true timeShift_#t~ret41 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret41;havoc timeShift_#t~ret41; 1449#L1105-6true assume !(0 != timeShift_~tmp___9~2); 2899#L1196-9true assume !(1 == ~doorState~0); 2908#L1196-11true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 3141#L2692-81true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 1139#L2719-81true isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 107#L1568-13true stopRequestedInDirection_#t~ret19 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 1728#L835-6true assume 0 != stopRequestedInDirection_~tmp___0~2;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 3845#L283-13true stopRequestedInDirection_#t~ret20 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~5 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 2795#L848-6true timeShift_#t~ret48 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret48;havoc timeShift_#t~ret48; 2118#L1204-6true assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret22, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 5536#L892-9true assume !(1 == ~currentHeading~0); 3692#L902-27true assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 3670#L902-29true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 3382#L908-19true assume { :end_inline_continueInDirection } true; 302#L1213-11true assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret106, __utac_acc__Specification14_spec__1_#t~ret107, __utac_acc__Specification14_spec__1_#t~ret108, __utac_acc__Specification14_spec__1_#t~ret109, __utac_acc__Specification14_spec__1_~tmp~14, __utac_acc__Specification14_spec__1_~tmp___0~10, __utac_acc__Specification14_spec__1_~tmp___1~7, __utac_acc__Specification14_spec__1_~tmp___2~5;havoc __utac_acc__Specification14_spec__1_~tmp~14;havoc __utac_acc__Specification14_spec__1_~tmp___0~10;havoc __utac_acc__Specification14_spec__1_~tmp___1~7;havoc __utac_acc__Specification14_spec__1_~tmp___2~5;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 2771#L2692-103true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 1105#L2719-103true isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 110#L1568-15true __utac_acc__Specification14_spec__1_#t~ret106 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5 := __utac_acc__Specification14_spec__1_#t~ret106;havoc __utac_acc__Specification14_spec__1_#t~ret106; 5591#L1687-6true assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5); 5597#L1687-7true assume { :end_inline___utac_acc__Specification14_spec__1 } true; 5169#L1228-3true assume { :end_inline_timeShift } true;cleanup_~i~3 := 0; 3454#L2405-3true [2018-11-18 15:37:57,057 INFO L796 eck$LassoCheckResult]: Loop: 3454#L2405-3true assume true; 3451#L2405-1true assume !false; 3401#L2406true cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 4393#L2409true assume cleanup_~i~3 < cleanup_~__cil_tmp4~2;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~0;havoc isBlocked_~retValue_acc~0;isBlocked_~retValue_acc~0 := 0;isBlocked_#res := isBlocked_~retValue_acc~0; 1783#L130true cleanup_#t~ret153 := isBlocked_#res;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~11 := cleanup_#t~ret153;havoc cleanup_#t~ret153; 4055#L2413true assume 1 != cleanup_~tmp___0~11; 4058#L2413-1true assume { :begin_inline_isIdle } true;havoc isIdle_#res;havoc isIdle_#t~ret7, isIdle_~retValue_acc~7, isIdle_~tmp~3;havoc isIdle_~retValue_acc~7;havoc isIdle_~tmp~3;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret2, anyStopRequested_#t~ret3, anyStopRequested_#t~ret4, anyStopRequested_#t~ret5, anyStopRequested_#t~ret6, anyStopRequested_~retValue_acc~6, anyStopRequested_~tmp~2, anyStopRequested_~tmp___0~0, anyStopRequested_~tmp___1~0, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~6;havoc anyStopRequested_~tmp~2;havoc anyStopRequested_~tmp___0~0;havoc anyStopRequested_~tmp___1~0;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 2776#L2692-104true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 1104#L2719-104true anyStopRequested_#t~ret2 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret2;havoc anyStopRequested_#t~ret2; 3987#L391true assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~6 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~6; 5347#L455true isIdle_#t~ret7 := anyStopRequested_#res;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~3 := isIdle_#t~ret7;havoc isIdle_#t~ret7;isIdle_~retValue_acc~7 := (if 0 == isIdle_~tmp~3 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~7; 3393#L468true cleanup_#t~ret154 := isIdle_#res;assume { :end_inline_isIdle } true;cleanup_~tmp~24 := cleanup_#t~ret154;havoc cleanup_#t~ret154; 1646#L2425true assume !(0 != cleanup_~tmp~24);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_~tmp~10, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~10;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~8, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~8;havoc stopRequestedAtCurrentFloor_~tmp___0~4;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 2756#L2692-109true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 1098#L2719-109true isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 111#L1568-16true stopRequestedAtCurrentFloor_#t~ret25 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 94#L952-4true assume 0 != stopRequestedAtCurrentFloor_~tmp~8;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 3834#L283-16true stopRequestedAtCurrentFloor_#t~ret26 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 1173#L956-4true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 5060#L969-4true timeShift_#t~ret41 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret41;havoc timeShift_#t~ret41; 1434#L1105-8true assume !(0 != timeShift_~tmp___9~2); 2921#L1196-12true assume !(1 == ~doorState~0); 3251#L1196-14true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 2737#L2692-112true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 1101#L2719-112true isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 112#L1568-17true stopRequestedInDirection_#t~ret19 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 1734#L835-8true assume 0 != stopRequestedInDirection_~tmp___0~2;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 3832#L283-17true stopRequestedInDirection_#t~ret20 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~5 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 2473#L848-8true timeShift_#t~ret48 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret48;havoc timeShift_#t~ret48; 2129#L1204-8true assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret22, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 5544#L892-12true assume !(1 == ~currentHeading~0); 3663#L902-36true assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 3665#L902-38true assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 4560#L908-25true assume { :end_inline_continueInDirection } true; 312#L1213-14true assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret106, __utac_acc__Specification14_spec__1_#t~ret107, __utac_acc__Specification14_spec__1_#t~ret108, __utac_acc__Specification14_spec__1_#t~ret109, __utac_acc__Specification14_spec__1_~tmp~14, __utac_acc__Specification14_spec__1_~tmp___0~10, __utac_acc__Specification14_spec__1_~tmp___1~7, __utac_acc__Specification14_spec__1_~tmp___2~5;havoc __utac_acc__Specification14_spec__1_~tmp~14;havoc __utac_acc__Specification14_spec__1_~tmp___0~10;havoc __utac_acc__Specification14_spec__1_~tmp___1~7;havoc __utac_acc__Specification14_spec__1_~tmp___2~5;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 2645#L2692-134true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 978#L2719-134true isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 98#L1568-19true __utac_acc__Specification14_spec__1_#t~ret106 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5 := __utac_acc__Specification14_spec__1_#t~ret106;havoc __utac_acc__Specification14_spec__1_#t~ret106; 5598#L1687-8true assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5); 5572#L1687-9true assume { :end_inline___utac_acc__Specification14_spec__1 } true; 5170#L1228-4true assume { :end_inline_timeShift } true;cleanup_~i~3 := 1 + cleanup_~i~3; 3454#L2405-3true [2018-11-18 15:37:57,066 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 15:37:57,066 INFO L82 PathProgramCache]: Analyzing trace with hash -426851756, now seen corresponding path program 1 times [2018-11-18 15:37:57,068 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 15:37:57,069 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 15:37:57,110 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 15:37:57,110 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 15:37:57,110 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 15:37:57,187 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 15:37:57,983 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 15:37:57,985 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 15:37:57,985 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-18 15:37:57,989 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-18 15:37:57,989 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 15:37:57,990 INFO L82 PathProgramCache]: Analyzing trace with hash 404171234, now seen corresponding path program 1 times [2018-11-18 15:37:57,990 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 15:37:57,990 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 15:37:57,991 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 15:37:57,991 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 15:37:57,991 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 15:37:58,002 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 15:37:58,060 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 15:37:58,060 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 15:37:58,061 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2018-11-18 15:37:58,062 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-18 15:37:58,076 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2018-11-18 15:37:58,077 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2018-11-18 15:37:58,078 INFO L87 Difference]: Start difference. First operand 6037 states. Second operand 7 states. [2018-11-18 15:38:14,909 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 15:38:14,910 INFO L93 Difference]: Finished difference Result 51619 states and 95903 transitions. [2018-11-18 15:38:14,910 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2018-11-18 15:38:14,911 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 51619 states and 95903 transitions. [2018-11-18 15:38:15,094 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 11245 [2018-11-18 15:38:15,248 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 51619 states to 51511 states and 95783 transitions. [2018-11-18 15:38:15,249 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 51511 [2018-11-18 15:38:15,283 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 51511 [2018-11-18 15:38:15,284 INFO L73 IsDeterministic]: Start isDeterministic. Operand 51511 states and 95783 transitions. [2018-11-18 15:38:15,337 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-18 15:38:15,337 INFO L705 BuchiCegarLoop]: Abstraction has 51511 states and 95783 transitions. [2018-11-18 15:38:15,381 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 51511 states and 95783 transitions. [2018-11-18 15:38:15,860 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 51511 to 17459. [2018-11-18 15:38:15,861 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 17459 states. [2018-11-18 15:38:15,889 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 17459 states to 17459 states and 32440 transitions. [2018-11-18 15:38:15,890 INFO L728 BuchiCegarLoop]: Abstraction has 17459 states and 32440 transitions. [2018-11-18 15:38:15,890 INFO L608 BuchiCegarLoop]: Abstraction has 17459 states and 32440 transitions. [2018-11-18 15:38:15,890 INFO L442 BuchiCegarLoop]: ======== Iteration 2============ [2018-11-18 15:38:15,890 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 17459 states and 32440 transitions. [2018-11-18 15:38:15,937 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 3567 [2018-11-18 15:38:15,937 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-18 15:38:15,937 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-18 15:38:15,940 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 15:38:15,940 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 15:38:15,940 INFO L794 eck$LassoCheckResult]: Stem: 62244#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];call #t~string52.base, #t~string52.offset := #Ultimate.alloc(10);call #t~string54.base, #t~string54.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string54.base,#t~string54.offset := 91];#memory_int := #memory_int[#t~string54.base,1 + #t~string54.offset := 95];#memory_int := #memory_int[#t~string54.base,2 + #t~string54.offset := 93];#memory_int := #memory_int[#t~string54.base,3 + #t~string54.offset := 0];call #t~string56.base, #t~string56.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string56.base,#t~string56.offset := 91];#memory_int := #memory_int[#t~string56.base,1 + #t~string56.offset := 93];#memory_int := #memory_int[#t~string56.base,2 + #t~string56.offset := 32];#memory_int := #memory_int[#t~string56.base,3 + #t~string56.offset := 0];call #t~string58.base, #t~string58.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string58.base,#t~string58.offset := 32];#memory_int := #memory_int[#t~string58.base,1 + #t~string58.offset := 97];#memory_int := #memory_int[#t~string58.base,2 + #t~string58.offset := 116];#memory_int := #memory_int[#t~string58.base,3 + #t~string58.offset := 32];#memory_int := #memory_int[#t~string58.base,4 + #t~string58.offset := 0];call #t~string60.base, #t~string60.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string60.base,#t~string60.offset := 37];#memory_int := #memory_int[#t~string60.base,1 + #t~string60.offset := 105];#memory_int := #memory_int[#t~string60.base,2 + #t~string60.offset := 0];call #t~string62.base, #t~string62.offset := #Ultimate.alloc(10);call #t~string64.base, #t~string64.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string64.base,#t~string64.offset := 117];#memory_int := #memory_int[#t~string64.base,1 + #t~string64.offset := 112];#memory_int := #memory_int[#t~string64.base,2 + #t~string64.offset := 0];call #t~string66.base, #t~string66.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string66.base,#t~string66.offset := 100];#memory_int := #memory_int[#t~string66.base,1 + #t~string66.offset := 111];#memory_int := #memory_int[#t~string66.base,2 + #t~string66.offset := 119];#memory_int := #memory_int[#t~string66.base,3 + #t~string66.offset := 110];#memory_int := #memory_int[#t~string66.base,4 + #t~string66.offset := 0];call #t~string68.base, #t~string68.offset := #Ultimate.alloc(7);#memory_int := #memory_int[#t~string68.base,#t~string68.offset := 32];#memory_int := #memory_int[#t~string68.base,1 + #t~string68.offset := 73];#memory_int := #memory_int[#t~string68.base,2 + #t~string68.offset := 76];#memory_int := #memory_int[#t~string68.base,3 + #t~string68.offset := 95];#memory_int := #memory_int[#t~string68.base,4 + #t~string68.offset := 112];#memory_int := #memory_int[#t~string68.base,5 + #t~string68.offset := 58];#memory_int := #memory_int[#t~string68.base,6 + #t~string68.offset := 0];call #t~string70.base, #t~string70.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string70.base,#t~string70.offset := 32];#memory_int := #memory_int[#t~string70.base,1 + #t~string70.offset := 37];#memory_int := #memory_int[#t~string70.base,2 + #t~string70.offset := 105];#memory_int := #memory_int[#t~string70.base,3 + #t~string70.offset := 0];call #t~string72.base, #t~string72.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string72.base,#t~string72.offset := 32];#memory_int := #memory_int[#t~string72.base,1 + #t~string72.offset := 37];#memory_int := #memory_int[#t~string72.base,2 + #t~string72.offset := 105];#memory_int := #memory_int[#t~string72.base,3 + #t~string72.offset := 0];call #t~string74.base, #t~string74.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string74.base,#t~string74.offset := 32];#memory_int := #memory_int[#t~string74.base,1 + #t~string74.offset := 37];#memory_int := #memory_int[#t~string74.base,2 + #t~string74.offset := 105];#memory_int := #memory_int[#t~string74.base,3 + #t~string74.offset := 0];call #t~string76.base, #t~string76.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string76.base,#t~string76.offset := 32];#memory_int := #memory_int[#t~string76.base,1 + #t~string76.offset := 37];#memory_int := #memory_int[#t~string76.base,2 + #t~string76.offset := 105];#memory_int := #memory_int[#t~string76.base,3 + #t~string76.offset := 0];call #t~string78.base, #t~string78.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string78.base,#t~string78.offset := 32];#memory_int := #memory_int[#t~string78.base,1 + #t~string78.offset := 37];#memory_int := #memory_int[#t~string78.base,2 + #t~string78.offset := 105];#memory_int := #memory_int[#t~string78.base,3 + #t~string78.offset := 0];call #t~string80.base, #t~string80.offset := #Ultimate.alloc(6);#memory_int := #memory_int[#t~string80.base,#t~string80.offset := 32];#memory_int := #memory_int[#t~string80.base,1 + #t~string80.offset := 70];#memory_int := #memory_int[#t~string80.base,2 + #t~string80.offset := 95];#memory_int := #memory_int[#t~string80.base,3 + #t~string80.offset := 112];#memory_int := #memory_int[#t~string80.base,4 + #t~string80.offset := 58];#memory_int := #memory_int[#t~string80.base,5 + #t~string80.offset := 0];call #t~string83.base, #t~string83.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string83.base,#t~string83.offset := 32];#memory_int := #memory_int[#t~string83.base,1 + #t~string83.offset := 37];#memory_int := #memory_int[#t~string83.base,2 + #t~string83.offset := 105];#memory_int := #memory_int[#t~string83.base,3 + #t~string83.offset := 0];call #t~string86.base, #t~string86.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string86.base,#t~string86.offset := 32];#memory_int := #memory_int[#t~string86.base,1 + #t~string86.offset := 37];#memory_int := #memory_int[#t~string86.base,2 + #t~string86.offset := 105];#memory_int := #memory_int[#t~string86.base,3 + #t~string86.offset := 0];call #t~string89.base, #t~string89.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string89.base,#t~string89.offset := 32];#memory_int := #memory_int[#t~string89.base,1 + #t~string89.offset := 37];#memory_int := #memory_int[#t~string89.base,2 + #t~string89.offset := 105];#memory_int := #memory_int[#t~string89.base,3 + #t~string89.offset := 0];call #t~string92.base, #t~string92.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string92.base,#t~string92.offset := 32];#memory_int := #memory_int[#t~string92.base,1 + #t~string92.offset := 37];#memory_int := #memory_int[#t~string92.base,2 + #t~string92.offset := 105];#memory_int := #memory_int[#t~string92.base,3 + #t~string92.offset := 0];call #t~string95.base, #t~string95.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string95.base,#t~string95.offset := 32];#memory_int := #memory_int[#t~string95.base,1 + #t~string95.offset := 37];#memory_int := #memory_int[#t~string95.base,2 + #t~string95.offset := 105];#memory_int := #memory_int[#t~string95.base,3 + #t~string95.offset := 0];call #t~string97.base, #t~string97.offset := #Ultimate.alloc(2);#memory_int := #memory_int[#t~string97.base,#t~string97.offset := 10];#memory_int := #memory_int[#t~string97.base,1 + #t~string97.offset := 0];call #t~string128.base, #t~string128.offset := #Ultimate.alloc(30);call #t~string129.base, #t~string129.offset := #Ultimate.alloc(9);call #t~string130.base, #t~string130.offset := #Ultimate.alloc(21);call #t~string131.base, #t~string131.offset := #Ultimate.alloc(30);call #t~string132.base, #t~string132.offset := #Ultimate.alloc(9);call #t~string133.base, #t~string133.offset := #Ultimate.alloc(21);call #t~string137.base, #t~string137.offset := #Ultimate.alloc(30);call #t~string138.base, #t~string138.offset := #Ultimate.alloc(9);call #t~string139.base, #t~string139.offset := #Ultimate.alloc(25);call #t~string140.base, #t~string140.offset := #Ultimate.alloc(30);call #t~string141.base, #t~string141.offset := #Ultimate.alloc(9);call #t~string142.base, #t~string142.offset := #Ultimate.alloc(25);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 62245#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res;havoc main_#t~ret159, main_~retValue_acc~26, main_~tmp~26;havoc main_~retValue_acc~26;havoc main_~tmp~26;assume { :begin_inline_select_helpers } true; 63368#L2122 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 63205#L2115 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res;havoc valid_product_~retValue_acc~21;havoc valid_product_~retValue_acc~21;valid_product_~retValue_acc~21 := 1;valid_product_#res := valid_product_~retValue_acc~21; 63206#L2130 main_#t~ret159 := valid_product_#res;assume { :end_inline_valid_product } true;main_~tmp~26 := main_#t~ret159;havoc main_#t~ret159; 60460#L2596 assume 0 != main_~tmp~26;assume { :begin_inline_setup } true; 60461#L2573 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret152, bigMacCall_~tmp~23;havoc bigMacCall_~tmp~23;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~23;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~23; 58558#L2178 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~23 := 4;getOrigin_#res := getOrigin_~retValue_acc~23; 57892#L2203 bigMacCall_#t~ret152 := getOrigin_#res;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~23 := bigMacCall_#t~ret152;havoc bigMacCall_#t~ret152;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~23;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 60962#L2963 assume 0 == initPersonOnFloor_~floor; 60963#L2964 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 58199#L3071-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 59583#L2755 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 61912#L2767-2 assume { :end_inline_callOnFloor } true; 62124#L3107 assume { :end_inline_initPersonOnFloor } true; 62125#L2378 assume { :end_inline_bigMacCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_~tmp~10, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~10;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~8, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~8;havoc stopRequestedAtCurrentFloor_~tmp___0~4;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 59831#L2692 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 59832#L2719 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 64239#L1568 stopRequestedAtCurrentFloor_#t~ret25 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 57950#L952 assume 0 != stopRequestedAtCurrentFloor_~tmp~8;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 57951#L283 stopRequestedAtCurrentFloor_#t~ret26 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 59491#L956 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 59493#L969 timeShift_#t~ret41 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret41;havoc timeShift_#t~ret41; 69361#L1105 assume !(0 != timeShift_~tmp___9~2); 69362#L1196 assume !(1 == ~doorState~0); 74679#L1196-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 74678#L2692-3 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 74677#L2719-3 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 74676#L1568-1 stopRequestedInDirection_#t~ret19 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 74674#L835 assume 0 != stopRequestedInDirection_~tmp___0~2;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 74675#L283-1 stopRequestedInDirection_#t~ret20 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~5 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 74687#L848 timeShift_#t~ret48 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret48;havoc timeShift_#t~ret48; 74685#L1204 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret22, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 74684#L892 assume !(1 == ~currentHeading~0); 62295#L902 assume !(0 == ~currentFloorID~0); 62282#L902-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 61927#L908-1 assume { :end_inline_continueInDirection } true; 58393#L1213-2 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret106, __utac_acc__Specification14_spec__1_#t~ret107, __utac_acc__Specification14_spec__1_#t~ret108, __utac_acc__Specification14_spec__1_#t~ret109, __utac_acc__Specification14_spec__1_~tmp~14, __utac_acc__Specification14_spec__1_~tmp___0~10, __utac_acc__Specification14_spec__1_~tmp___1~7, __utac_acc__Specification14_spec__1_~tmp___2~5;havoc __utac_acc__Specification14_spec__1_~tmp~14;havoc __utac_acc__Specification14_spec__1_~tmp___0~10;havoc __utac_acc__Specification14_spec__1_~tmp___1~7;havoc __utac_acc__Specification14_spec__1_~tmp___2~5;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 58394#L2692-25 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 61530#L2719-25 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 68777#L1568-3 __utac_acc__Specification14_spec__1_#t~ret106 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5 := __utac_acc__Specification14_spec__1_#t~ret106;havoc __utac_acc__Specification14_spec__1_#t~ret106; 68773#L1687 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5); 68769#L1687-1 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 64406#L1228 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_~tmp~10, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~10;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~8, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~8;havoc stopRequestedAtCurrentFloor_~tmp___0~4;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 64378#L2692-26 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 64131#L2719-26 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 64349#L1568-4 stopRequestedAtCurrentFloor_#t~ret25 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 64324#L952-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~8;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 64321#L283-4 stopRequestedAtCurrentFloor_#t~ret26 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 64317#L956-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 59495#L969-1 timeShift_#t~ret41 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret41;havoc timeShift_#t~ret41; 70158#L1105-2 assume !(0 != timeShift_~tmp___9~2); 70159#L1196-3 assume !(1 == ~doorState~0); 74731#L1196-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 74730#L2692-29 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 74729#L2719-29 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 74728#L1568-5 stopRequestedInDirection_#t~ret19 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 74726#L835-2 assume 0 != stopRequestedInDirection_~tmp___0~2;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 62412#L283-5 stopRequestedInDirection_#t~ret20 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~5 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 61337#L848-2 timeShift_#t~ret48 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret48;havoc timeShift_#t~ret48; 60663#L1204-2 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret22, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 60665#L892-3 assume !(1 == ~currentHeading~0); 62275#L902-9 assume !(0 == ~currentFloorID~0); 62276#L902-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 61914#L908-7 assume { :end_inline_continueInDirection } true; 58356#L1213-5 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret106, __utac_acc__Specification14_spec__1_#t~ret107, __utac_acc__Specification14_spec__1_#t~ret108, __utac_acc__Specification14_spec__1_#t~ret109, __utac_acc__Specification14_spec__1_~tmp~14, __utac_acc__Specification14_spec__1_~tmp___0~10, __utac_acc__Specification14_spec__1_~tmp___1~7, __utac_acc__Specification14_spec__1_~tmp___2~5;havoc __utac_acc__Specification14_spec__1_~tmp~14;havoc __utac_acc__Specification14_spec__1_~tmp___0~10;havoc __utac_acc__Specification14_spec__1_~tmp___1~7;havoc __utac_acc__Specification14_spec__1_~tmp___2~5;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 58357#L2692-51 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 59355#L2719-51 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 57989#L1568-7 __utac_acc__Specification14_spec__1_#t~ret106 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5 := __utac_acc__Specification14_spec__1_#t~ret106;havoc __utac_acc__Specification14_spec__1_#t~ret106; 57990#L1687-2 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5); 62104#L1687-3 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 59285#L1228-1 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_~tmp~10, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~10;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~8, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~8;havoc stopRequestedAtCurrentFloor_~tmp___0~4;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 59286#L2692-52 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 59350#L2719-52 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 57994#L1568-8 stopRequestedAtCurrentFloor_#t~ret25 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 57964#L952-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~8;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 57965#L283-8 stopRequestedAtCurrentFloor_#t~ret26 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 62372#L956-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 59497#L969-2 timeShift_#t~ret41 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret41;havoc timeShift_#t~ret41; 71028#L1105-4 assume !(0 != timeShift_~tmp___9~2); 71029#L1196-6 assume !(1 == ~doorState~0); 74832#L1196-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 74831#L2692-55 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 74830#L2719-55 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 74829#L1568-9 stopRequestedInDirection_#t~ret19 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 74827#L835-4 assume 0 != stopRequestedInDirection_~tmp___0~2;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 62370#L283-9 stopRequestedInDirection_#t~ret20 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~5 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 61341#L848-4 timeShift_#t~ret48 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret48;havoc timeShift_#t~ret48; 60671#L1204-4 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret22, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 60673#L892-6 assume !(1 == ~currentHeading~0); 62241#L902-18 assume !(0 == ~currentFloorID~0); 62242#L902-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 61900#L908-13 assume { :end_inline_continueInDirection } true; 58369#L1213-8 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret106, __utac_acc__Specification14_spec__1_#t~ret107, __utac_acc__Specification14_spec__1_#t~ret108, __utac_acc__Specification14_spec__1_#t~ret109, __utac_acc__Specification14_spec__1_~tmp~14, __utac_acc__Specification14_spec__1_~tmp___0~10, __utac_acc__Specification14_spec__1_~tmp___1~7, __utac_acc__Specification14_spec__1_~tmp___2~5;havoc __utac_acc__Specification14_spec__1_~tmp~14;havoc __utac_acc__Specification14_spec__1_~tmp___0~10;havoc __utac_acc__Specification14_spec__1_~tmp___1~7;havoc __utac_acc__Specification14_spec__1_~tmp___2~5;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 58370#L2692-77 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 59449#L2719-77 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 57999#L1568-11 __utac_acc__Specification14_spec__1_#t~ret106 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5 := __utac_acc__Specification14_spec__1_#t~ret106;havoc __utac_acc__Specification14_spec__1_#t~ret106; 58000#L1687-4 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5); 62080#L1687-5 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 59287#L1228-2 assume { :end_inline_timeShift } true; 59288#L2390 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret147, bobCall_~tmp~18;havoc bobCall_~tmp~18;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~23;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~23; 58569#L2178-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~23 := 4;getOrigin_#res := getOrigin_~retValue_acc~23; 58405#L2203-1 bobCall_#t~ret147 := getOrigin_#res;assume { :end_inline_getOrigin } true;bobCall_~tmp~18 := bobCall_#t~ret147;havoc bobCall_#t~ret147;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~18;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 60974#L2963-1 assume 0 == initPersonOnFloor_~floor; 60975#L2964-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 57850#L3071-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 59591#L2755-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 61887#L2767-5 assume { :end_inline_callOnFloor } true; 62131#L3107-1 assume { :end_inline_initPersonOnFloor } true; 62132#L2323 assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret153, cleanup_#t~ret154, cleanup_~i~3, cleanup_~tmp~24, cleanup_~tmp___0~11, cleanup_~__cil_tmp4~2;havoc cleanup_~i~3;havoc cleanup_~tmp~24;havoc cleanup_~tmp___0~11;havoc cleanup_~__cil_tmp4~2;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_~tmp~10, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~10;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~8, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~8;havoc stopRequestedAtCurrentFloor_~tmp___0~4;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 61599#L2692-78 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 59450#L2719-78 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 57973#L1568-12 stopRequestedAtCurrentFloor_#t~ret25 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 57970#L952-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~8;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 57972#L283-12 stopRequestedAtCurrentFloor_#t~ret26 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 62360#L956-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 59488#L969-3 timeShift_#t~ret41 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret41;havoc timeShift_#t~ret41; 74485#L1105-6 assume !(0 != timeShift_~tmp___9~2); 74486#L1196-9 assume !(1 == ~doorState~0); 75095#L1196-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 75094#L2692-81 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 75093#L2719-81 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 75092#L1568-13 stopRequestedInDirection_#t~ret19 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 75090#L835-6 assume 0 != stopRequestedInDirection_~tmp___0~2;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 62392#L283-13 stopRequestedInDirection_#t~ret20 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~5 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 61348#L848-6 timeShift_#t~ret48 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret48;havoc timeShift_#t~ret48; 60628#L1204-6 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret22, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 60630#L892-9 assume !(1 == ~currentHeading~0); 62238#L902-27 assume !(0 == ~currentFloorID~0); 62217#L902-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 61836#L908-19 assume { :end_inline_continueInDirection } true; 58328#L1213-11 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret106, __utac_acc__Specification14_spec__1_#t~ret107, __utac_acc__Specification14_spec__1_#t~ret108, __utac_acc__Specification14_spec__1_#t~ret109, __utac_acc__Specification14_spec__1_~tmp~14, __utac_acc__Specification14_spec__1_~tmp___0~10, __utac_acc__Specification14_spec__1_~tmp___1~7, __utac_acc__Specification14_spec__1_~tmp___2~5;havoc __utac_acc__Specification14_spec__1_~tmp~14;havoc __utac_acc__Specification14_spec__1_~tmp___0~10;havoc __utac_acc__Specification14_spec__1_~tmp___1~7;havoc __utac_acc__Specification14_spec__1_~tmp___2~5;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 58329#L2692-103 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 59400#L2719-103 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 57984#L1568-15 __utac_acc__Specification14_spec__1_#t~ret106 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5 := __utac_acc__Specification14_spec__1_#t~ret106;havoc __utac_acc__Specification14_spec__1_#t~ret106; 57985#L1687-6 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5); 62056#L1687-7 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 63538#L1228-3 assume { :end_inline_timeShift } true;cleanup_~i~3 := 0; 61950#L2405-3 [2018-11-18 15:38:15,941 INFO L796 eck$LassoCheckResult]: Loop: 61950#L2405-3 assume true; 61946#L2405-1 assume !false; 61862#L2406 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 61863#L2409 assume cleanup_~i~3 < cleanup_~__cil_tmp4~2;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~0;havoc isBlocked_~retValue_acc~0;isBlocked_~retValue_acc~0 := 0;isBlocked_#res := isBlocked_~retValue_acc~0; 60231#L130 cleanup_#t~ret153 := isBlocked_#res;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~11 := cleanup_#t~ret153;havoc cleanup_#t~ret153; 60232#L2413 assume 1 != cleanup_~tmp___0~11; 62594#L2413-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res;havoc isIdle_#t~ret7, isIdle_~retValue_acc~7, isIdle_~tmp~3;havoc isIdle_~retValue_acc~7;havoc isIdle_~tmp~3;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret2, anyStopRequested_#t~ret3, anyStopRequested_#t~ret4, anyStopRequested_#t~ret5, anyStopRequested_#t~ret6, anyStopRequested_~retValue_acc~6, anyStopRequested_~tmp~2, anyStopRequested_~tmp___0~0, anyStopRequested_~tmp___1~0, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~6;havoc anyStopRequested_~tmp~2;havoc anyStopRequested_~tmp___0~0;havoc anyStopRequested_~tmp___1~0;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 61329#L2692-104 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 59398#L2719-104 anyStopRequested_#t~ret2 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret2;havoc anyStopRequested_#t~ret2; 59399#L391 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~6 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~6; 72955#L455 isIdle_#t~ret7 := anyStopRequested_#res;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~3 := isIdle_#t~ret7;havoc isIdle_#t~ret7;isIdle_~retValue_acc~7 := (if 0 == isIdle_~tmp~3 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~7; 72954#L468 cleanup_#t~ret154 := isIdle_#res;assume { :end_inline_isIdle } true;cleanup_~tmp~24 := cleanup_#t~ret154;havoc cleanup_#t~ret154; 65533#L2425 assume !(0 != cleanup_~tmp~24);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_~tmp~10, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~10;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~8, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~8;havoc stopRequestedAtCurrentFloor_~tmp___0~4;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 65532#L2692-109 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 64093#L2719-109 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 65531#L1568-16 stopRequestedAtCurrentFloor_#t~ret25 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 64220#L952-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~8;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 64216#L283-16 stopRequestedAtCurrentFloor_#t~ret26 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 64103#L956-4 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 59490#L969-4 timeShift_#t~ret41 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret41;havoc timeShift_#t~ret41; 73613#L1105-8 assume !(0 != timeShift_~tmp___9~2); 73614#L1196-12 assume !(1 == ~doorState~0); 74981#L1196-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 74980#L2692-112 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 74979#L2719-112 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 74978#L1568-17 stopRequestedInDirection_#t~ret19 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 74976#L835-8 assume 0 != stopRequestedInDirection_~tmp___0~2;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 62378#L283-17 stopRequestedInDirection_#t~ret20 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~5 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 61027#L848-8 timeShift_#t~ret48 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret48;havoc timeShift_#t~ret48; 60641#L1204-8 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret22, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 60643#L892-12 assume !(1 == ~currentHeading~0); 62209#L902-36 assume !(0 == ~currentFloorID~0); 62210#L902-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 62212#L908-25 assume { :end_inline_continueInDirection } true; 58348#L1213-14 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret106, __utac_acc__Specification14_spec__1_#t~ret107, __utac_acc__Specification14_spec__1_#t~ret108, __utac_acc__Specification14_spec__1_#t~ret109, __utac_acc__Specification14_spec__1_~tmp~14, __utac_acc__Specification14_spec__1_~tmp___0~10, __utac_acc__Specification14_spec__1_~tmp___1~7, __utac_acc__Specification14_spec__1_~tmp___2~5;havoc __utac_acc__Specification14_spec__1_~tmp~14;havoc __utac_acc__Specification14_spec__1_~tmp___0~10;havoc __utac_acc__Specification14_spec__1_~tmp___1~7;havoc __utac_acc__Specification14_spec__1_~tmp___2~5;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 58349#L2692-134 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 59217#L2719-134 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 57953#L1568-19 __utac_acc__Specification14_spec__1_#t~ret106 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5 := __utac_acc__Specification14_spec__1_#t~ret106;havoc __utac_acc__Specification14_spec__1_#t~ret106; 57954#L1687-8 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5); 62070#L1687-9 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 63539#L1228-4 assume { :end_inline_timeShift } true;cleanup_~i~3 := 1 + cleanup_~i~3; 61950#L2405-3 [2018-11-18 15:38:15,947 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 15:38:15,947 INFO L82 PathProgramCache]: Analyzing trace with hash -819878766, now seen corresponding path program 1 times [2018-11-18 15:38:15,947 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 15:38:15,947 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 15:38:15,948 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 15:38:15,948 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 15:38:15,948 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 15:38:15,972 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 15:38:16,817 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 15:38:16,817 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 15:38:16,817 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-18 15:38:16,818 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-18 15:38:16,818 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 15:38:16,818 INFO L82 PathProgramCache]: Analyzing trace with hash 11144224, now seen corresponding path program 1 times [2018-11-18 15:38:16,818 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 15:38:16,818 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 15:38:16,819 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 15:38:16,819 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 15:38:16,819 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 15:38:16,826 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 15:38:16,840 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 15:38:16,840 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 15:38:16,840 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-18 15:38:16,840 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-18 15:38:16,841 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-18 15:38:16,841 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-18 15:38:16,841 INFO L87 Difference]: Start difference. First operand 17459 states and 32440 transitions. cyclomatic complexity: 14983 Second operand 3 states. [2018-11-18 15:38:18,876 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 15:38:18,876 INFO L93 Difference]: Finished difference Result 31364 states and 58226 transitions. [2018-11-18 15:38:18,876 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-18 15:38:18,877 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 31364 states and 58226 transitions. [2018-11-18 15:38:18,951 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 7106 [2018-11-18 15:38:19,025 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 31364 states to 31364 states and 58226 transitions. [2018-11-18 15:38:19,026 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 31364 [2018-11-18 15:38:19,069 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 31364 [2018-11-18 15:38:19,069 INFO L73 IsDeterministic]: Start isDeterministic. Operand 31364 states and 58226 transitions. [2018-11-18 15:38:19,095 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-18 15:38:19,095 INFO L705 BuchiCegarLoop]: Abstraction has 31364 states and 58226 transitions. [2018-11-18 15:38:19,118 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 31364 states and 58226 transitions. [2018-11-18 15:38:19,373 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 31364 to 31332. [2018-11-18 15:38:19,373 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 31332 states. [2018-11-18 15:38:19,417 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 31332 states to 31332 states and 58178 transitions. [2018-11-18 15:38:19,417 INFO L728 BuchiCegarLoop]: Abstraction has 31332 states and 58178 transitions. [2018-11-18 15:38:19,417 INFO L608 BuchiCegarLoop]: Abstraction has 31332 states and 58178 transitions. [2018-11-18 15:38:19,417 INFO L442 BuchiCegarLoop]: ======== Iteration 3============ [2018-11-18 15:38:19,418 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 31332 states and 58178 transitions. [2018-11-18 15:38:19,480 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 7098 [2018-11-18 15:38:19,480 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-18 15:38:19,480 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-18 15:38:19,483 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 15:38:19,483 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 15:38:19,483 INFO L794 eck$LassoCheckResult]: Stem: 111193#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];call #t~string52.base, #t~string52.offset := #Ultimate.alloc(10);call #t~string54.base, #t~string54.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string54.base,#t~string54.offset := 91];#memory_int := #memory_int[#t~string54.base,1 + #t~string54.offset := 95];#memory_int := #memory_int[#t~string54.base,2 + #t~string54.offset := 93];#memory_int := #memory_int[#t~string54.base,3 + #t~string54.offset := 0];call #t~string56.base, #t~string56.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string56.base,#t~string56.offset := 91];#memory_int := #memory_int[#t~string56.base,1 + #t~string56.offset := 93];#memory_int := #memory_int[#t~string56.base,2 + #t~string56.offset := 32];#memory_int := #memory_int[#t~string56.base,3 + #t~string56.offset := 0];call #t~string58.base, #t~string58.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string58.base,#t~string58.offset := 32];#memory_int := #memory_int[#t~string58.base,1 + #t~string58.offset := 97];#memory_int := #memory_int[#t~string58.base,2 + #t~string58.offset := 116];#memory_int := #memory_int[#t~string58.base,3 + #t~string58.offset := 32];#memory_int := #memory_int[#t~string58.base,4 + #t~string58.offset := 0];call #t~string60.base, #t~string60.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string60.base,#t~string60.offset := 37];#memory_int := #memory_int[#t~string60.base,1 + #t~string60.offset := 105];#memory_int := #memory_int[#t~string60.base,2 + #t~string60.offset := 0];call #t~string62.base, #t~string62.offset := #Ultimate.alloc(10);call #t~string64.base, #t~string64.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string64.base,#t~string64.offset := 117];#memory_int := #memory_int[#t~string64.base,1 + #t~string64.offset := 112];#memory_int := #memory_int[#t~string64.base,2 + #t~string64.offset := 0];call #t~string66.base, #t~string66.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string66.base,#t~string66.offset := 100];#memory_int := #memory_int[#t~string66.base,1 + #t~string66.offset := 111];#memory_int := #memory_int[#t~string66.base,2 + #t~string66.offset := 119];#memory_int := #memory_int[#t~string66.base,3 + #t~string66.offset := 110];#memory_int := #memory_int[#t~string66.base,4 + #t~string66.offset := 0];call #t~string68.base, #t~string68.offset := #Ultimate.alloc(7);#memory_int := #memory_int[#t~string68.base,#t~string68.offset := 32];#memory_int := #memory_int[#t~string68.base,1 + #t~string68.offset := 73];#memory_int := #memory_int[#t~string68.base,2 + #t~string68.offset := 76];#memory_int := #memory_int[#t~string68.base,3 + #t~string68.offset := 95];#memory_int := #memory_int[#t~string68.base,4 + #t~string68.offset := 112];#memory_int := #memory_int[#t~string68.base,5 + #t~string68.offset := 58];#memory_int := #memory_int[#t~string68.base,6 + #t~string68.offset := 0];call #t~string70.base, #t~string70.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string70.base,#t~string70.offset := 32];#memory_int := #memory_int[#t~string70.base,1 + #t~string70.offset := 37];#memory_int := #memory_int[#t~string70.base,2 + #t~string70.offset := 105];#memory_int := #memory_int[#t~string70.base,3 + #t~string70.offset := 0];call #t~string72.base, #t~string72.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string72.base,#t~string72.offset := 32];#memory_int := #memory_int[#t~string72.base,1 + #t~string72.offset := 37];#memory_int := #memory_int[#t~string72.base,2 + #t~string72.offset := 105];#memory_int := #memory_int[#t~string72.base,3 + #t~string72.offset := 0];call #t~string74.base, #t~string74.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string74.base,#t~string74.offset := 32];#memory_int := #memory_int[#t~string74.base,1 + #t~string74.offset := 37];#memory_int := #memory_int[#t~string74.base,2 + #t~string74.offset := 105];#memory_int := #memory_int[#t~string74.base,3 + #t~string74.offset := 0];call #t~string76.base, #t~string76.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string76.base,#t~string76.offset := 32];#memory_int := #memory_int[#t~string76.base,1 + #t~string76.offset := 37];#memory_int := #memory_int[#t~string76.base,2 + #t~string76.offset := 105];#memory_int := #memory_int[#t~string76.base,3 + #t~string76.offset := 0];call #t~string78.base, #t~string78.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string78.base,#t~string78.offset := 32];#memory_int := #memory_int[#t~string78.base,1 + #t~string78.offset := 37];#memory_int := #memory_int[#t~string78.base,2 + #t~string78.offset := 105];#memory_int := #memory_int[#t~string78.base,3 + #t~string78.offset := 0];call #t~string80.base, #t~string80.offset := #Ultimate.alloc(6);#memory_int := #memory_int[#t~string80.base,#t~string80.offset := 32];#memory_int := #memory_int[#t~string80.base,1 + #t~string80.offset := 70];#memory_int := #memory_int[#t~string80.base,2 + #t~string80.offset := 95];#memory_int := #memory_int[#t~string80.base,3 + #t~string80.offset := 112];#memory_int := #memory_int[#t~string80.base,4 + #t~string80.offset := 58];#memory_int := #memory_int[#t~string80.base,5 + #t~string80.offset := 0];call #t~string83.base, #t~string83.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string83.base,#t~string83.offset := 32];#memory_int := #memory_int[#t~string83.base,1 + #t~string83.offset := 37];#memory_int := #memory_int[#t~string83.base,2 + #t~string83.offset := 105];#memory_int := #memory_int[#t~string83.base,3 + #t~string83.offset := 0];call #t~string86.base, #t~string86.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string86.base,#t~string86.offset := 32];#memory_int := #memory_int[#t~string86.base,1 + #t~string86.offset := 37];#memory_int := #memory_int[#t~string86.base,2 + #t~string86.offset := 105];#memory_int := #memory_int[#t~string86.base,3 + #t~string86.offset := 0];call #t~string89.base, #t~string89.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string89.base,#t~string89.offset := 32];#memory_int := #memory_int[#t~string89.base,1 + #t~string89.offset := 37];#memory_int := #memory_int[#t~string89.base,2 + #t~string89.offset := 105];#memory_int := #memory_int[#t~string89.base,3 + #t~string89.offset := 0];call #t~string92.base, #t~string92.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string92.base,#t~string92.offset := 32];#memory_int := #memory_int[#t~string92.base,1 + #t~string92.offset := 37];#memory_int := #memory_int[#t~string92.base,2 + #t~string92.offset := 105];#memory_int := #memory_int[#t~string92.base,3 + #t~string92.offset := 0];call #t~string95.base, #t~string95.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string95.base,#t~string95.offset := 32];#memory_int := #memory_int[#t~string95.base,1 + #t~string95.offset := 37];#memory_int := #memory_int[#t~string95.base,2 + #t~string95.offset := 105];#memory_int := #memory_int[#t~string95.base,3 + #t~string95.offset := 0];call #t~string97.base, #t~string97.offset := #Ultimate.alloc(2);#memory_int := #memory_int[#t~string97.base,#t~string97.offset := 10];#memory_int := #memory_int[#t~string97.base,1 + #t~string97.offset := 0];call #t~string128.base, #t~string128.offset := #Ultimate.alloc(30);call #t~string129.base, #t~string129.offset := #Ultimate.alloc(9);call #t~string130.base, #t~string130.offset := #Ultimate.alloc(21);call #t~string131.base, #t~string131.offset := #Ultimate.alloc(30);call #t~string132.base, #t~string132.offset := #Ultimate.alloc(9);call #t~string133.base, #t~string133.offset := #Ultimate.alloc(21);call #t~string137.base, #t~string137.offset := #Ultimate.alloc(30);call #t~string138.base, #t~string138.offset := #Ultimate.alloc(9);call #t~string139.base, #t~string139.offset := #Ultimate.alloc(25);call #t~string140.base, #t~string140.offset := #Ultimate.alloc(30);call #t~string141.base, #t~string141.offset := #Ultimate.alloc(9);call #t~string142.base, #t~string142.offset := #Ultimate.alloc(25);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 111194#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res;havoc main_#t~ret159, main_~retValue_acc~26, main_~tmp~26;havoc main_~retValue_acc~26;havoc main_~tmp~26;assume { :begin_inline_select_helpers } true; 112366#L2122 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 112198#L2115 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res;havoc valid_product_~retValue_acc~21;havoc valid_product_~retValue_acc~21;valid_product_~retValue_acc~21 := 1;valid_product_#res := valid_product_~retValue_acc~21; 112199#L2130 main_#t~ret159 := valid_product_#res;assume { :end_inline_valid_product } true;main_~tmp~26 := main_#t~ret159;havoc main_#t~ret159; 109362#L2596 assume 0 != main_~tmp~26;assume { :begin_inline_setup } true; 109363#L2573 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret152, bigMacCall_~tmp~23;havoc bigMacCall_~tmp~23;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~23;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~23; 107390#L2178 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~23 := 4;getOrigin_#res := getOrigin_~retValue_acc~23; 106722#L2203 bigMacCall_#t~ret152 := getOrigin_#res;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~23 := bigMacCall_#t~ret152;havoc bigMacCall_#t~ret152;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~23;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 109864#L2963 assume 0 == initPersonOnFloor_~floor; 109865#L2964 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 107031#L3071-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 108465#L2755 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 110846#L2767-2 assume { :end_inline_callOnFloor } true; 111063#L3107 assume { :end_inline_initPersonOnFloor } true; 111064#L2378 assume { :end_inline_bigMacCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_~tmp~10, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~10;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~8, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~8;havoc stopRequestedAtCurrentFloor_~tmp___0~4;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 108727#L2692 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 108462#L2719 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 106536#L1568 stopRequestedAtCurrentFloor_#t~ret25 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 106537#L952 assume 0 != stopRequestedAtCurrentFloor_~tmp~8;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 106780#L283 stopRequestedAtCurrentFloor_#t~ret26 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 108369#L956 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 108371#L969 timeShift_#t~ret41 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret41;havoc timeShift_#t~ret41; 108617#L1105 assume !(0 != timeShift_~tmp___9~2); 108619#L1196 assume !(1 == ~doorState~0); 110379#L1196-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 108732#L2692-3 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 108448#L2719-3 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 106541#L1568-1 stopRequestedInDirection_#t~ret19 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 106542#L835 assume 0 != stopRequestedInDirection_~tmp___0~2;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 109084#L283-1 stopRequestedInDirection_#t~ret20 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~5 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 110263#L848 timeShift_#t~ret48 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret48;havoc timeShift_#t~ret48; 109556#L1204 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret22, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 109558#L892 assume !(1 == ~currentHeading~0); 111249#L902 assume !(0 == ~currentFloorID~0); 111234#L902-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 111235#L908-1 assume { :end_inline_continueInDirection } true; 117793#L1213-2 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret106, __utac_acc__Specification14_spec__1_#t~ret107, __utac_acc__Specification14_spec__1_#t~ret108, __utac_acc__Specification14_spec__1_#t~ret109, __utac_acc__Specification14_spec__1_~tmp~14, __utac_acc__Specification14_spec__1_~tmp___0~10, __utac_acc__Specification14_spec__1_~tmp___1~7, __utac_acc__Specification14_spec__1_~tmp___2~5;havoc __utac_acc__Specification14_spec__1_~tmp~14;havoc __utac_acc__Specification14_spec__1_~tmp___0~10;havoc __utac_acc__Specification14_spec__1_~tmp___1~7;havoc __utac_acc__Specification14_spec__1_~tmp___2~5;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 117580#L2692-25 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 117579#L2719-25 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 117578#L1568-3 __utac_acc__Specification14_spec__1_#t~ret106 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5 := __utac_acc__Specification14_spec__1_#t~ret106;havoc __utac_acc__Specification14_spec__1_#t~ret106; 117573#L1687 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5); 117571#L1687-1 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 117570#L1228 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_~tmp~10, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~10;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~8, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~8;havoc stopRequestedAtCurrentFloor_~tmp___0~4;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 115331#L2692-26 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 113659#L2719-26 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 115325#L1568-4 stopRequestedAtCurrentFloor_#t~ret25 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 115324#L952-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~8;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 111360#L283-4 stopRequestedAtCurrentFloor_#t~ret26 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 108372#L956-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 108374#L969-1 timeShift_#t~ret41 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret41;havoc timeShift_#t~ret41; 108633#L1105-2 assume !(0 != timeShift_~tmp___9~2); 108635#L1196-3 assume !(1 == ~doorState~0); 110354#L1196-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 110363#L2692-29 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 108386#L2719-29 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 106847#L1568-5 stopRequestedInDirection_#t~ret19 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 106848#L835-2 assume 0 != stopRequestedInDirection_~tmp___0~2;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 109090#L283-5 stopRequestedInDirection_#t~ret20 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~5 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 110243#L848-2 timeShift_#t~ret48 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret48;havoc timeShift_#t~ret48; 109567#L1204-2 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret22, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 109569#L892-3 assume !(1 == ~currentHeading~0); 115910#L902-9 assume !(0 == ~currentFloorID~0); 112564#L902-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 114968#L908-7 assume { :end_inline_continueInDirection } true; 122304#L1213-5 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret106, __utac_acc__Specification14_spec__1_#t~ret107, __utac_acc__Specification14_spec__1_#t~ret108, __utac_acc__Specification14_spec__1_#t~ret109, __utac_acc__Specification14_spec__1_~tmp~14, __utac_acc__Specification14_spec__1_~tmp___0~10, __utac_acc__Specification14_spec__1_~tmp___1~7, __utac_acc__Specification14_spec__1_~tmp___2~5;havoc __utac_acc__Specification14_spec__1_~tmp~14;havoc __utac_acc__Specification14_spec__1_~tmp___0~10;havoc __utac_acc__Specification14_spec__1_~tmp___1~7;havoc __utac_acc__Specification14_spec__1_~tmp___2~5;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 122303#L2692-51 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 113648#L2719-51 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 122302#L1568-7 __utac_acc__Specification14_spec__1_#t~ret106 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5 := __utac_acc__Specification14_spec__1_#t~ret106;havoc __utac_acc__Specification14_spec__1_#t~ret106; 122297#L1687-2 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5); 122295#L1687-3 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 122294#L1228-1 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_~tmp~10, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~10;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~8, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~8;havoc stopRequestedAtCurrentFloor_~tmp___0~4;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 122293#L2692-52 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 113587#L2719-52 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 122291#L1568-8 stopRequestedAtCurrentFloor_#t~ret25 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 122288#L952-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~8;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 122289#L283-8 stopRequestedAtCurrentFloor_#t~ret26 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 128560#L956-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 121963#L969-2 timeShift_#t~ret41 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret41;havoc timeShift_#t~ret41; 121962#L1105-4 assume !(0 != timeShift_~tmp___9~2); 121961#L1196-6 assume !(1 == ~doorState~0); 121960#L1196-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 121959#L2692-55 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 121958#L2719-55 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 121952#L1568-9 stopRequestedInDirection_#t~ret19 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 121949#L835-4 assume 0 != stopRequestedInDirection_~tmp___0~2;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 121930#L283-9 stopRequestedInDirection_#t~ret20 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~5 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 121924#L848-4 timeShift_#t~ret48 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret48;havoc timeShift_#t~ret48; 121921#L1204-4 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret22, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 112933#L892-6 assume !(1 == ~currentHeading~0); 111190#L902-18 assume !(0 == ~currentFloorID~0); 111191#L902-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 111196#L908-13 assume { :end_inline_continueInDirection } true; 121676#L1213-8 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret106, __utac_acc__Specification14_spec__1_#t~ret107, __utac_acc__Specification14_spec__1_#t~ret108, __utac_acc__Specification14_spec__1_#t~ret109, __utac_acc__Specification14_spec__1_~tmp~14, __utac_acc__Specification14_spec__1_~tmp___0~10, __utac_acc__Specification14_spec__1_~tmp___1~7, __utac_acc__Specification14_spec__1_~tmp___2~5;havoc __utac_acc__Specification14_spec__1_~tmp~14;havoc __utac_acc__Specification14_spec__1_~tmp___0~10;havoc __utac_acc__Specification14_spec__1_~tmp___1~7;havoc __utac_acc__Specification14_spec__1_~tmp___2~5;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 121675#L2692-77 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 118778#L2719-77 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 121674#L1568-11 __utac_acc__Specification14_spec__1_#t~ret106 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5 := __utac_acc__Specification14_spec__1_#t~ret106;havoc __utac_acc__Specification14_spec__1_#t~ret106; 121669#L1687-4 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5); 121667#L1687-5 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 121666#L1228-2 assume { :end_inline_timeShift } true; 121665#L2390 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret147, bobCall_~tmp~18;havoc bobCall_~tmp~18;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~23;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~23; 116529#L2178-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~23 := 4;getOrigin_#res := getOrigin_~retValue_acc~23; 116525#L2203-1 bobCall_#t~ret147 := getOrigin_#res;assume { :end_inline_getOrigin } true;bobCall_~tmp~18 := bobCall_#t~ret147;havoc bobCall_#t~ret147;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~18;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 116524#L2963-1 assume 0 == initPersonOnFloor_~floor; 116046#L2964-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 116032#L3071-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 116031#L2755-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 116020#L2767-5 assume { :end_inline_callOnFloor } true; 116021#L3107-1 assume { :end_inline_initPersonOnFloor } true; 121545#L2323 assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret153, cleanup_#t~ret154, cleanup_~i~3, cleanup_~tmp~24, cleanup_~tmp___0~11, cleanup_~__cil_tmp4~2;havoc cleanup_~i~3;havoc cleanup_~tmp~24;havoc cleanup_~tmp___0~11;havoc cleanup_~__cil_tmp4~2;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_~tmp~10, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~10;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~8, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~8;havoc stopRequestedAtCurrentFloor_~tmp___0~4;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 121543#L2692-78 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 113133#L2719-78 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 121539#L1568-12 stopRequestedAtCurrentFloor_#t~ret25 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 121536#L952-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~8;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 115964#L283-12 stopRequestedAtCurrentFloor_#t~ret26 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 115965#L956-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 120770#L969-3 timeShift_#t~ret41 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret41;havoc timeShift_#t~ret41; 120737#L1105-6 assume !(0 != timeShift_~tmp___9~2); 120735#L1196-9 assume !(1 == ~doorState~0); 120733#L1196-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 120731#L2692-81 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 120727#L2719-81 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 120726#L1568-13 stopRequestedInDirection_#t~ret19 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 120725#L835-6 assume 0 != stopRequestedInDirection_~tmp___0~2;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 111338#L283-13 stopRequestedInDirection_#t~ret20 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~5 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 111339#L848-6 timeShift_#t~ret48 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret48;havoc timeShift_#t~ret48; 120671#L1204-6 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret22, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 120672#L892-9 assume !(1 == ~currentHeading~0); 120666#L902-27 assume !(0 == ~currentFloorID~0); 112719#L902-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 110768#L908-19 assume { :end_inline_continueInDirection } true; 110769#L1213-11 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret106, __utac_acc__Specification14_spec__1_#t~ret107, __utac_acc__Specification14_spec__1_#t~ret108, __utac_acc__Specification14_spec__1_#t~ret109, __utac_acc__Specification14_spec__1_~tmp~14, __utac_acc__Specification14_spec__1_~tmp___0~10, __utac_acc__Specification14_spec__1_~tmp___1~7, __utac_acc__Specification14_spec__1_~tmp___2~5;havoc __utac_acc__Specification14_spec__1_~tmp~14;havoc __utac_acc__Specification14_spec__1_~tmp___0~10;havoc __utac_acc__Specification14_spec__1_~tmp___1~7;havoc __utac_acc__Specification14_spec__1_~tmp___2~5;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 128655#L2692-103 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 113118#L2719-103 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 128648#L1568-15 __utac_acc__Specification14_spec__1_#t~ret106 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5 := __utac_acc__Specification14_spec__1_#t~ret106;havoc __utac_acc__Specification14_spec__1_#t~ret106; 128627#L1687-6 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5); 128625#L1687-7 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 128624#L1228-3 assume { :end_inline_timeShift } true;cleanup_~i~3 := 0; 128622#L2405-3 [2018-11-18 15:38:19,484 INFO L796 eck$LassoCheckResult]: Loop: 128622#L2405-3 assume true; 128621#L2405-1 assume !false; 128620#L2406 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 128619#L2409 assume cleanup_~i~3 < cleanup_~__cil_tmp4~2;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~0;havoc isBlocked_~retValue_acc~0;isBlocked_~retValue_acc~0 := 0;isBlocked_#res := isBlocked_~retValue_acc~0; 128618#L130 cleanup_#t~ret153 := isBlocked_#res;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~11 := cleanup_#t~ret153;havoc cleanup_#t~ret153; 128617#L2413 assume 1 != cleanup_~tmp___0~11; 128616#L2413-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res;havoc isIdle_#t~ret7, isIdle_~retValue_acc~7, isIdle_~tmp~3;havoc isIdle_~retValue_acc~7;havoc isIdle_~tmp~3;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret2, anyStopRequested_#t~ret3, anyStopRequested_#t~ret4, anyStopRequested_#t~ret5, anyStopRequested_#t~ret6, anyStopRequested_~retValue_acc~6, anyStopRequested_~tmp~2, anyStopRequested_~tmp___0~0, anyStopRequested_~tmp___1~0, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~6;havoc anyStopRequested_~tmp~2;havoc anyStopRequested_~tmp___0~0;havoc anyStopRequested_~tmp___1~0;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 128615#L2692-104 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 128614#L2719-104 anyStopRequested_#t~ret2 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret2;havoc anyStopRequested_#t~ret2; 128585#L391 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~6 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~6; 128584#L455 isIdle_#t~ret7 := anyStopRequested_#res;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~3 := isIdle_#t~ret7;havoc isIdle_#t~ret7;isIdle_~retValue_acc~7 := (if 0 == isIdle_~tmp~3 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~7; 128583#L468 cleanup_#t~ret154 := isIdle_#res;assume { :end_inline_isIdle } true;cleanup_~tmp~24 := cleanup_#t~ret154;havoc cleanup_#t~ret154; 128582#L2425 assume !(0 != cleanup_~tmp~24);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_~tmp~10, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~10;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~8, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~8;havoc stopRequestedAtCurrentFloor_~tmp___0~4;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 128581#L2692-109 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 113368#L2719-109 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 128580#L1568-16 stopRequestedAtCurrentFloor_#t~ret25 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 128578#L952-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~8;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 128577#L283-16 stopRequestedAtCurrentFloor_#t~ret26 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 128576#L956-4 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 108368#L969-4 timeShift_#t~ret41 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret41;havoc timeShift_#t~ret41; 108576#L1105-8 assume !(0 != timeShift_~tmp___9~2); 108578#L1196-12 assume !(1 == ~doorState~0); 110558#L1196-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 110202#L2692-112 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 108257#L2719-112 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 106816#L1568-17 stopRequestedInDirection_#t~ret19 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 106817#L835-8 assume 0 != stopRequestedInDirection_~tmp___0~2;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 122994#L283-17 stopRequestedInDirection_#t~ret20 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~5 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 122987#L848-8 timeShift_#t~ret48 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret48;havoc timeShift_#t~ret48; 122985#L1204-8 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret22, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 112783#L892-12 assume !(1 == ~currentHeading~0); 111155#L902-36 assume !(0 == ~currentFloorID~0); 111156#L902-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 111158#L908-25 assume { :end_inline_continueInDirection } true; 111920#L1213-14 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret106, __utac_acc__Specification14_spec__1_#t~ret107, __utac_acc__Specification14_spec__1_#t~ret108, __utac_acc__Specification14_spec__1_#t~ret109, __utac_acc__Specification14_spec__1_~tmp~14, __utac_acc__Specification14_spec__1_~tmp___0~10, __utac_acc__Specification14_spec__1_~tmp___1~7, __utac_acc__Specification14_spec__1_~tmp___2~5;havoc __utac_acc__Specification14_spec__1_~tmp~14;havoc __utac_acc__Specification14_spec__1_~tmp___0~10;havoc __utac_acc__Specification14_spec__1_~tmp___1~7;havoc __utac_acc__Specification14_spec__1_~tmp___2~5;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 128639#L2692-134 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 113205#L2719-134 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 128638#L1568-19 __utac_acc__Specification14_spec__1_#t~ret106 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5 := __utac_acc__Specification14_spec__1_#t~ret106;havoc __utac_acc__Specification14_spec__1_#t~ret106; 128633#L1687-8 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5); 128626#L1687-9 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 128623#L1228-4 assume { :end_inline_timeShift } true;cleanup_~i~3 := 1 + cleanup_~i~3; 128622#L2405-3 [2018-11-18 15:38:19,493 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 15:38:19,493 INFO L82 PathProgramCache]: Analyzing trace with hash -1119168362, now seen corresponding path program 1 times [2018-11-18 15:38:19,493 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 15:38:19,493 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 15:38:19,494 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 15:38:19,494 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 15:38:19,494 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 15:38:19,510 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 15:38:20,344 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 15:38:20,345 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 15:38:20,345 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-18 15:38:20,345 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-18 15:38:20,345 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 15:38:20,345 INFO L82 PathProgramCache]: Analyzing trace with hash 691202594, now seen corresponding path program 1 times [2018-11-18 15:38:20,346 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 15:38:20,346 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 15:38:20,346 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 15:38:20,346 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 15:38:20,347 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 15:38:20,353 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 15:38:20,401 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 15:38:20,401 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 15:38:20,401 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2018-11-18 15:38:20,401 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-18 15:38:20,402 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2018-11-18 15:38:20,402 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=43, Unknown=0, NotChecked=0, Total=56 [2018-11-18 15:38:20,402 INFO L87 Difference]: Start difference. First operand 31332 states and 58178 transitions. cyclomatic complexity: 26848 Second operand 8 states. [2018-11-18 15:38:31,036 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 15:38:31,036 INFO L93 Difference]: Finished difference Result 304457 states and 567650 transitions. [2018-11-18 15:38:31,037 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 32 states. [2018-11-18 15:38:31,037 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 304457 states and 567650 transitions. [2018-11-18 15:38:32,311 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 87388 [2018-11-18 15:38:32,928 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 304457 states to 304457 states and 567650 transitions. [2018-11-18 15:38:32,928 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 304457 [2018-11-18 15:38:33,096 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 304457 [2018-11-18 15:38:33,096 INFO L73 IsDeterministic]: Start isDeterministic. Operand 304457 states and 567650 transitions. [2018-11-18 15:38:33,239 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-18 15:38:33,239 INFO L705 BuchiCegarLoop]: Abstraction has 304457 states and 567650 transitions. [2018-11-18 15:38:33,376 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 304457 states and 567650 transitions. [2018-11-18 15:38:34,426 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 304457 to 62485. [2018-11-18 15:38:34,427 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 62485 states. [2018-11-18 15:38:39,123 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 62485 states to 62485 states and 115994 transitions. [2018-11-18 15:38:39,123 INFO L728 BuchiCegarLoop]: Abstraction has 62485 states and 115994 transitions. [2018-11-18 15:38:39,123 INFO L608 BuchiCegarLoop]: Abstraction has 62485 states and 115994 transitions. [2018-11-18 15:38:39,123 INFO L442 BuchiCegarLoop]: ======== Iteration 4============ [2018-11-18 15:38:39,123 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 62485 states and 115994 transitions. [2018-11-18 15:38:39,215 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 14072 [2018-11-18 15:38:39,215 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-18 15:38:39,216 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-18 15:38:39,219 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 15:38:39,219 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 15:38:39,220 INFO L794 eck$LassoCheckResult]: Stem: 447334#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];call #t~string52.base, #t~string52.offset := #Ultimate.alloc(10);call #t~string54.base, #t~string54.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string54.base,#t~string54.offset := 91];#memory_int := #memory_int[#t~string54.base,1 + #t~string54.offset := 95];#memory_int := #memory_int[#t~string54.base,2 + #t~string54.offset := 93];#memory_int := #memory_int[#t~string54.base,3 + #t~string54.offset := 0];call #t~string56.base, #t~string56.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string56.base,#t~string56.offset := 91];#memory_int := #memory_int[#t~string56.base,1 + #t~string56.offset := 93];#memory_int := #memory_int[#t~string56.base,2 + #t~string56.offset := 32];#memory_int := #memory_int[#t~string56.base,3 + #t~string56.offset := 0];call #t~string58.base, #t~string58.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string58.base,#t~string58.offset := 32];#memory_int := #memory_int[#t~string58.base,1 + #t~string58.offset := 97];#memory_int := #memory_int[#t~string58.base,2 + #t~string58.offset := 116];#memory_int := #memory_int[#t~string58.base,3 + #t~string58.offset := 32];#memory_int := #memory_int[#t~string58.base,4 + #t~string58.offset := 0];call #t~string60.base, #t~string60.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string60.base,#t~string60.offset := 37];#memory_int := #memory_int[#t~string60.base,1 + #t~string60.offset := 105];#memory_int := #memory_int[#t~string60.base,2 + #t~string60.offset := 0];call #t~string62.base, #t~string62.offset := #Ultimate.alloc(10);call #t~string64.base, #t~string64.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string64.base,#t~string64.offset := 117];#memory_int := #memory_int[#t~string64.base,1 + #t~string64.offset := 112];#memory_int := #memory_int[#t~string64.base,2 + #t~string64.offset := 0];call #t~string66.base, #t~string66.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string66.base,#t~string66.offset := 100];#memory_int := #memory_int[#t~string66.base,1 + #t~string66.offset := 111];#memory_int := #memory_int[#t~string66.base,2 + #t~string66.offset := 119];#memory_int := #memory_int[#t~string66.base,3 + #t~string66.offset := 110];#memory_int := #memory_int[#t~string66.base,4 + #t~string66.offset := 0];call #t~string68.base, #t~string68.offset := #Ultimate.alloc(7);#memory_int := #memory_int[#t~string68.base,#t~string68.offset := 32];#memory_int := #memory_int[#t~string68.base,1 + #t~string68.offset := 73];#memory_int := #memory_int[#t~string68.base,2 + #t~string68.offset := 76];#memory_int := #memory_int[#t~string68.base,3 + #t~string68.offset := 95];#memory_int := #memory_int[#t~string68.base,4 + #t~string68.offset := 112];#memory_int := #memory_int[#t~string68.base,5 + #t~string68.offset := 58];#memory_int := #memory_int[#t~string68.base,6 + #t~string68.offset := 0];call #t~string70.base, #t~string70.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string70.base,#t~string70.offset := 32];#memory_int := #memory_int[#t~string70.base,1 + #t~string70.offset := 37];#memory_int := #memory_int[#t~string70.base,2 + #t~string70.offset := 105];#memory_int := #memory_int[#t~string70.base,3 + #t~string70.offset := 0];call #t~string72.base, #t~string72.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string72.base,#t~string72.offset := 32];#memory_int := #memory_int[#t~string72.base,1 + #t~string72.offset := 37];#memory_int := #memory_int[#t~string72.base,2 + #t~string72.offset := 105];#memory_int := #memory_int[#t~string72.base,3 + #t~string72.offset := 0];call #t~string74.base, #t~string74.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string74.base,#t~string74.offset := 32];#memory_int := #memory_int[#t~string74.base,1 + #t~string74.offset := 37];#memory_int := #memory_int[#t~string74.base,2 + #t~string74.offset := 105];#memory_int := #memory_int[#t~string74.base,3 + #t~string74.offset := 0];call #t~string76.base, #t~string76.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string76.base,#t~string76.offset := 32];#memory_int := #memory_int[#t~string76.base,1 + #t~string76.offset := 37];#memory_int := #memory_int[#t~string76.base,2 + #t~string76.offset := 105];#memory_int := #memory_int[#t~string76.base,3 + #t~string76.offset := 0];call #t~string78.base, #t~string78.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string78.base,#t~string78.offset := 32];#memory_int := #memory_int[#t~string78.base,1 + #t~string78.offset := 37];#memory_int := #memory_int[#t~string78.base,2 + #t~string78.offset := 105];#memory_int := #memory_int[#t~string78.base,3 + #t~string78.offset := 0];call #t~string80.base, #t~string80.offset := #Ultimate.alloc(6);#memory_int := #memory_int[#t~string80.base,#t~string80.offset := 32];#memory_int := #memory_int[#t~string80.base,1 + #t~string80.offset := 70];#memory_int := #memory_int[#t~string80.base,2 + #t~string80.offset := 95];#memory_int := #memory_int[#t~string80.base,3 + #t~string80.offset := 112];#memory_int := #memory_int[#t~string80.base,4 + #t~string80.offset := 58];#memory_int := #memory_int[#t~string80.base,5 + #t~string80.offset := 0];call #t~string83.base, #t~string83.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string83.base,#t~string83.offset := 32];#memory_int := #memory_int[#t~string83.base,1 + #t~string83.offset := 37];#memory_int := #memory_int[#t~string83.base,2 + #t~string83.offset := 105];#memory_int := #memory_int[#t~string83.base,3 + #t~string83.offset := 0];call #t~string86.base, #t~string86.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string86.base,#t~string86.offset := 32];#memory_int := #memory_int[#t~string86.base,1 + #t~string86.offset := 37];#memory_int := #memory_int[#t~string86.base,2 + #t~string86.offset := 105];#memory_int := #memory_int[#t~string86.base,3 + #t~string86.offset := 0];call #t~string89.base, #t~string89.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string89.base,#t~string89.offset := 32];#memory_int := #memory_int[#t~string89.base,1 + #t~string89.offset := 37];#memory_int := #memory_int[#t~string89.base,2 + #t~string89.offset := 105];#memory_int := #memory_int[#t~string89.base,3 + #t~string89.offset := 0];call #t~string92.base, #t~string92.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string92.base,#t~string92.offset := 32];#memory_int := #memory_int[#t~string92.base,1 + #t~string92.offset := 37];#memory_int := #memory_int[#t~string92.base,2 + #t~string92.offset := 105];#memory_int := #memory_int[#t~string92.base,3 + #t~string92.offset := 0];call #t~string95.base, #t~string95.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string95.base,#t~string95.offset := 32];#memory_int := #memory_int[#t~string95.base,1 + #t~string95.offset := 37];#memory_int := #memory_int[#t~string95.base,2 + #t~string95.offset := 105];#memory_int := #memory_int[#t~string95.base,3 + #t~string95.offset := 0];call #t~string97.base, #t~string97.offset := #Ultimate.alloc(2);#memory_int := #memory_int[#t~string97.base,#t~string97.offset := 10];#memory_int := #memory_int[#t~string97.base,1 + #t~string97.offset := 0];call #t~string128.base, #t~string128.offset := #Ultimate.alloc(30);call #t~string129.base, #t~string129.offset := #Ultimate.alloc(9);call #t~string130.base, #t~string130.offset := #Ultimate.alloc(21);call #t~string131.base, #t~string131.offset := #Ultimate.alloc(30);call #t~string132.base, #t~string132.offset := #Ultimate.alloc(9);call #t~string133.base, #t~string133.offset := #Ultimate.alloc(21);call #t~string137.base, #t~string137.offset := #Ultimate.alloc(30);call #t~string138.base, #t~string138.offset := #Ultimate.alloc(9);call #t~string139.base, #t~string139.offset := #Ultimate.alloc(25);call #t~string140.base, #t~string140.offset := #Ultimate.alloc(30);call #t~string141.base, #t~string141.offset := #Ultimate.alloc(9);call #t~string142.base, #t~string142.offset := #Ultimate.alloc(25);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 447335#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res;havoc main_#t~ret159, main_~retValue_acc~26, main_~tmp~26;havoc main_~retValue_acc~26;havoc main_~tmp~26;assume { :begin_inline_select_helpers } true; 448581#L2122 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 448416#L2115 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res;havoc valid_product_~retValue_acc~21;havoc valid_product_~retValue_acc~21;valid_product_~retValue_acc~21 := 1;valid_product_#res := valid_product_~retValue_acc~21; 448417#L2130 main_#t~ret159 := valid_product_#res;assume { :end_inline_valid_product } true;main_~tmp~26 := main_#t~ret159;havoc main_#t~ret159; 445334#L2596 assume 0 != main_~tmp~26;assume { :begin_inline_setup } true; 445335#L2573 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret152, bigMacCall_~tmp~23;havoc bigMacCall_~tmp~23;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~23;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~23; 443257#L2178 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~23 := 4;getOrigin_#res := getOrigin_~retValue_acc~23; 442581#L2203 bigMacCall_#t~ret152 := getOrigin_#res;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~23 := bigMacCall_#t~ret152;havoc bigMacCall_#t~ret152;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~23;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 445853#L2963 assume 0 == initPersonOnFloor_~floor; 445854#L2964 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 442893#L3071-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 444358#L2755 assume !(0 == callOnFloor_~floorID); 446952#L2758 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 446953#L2767-2 assume { :end_inline_callOnFloor } true; 447193#L3107 assume { :end_inline_initPersonOnFloor } true; 447194#L2378 assume { :end_inline_bigMacCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_~tmp~10, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~10;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~8, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~8;havoc stopRequestedAtCurrentFloor_~tmp___0~4;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 444657#L2692 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 444658#L2719 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 442395#L1568 stopRequestedAtCurrentFloor_#t~ret25 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 442396#L952 assume 0 != stopRequestedAtCurrentFloor_~tmp~8;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 447504#L283 stopRequestedAtCurrentFloor_#t~ret26 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 447505#L956 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 451107#L969 timeShift_#t~ret41 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret41;havoc timeShift_#t~ret41; 451108#L1105 assume !(0 != timeShift_~tmp___9~2); 451102#L1196 assume !(1 == ~doorState~0); 451103#L1196-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 451099#L2692-3 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 451100#L2719-3 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 451095#L1568-1 stopRequestedInDirection_#t~ret19 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 451096#L835 assume 0 != stopRequestedInDirection_~tmp___0~2;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 451129#L283-1 stopRequestedInDirection_#t~ret20 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~5 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 451128#L848 timeShift_#t~ret48 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret48;havoc timeShift_#t~ret48; 451127#L1204 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret22, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 449249#L892 assume !(1 == ~currentHeading~0); 447391#L902 assume !(0 == ~currentFloorID~0); 447376#L902-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 447377#L908-1 assume { :end_inline_continueInDirection } true; 467171#L1213-2 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret106, __utac_acc__Specification14_spec__1_#t~ret107, __utac_acc__Specification14_spec__1_#t~ret108, __utac_acc__Specification14_spec__1_#t~ret109, __utac_acc__Specification14_spec__1_~tmp~14, __utac_acc__Specification14_spec__1_~tmp___0~10, __utac_acc__Specification14_spec__1_~tmp___1~7, __utac_acc__Specification14_spec__1_~tmp___2~5;havoc __utac_acc__Specification14_spec__1_~tmp~14;havoc __utac_acc__Specification14_spec__1_~tmp___0~10;havoc __utac_acc__Specification14_spec__1_~tmp___1~7;havoc __utac_acc__Specification14_spec__1_~tmp___2~5;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 446521#L2692-25 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 446522#L2719-25 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 442701#L1568-3 __utac_acc__Specification14_spec__1_#t~ret106 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5 := __utac_acc__Specification14_spec__1_#t~ret106;havoc __utac_acc__Specification14_spec__1_#t~ret106; 442702#L1687 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5); 449130#L1687-1 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 449131#L1228 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_~tmp~10, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~10;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~8, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~8;havoc stopRequestedAtCurrentFloor_~tmp___0~4;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 446531#L2692-26 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 446532#L2719-26 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 442706#L1568-4 stopRequestedAtCurrentFloor_#t~ret25 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 442707#L952-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~8;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 453489#L283-4 stopRequestedAtCurrentFloor_#t~ret26 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 453490#L956-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 467162#L969-1 timeShift_#t~ret41 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret41;havoc timeShift_#t~ret41; 468214#L1105-2 assume !(0 != timeShift_~tmp___9~2); 468213#L1196-3 assume !(1 == ~doorState~0); 467155#L1196-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 467156#L2692-29 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 444266#L2719-29 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 444267#L1568-5 stopRequestedInDirection_#t~ret19 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 468211#L835-2 assume 0 != stopRequestedInDirection_~tmp___0~2;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 468210#L283-5 stopRequestedInDirection_#t~ret20 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~5 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 468209#L848-2 timeShift_#t~ret48 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret48;havoc timeShift_#t~ret48; 468208#L1204-2 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret22, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 449230#L892-3 assume !(1 == ~currentHeading~0); 447368#L902-9 assume !(0 == ~currentFloorID~0); 447369#L902-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 447373#L908-7 assume { :end_inline_continueInDirection } true; 455169#L1213-5 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret106, __utac_acc__Specification14_spec__1_#t~ret107, __utac_acc__Specification14_spec__1_#t~ret108, __utac_acc__Specification14_spec__1_#t~ret109, __utac_acc__Specification14_spec__1_~tmp~14, __utac_acc__Specification14_spec__1_~tmp___0~10, __utac_acc__Specification14_spec__1_~tmp___1~7, __utac_acc__Specification14_spec__1_~tmp___2~5;havoc __utac_acc__Specification14_spec__1_~tmp~14;havoc __utac_acc__Specification14_spec__1_~tmp___0~10;havoc __utac_acc__Specification14_spec__1_~tmp___1~7;havoc __utac_acc__Specification14_spec__1_~tmp___2~5;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 455170#L2692-51 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 455163#L2719-51 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 455164#L1568-7 __utac_acc__Specification14_spec__1_#t~ret106 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5 := __utac_acc__Specification14_spec__1_#t~ret106;havoc __utac_acc__Specification14_spec__1_#t~ret106; 455159#L1687-2 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5); 455155#L1687-3 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 455153#L1228-1 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_~tmp~10, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~10;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~8, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~8;havoc stopRequestedAtCurrentFloor_~tmp___0~4;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 455154#L2692-52 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 455149#L2719-52 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 455150#L1568-8 stopRequestedAtCurrentFloor_#t~ret25 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 453487#L952-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~8;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 453488#L283-8 stopRequestedAtCurrentFloor_#t~ret26 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 453476#L956-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 453477#L969-2 timeShift_#t~ret41 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret41;havoc timeShift_#t~ret41; 469564#L1105-4 assume !(0 != timeShift_~tmp___9~2); 472183#L1196-6 assume !(1 == ~doorState~0); 472184#L1196-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 472179#L2692-55 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 472180#L2719-55 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 472173#L1568-9 stopRequestedInDirection_#t~ret19 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 472174#L835-4 assume 0 != stopRequestedInDirection_~tmp___0~2;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 471708#L283-9 stopRequestedInDirection_#t~ret20 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~5 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 471698#L848-4 timeShift_#t~ret48 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret48;havoc timeShift_#t~ret48; 471691#L1204-4 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret22, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 471683#L892-6 assume !(1 == ~currentHeading~0); 471668#L902-18 assume !(0 == ~currentFloorID~0); 471666#L902-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 471665#L908-13 assume { :end_inline_continueInDirection } true; 443063#L1213-8 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret106, __utac_acc__Specification14_spec__1_#t~ret107, __utac_acc__Specification14_spec__1_#t~ret108, __utac_acc__Specification14_spec__1_#t~ret109, __utac_acc__Specification14_spec__1_~tmp~14, __utac_acc__Specification14_spec__1_~tmp___0~10, __utac_acc__Specification14_spec__1_~tmp___1~7, __utac_acc__Specification14_spec__1_~tmp___2~5;havoc __utac_acc__Specification14_spec__1_~tmp~14;havoc __utac_acc__Specification14_spec__1_~tmp___0~10;havoc __utac_acc__Specification14_spec__1_~tmp___1~7;havoc __utac_acc__Specification14_spec__1_~tmp___2~5;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 443064#L2692-77 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 458967#L2719-77 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 458968#L1568-11 __utac_acc__Specification14_spec__1_#t~ret106 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5 := __utac_acc__Specification14_spec__1_#t~ret106;havoc __utac_acc__Specification14_spec__1_#t~ret106; 458964#L1687-4 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5); 447137#L1687-5 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 444019#L1228-2 assume { :end_inline_timeShift } true; 444020#L2390 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret147, bobCall_~tmp~18;havoc bobCall_~tmp~18;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~23;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~23; 443268#L2178-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~23 := 4;getOrigin_#res := getOrigin_~retValue_acc~23; 443099#L2203-1 bobCall_#t~ret147 := getOrigin_#res;assume { :end_inline_getOrigin } true;bobCall_~tmp~18 := bobCall_#t~ret147;havoc bobCall_#t~ret147;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~18;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 445865#L2963-1 assume 0 == initPersonOnFloor_~floor; 445866#L2964-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 458809#L3071-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 458810#L2755-2 assume !(0 == callOnFloor_~floorID); 479304#L2758-2 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 483689#L2767-5 assume { :end_inline_callOnFloor } true; 483687#L3107-1 assume { :end_inline_initPersonOnFloor } true; 455193#L2323 assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret153, cleanup_#t~ret154, cleanup_~i~3, cleanup_~tmp~24, cleanup_~tmp___0~11, cleanup_~__cil_tmp4~2;havoc cleanup_~i~3;havoc cleanup_~tmp~24;havoc cleanup_~tmp___0~11;havoc cleanup_~__cil_tmp4~2;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_~tmp~10, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~10;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~8, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~8;havoc stopRequestedAtCurrentFloor_~tmp___0~4;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 455194#L2692-78 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 449517#L2719-78 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 455151#L1568-12 stopRequestedAtCurrentFloor_#t~ret25 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 455142#L952-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~8;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 455144#L283-12 stopRequestedAtCurrentFloor_#t~ret26 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 453482#L956-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 453483#L969-3 timeShift_#t~ret41 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret41;havoc timeShift_#t~ret41; 479195#L1105-6 assume !(0 != timeShift_~tmp___9~2); 479194#L1196-9 assume !(1 == ~doorState~0); 478855#L1196-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 478856#L2692-81 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 478851#L2719-81 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 478852#L1568-13 stopRequestedInDirection_#t~ret19 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 478846#L835-6 assume 0 != stopRequestedInDirection_~tmp___0~2;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 478847#L283-13 stopRequestedInDirection_#t~ret20 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~5 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 486834#L848-6 timeShift_#t~ret48 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret48;havoc timeShift_#t~ret48; 486833#L1204-6 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret22, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 481839#L892-9 assume !(1 == ~currentHeading~0); 481840#L902-27 assume !(0 == ~currentFloorID~0); 447298#L902-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 446871#L908-19 assume { :end_inline_continueInDirection } true; 446872#L1213-11 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret106, __utac_acc__Specification14_spec__1_#t~ret107, __utac_acc__Specification14_spec__1_#t~ret108, __utac_acc__Specification14_spec__1_#t~ret109, __utac_acc__Specification14_spec__1_~tmp~14, __utac_acc__Specification14_spec__1_~tmp___0~10, __utac_acc__Specification14_spec__1_~tmp___1~7, __utac_acc__Specification14_spec__1_~tmp___2~5;havoc __utac_acc__Specification14_spec__1_~tmp~14;havoc __utac_acc__Specification14_spec__1_~tmp___0~10;havoc __utac_acc__Specification14_spec__1_~tmp___1~7;havoc __utac_acc__Specification14_spec__1_~tmp___2~5;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 482877#L2692-103 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 482873#L2719-103 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 482874#L1568-15 __utac_acc__Specification14_spec__1_#t~ret106 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5 := __utac_acc__Specification14_spec__1_#t~ret106;havoc __utac_acc__Specification14_spec__1_#t~ret106; 482863#L1687-6 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5); 482861#L1687-7 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 482857#L1228-3 assume { :end_inline_timeShift } true;cleanup_~i~3 := 0; 482856#L2405-3 [2018-11-18 15:38:39,220 INFO L796 eck$LassoCheckResult]: Loop: 482856#L2405-3 assume true; 482844#L2405-1 assume !false; 482845#L2406 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 482827#L2409 assume cleanup_~i~3 < cleanup_~__cil_tmp4~2;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~0;havoc isBlocked_~retValue_acc~0;isBlocked_~retValue_acc~0 := 0;isBlocked_#res := isBlocked_~retValue_acc~0; 482828#L130 cleanup_#t~ret153 := isBlocked_#res;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~11 := cleanup_#t~ret153;havoc cleanup_#t~ret153; 482751#L2413 assume 1 != cleanup_~tmp___0~11; 482743#L2413-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res;havoc isIdle_#t~ret7, isIdle_~retValue_acc~7, isIdle_~tmp~3;havoc isIdle_~retValue_acc~7;havoc isIdle_~tmp~3;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret2, anyStopRequested_#t~ret3, anyStopRequested_#t~ret4, anyStopRequested_#t~ret5, anyStopRequested_#t~ret6, anyStopRequested_~retValue_acc~6, anyStopRequested_~tmp~2, anyStopRequested_~tmp___0~0, anyStopRequested_~tmp___1~0, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~6;havoc anyStopRequested_~tmp~2;havoc anyStopRequested_~tmp___0~0;havoc anyStopRequested_~tmp___1~0;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 482744#L2692-104 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 482737#L2719-104 anyStopRequested_#t~ret2 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret2;havoc anyStopRequested_#t~ret2; 482738#L391 assume !(0 != anyStopRequested_~tmp___3~0); 490029#L395 assume 0 != ~floorButtons_0~0;anyStopRequested_~retValue_acc~6 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~6; 482712#L455 isIdle_#t~ret7 := anyStopRequested_#res;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~3 := isIdle_#t~ret7;havoc isIdle_#t~ret7;isIdle_~retValue_acc~7 := (if 0 == isIdle_~tmp~3 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~7; 482713#L468 cleanup_#t~ret154 := isIdle_#res;assume { :end_inline_isIdle } true;cleanup_~tmp~24 := cleanup_#t~ret154;havoc cleanup_#t~ret154; 482704#L2425 assume !(0 != cleanup_~tmp~24);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_~tmp~10, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~10;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~8, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~8;havoc stopRequestedAtCurrentFloor_~tmp___0~4;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 482705#L2692-109 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 484980#L2719-109 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 484981#L1568-16 stopRequestedAtCurrentFloor_#t~ret25 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 478525#L952-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~8;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 478526#L283-16 stopRequestedAtCurrentFloor_#t~ret26 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 473988#L956-4 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 444249#L969-4 timeShift_#t~ret41 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret41;havoc timeShift_#t~ret41; 499106#L1105-8 assume !(0 != timeShift_~tmp___9~2); 499105#L1196-12 assume !(1 == ~doorState~0); 499104#L1196-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 499103#L2692-112 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 499102#L2719-112 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 499101#L1568-17 stopRequestedInDirection_#t~ret19 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 499099#L835-8 assume 0 != stopRequestedInDirection_~tmp___0~2;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 499097#L283-17 stopRequestedInDirection_#t~ret20 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~5 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 499094#L848-8 timeShift_#t~ret48 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret48;havoc timeShift_#t~ret48; 499093#L1204-8 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret22, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 449069#L892-12 assume !(1 == ~currentHeading~0); 447287#L902-36 assume !(0 == ~currentFloorID~0); 447288#L902-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 447290#L908-25 assume { :end_inline_continueInDirection } true; 482899#L1213-14 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret106, __utac_acc__Specification14_spec__1_#t~ret107, __utac_acc__Specification14_spec__1_#t~ret108, __utac_acc__Specification14_spec__1_#t~ret109, __utac_acc__Specification14_spec__1_~tmp~14, __utac_acc__Specification14_spec__1_~tmp___0~10, __utac_acc__Specification14_spec__1_~tmp___1~7, __utac_acc__Specification14_spec__1_~tmp___2~5;havoc __utac_acc__Specification14_spec__1_~tmp~14;havoc __utac_acc__Specification14_spec__1_~tmp___0~10;havoc __utac_acc__Specification14_spec__1_~tmp___1~7;havoc __utac_acc__Specification14_spec__1_~tmp___2~5;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 482900#L2692-134 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 449525#L2719-134 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 482895#L1568-19 __utac_acc__Specification14_spec__1_#t~ret106 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5 := __utac_acc__Specification14_spec__1_#t~ret106;havoc __utac_acc__Specification14_spec__1_#t~ret106; 482885#L1687-8 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5); 482884#L1687-9 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 482855#L1228-4 assume { :end_inline_timeShift } true;cleanup_~i~3 := 1 + cleanup_~i~3; 482856#L2405-3 [2018-11-18 15:38:39,227 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 15:38:39,227 INFO L82 PathProgramCache]: Analyzing trace with hash -1651296089, now seen corresponding path program 1 times [2018-11-18 15:38:39,227 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 15:38:39,228 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 15:38:39,228 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 15:38:39,228 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 15:38:39,228 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 15:38:39,240 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 15:38:40,073 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 15:38:40,073 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 15:38:40,074 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-18 15:38:40,074 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-18 15:38:40,074 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 15:38:40,074 INFO L82 PathProgramCache]: Analyzing trace with hash 329817941, now seen corresponding path program 1 times [2018-11-18 15:38:40,074 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 15:38:40,074 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 15:38:40,075 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 15:38:40,075 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 15:38:40,075 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 15:38:40,079 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 15:38:40,116 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 15:38:40,116 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 15:38:40,116 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2018-11-18 15:38:40,116 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-18 15:38:40,116 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2018-11-18 15:38:40,116 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=43, Unknown=0, NotChecked=0, Total=56 [2018-11-18 15:38:40,117 INFO L87 Difference]: Start difference. First operand 62485 states and 115994 transitions. cyclomatic complexity: 53511 Second operand 8 states. [2018-11-18 15:38:52,764 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 15:38:52,764 INFO L93 Difference]: Finished difference Result 362305 states and 672238 transitions. [2018-11-18 15:38:52,764 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 41 states. [2018-11-18 15:38:52,765 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 362305 states and 672238 transitions. [2018-11-18 15:38:53,571 INFO L131 ngComponentsAnalysis]: Automaton has 6 accepting balls. 100302 [2018-11-18 15:38:54,230 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 362305 states to 362305 states and 672238 transitions. [2018-11-18 15:38:54,230 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 362305 [2018-11-18 15:38:54,384 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 362305 [2018-11-18 15:38:54,384 INFO L73 IsDeterministic]: Start isDeterministic. Operand 362305 states and 672238 transitions. [2018-11-18 15:38:54,518 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-18 15:38:54,518 INFO L705 BuchiCegarLoop]: Abstraction has 362305 states and 672238 transitions. [2018-11-18 15:38:54,644 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 362305 states and 672238 transitions. [2018-11-18 15:38:56,341 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 362305 to 61932. [2018-11-18 15:38:56,341 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 61932 states. [2018-11-18 15:38:56,401 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 61932 states to 61932 states and 114943 transitions. [2018-11-18 15:38:56,401 INFO L728 BuchiCegarLoop]: Abstraction has 61932 states and 114943 transitions. [2018-11-18 15:38:56,401 INFO L608 BuchiCegarLoop]: Abstraction has 61932 states and 114943 transitions. [2018-11-18 15:38:56,401 INFO L442 BuchiCegarLoop]: ======== Iteration 5============ [2018-11-18 15:38:56,401 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 61932 states and 114943 transitions. [2018-11-18 15:38:56,507 INFO L131 ngComponentsAnalysis]: Automaton has 6 accepting balls. 14030 [2018-11-18 15:38:56,507 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-18 15:38:56,507 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-18 15:38:56,509 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 15:38:56,509 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 15:38:56,510 INFO L794 eck$LassoCheckResult]: Stem: 871963#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];call #t~string52.base, #t~string52.offset := #Ultimate.alloc(10);call #t~string54.base, #t~string54.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string54.base,#t~string54.offset := 91];#memory_int := #memory_int[#t~string54.base,1 + #t~string54.offset := 95];#memory_int := #memory_int[#t~string54.base,2 + #t~string54.offset := 93];#memory_int := #memory_int[#t~string54.base,3 + #t~string54.offset := 0];call #t~string56.base, #t~string56.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string56.base,#t~string56.offset := 91];#memory_int := #memory_int[#t~string56.base,1 + #t~string56.offset := 93];#memory_int := #memory_int[#t~string56.base,2 + #t~string56.offset := 32];#memory_int := #memory_int[#t~string56.base,3 + #t~string56.offset := 0];call #t~string58.base, #t~string58.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string58.base,#t~string58.offset := 32];#memory_int := #memory_int[#t~string58.base,1 + #t~string58.offset := 97];#memory_int := #memory_int[#t~string58.base,2 + #t~string58.offset := 116];#memory_int := #memory_int[#t~string58.base,3 + #t~string58.offset := 32];#memory_int := #memory_int[#t~string58.base,4 + #t~string58.offset := 0];call #t~string60.base, #t~string60.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string60.base,#t~string60.offset := 37];#memory_int := #memory_int[#t~string60.base,1 + #t~string60.offset := 105];#memory_int := #memory_int[#t~string60.base,2 + #t~string60.offset := 0];call #t~string62.base, #t~string62.offset := #Ultimate.alloc(10);call #t~string64.base, #t~string64.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string64.base,#t~string64.offset := 117];#memory_int := #memory_int[#t~string64.base,1 + #t~string64.offset := 112];#memory_int := #memory_int[#t~string64.base,2 + #t~string64.offset := 0];call #t~string66.base, #t~string66.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string66.base,#t~string66.offset := 100];#memory_int := #memory_int[#t~string66.base,1 + #t~string66.offset := 111];#memory_int := #memory_int[#t~string66.base,2 + #t~string66.offset := 119];#memory_int := #memory_int[#t~string66.base,3 + #t~string66.offset := 110];#memory_int := #memory_int[#t~string66.base,4 + #t~string66.offset := 0];call #t~string68.base, #t~string68.offset := #Ultimate.alloc(7);#memory_int := #memory_int[#t~string68.base,#t~string68.offset := 32];#memory_int := #memory_int[#t~string68.base,1 + #t~string68.offset := 73];#memory_int := #memory_int[#t~string68.base,2 + #t~string68.offset := 76];#memory_int := #memory_int[#t~string68.base,3 + #t~string68.offset := 95];#memory_int := #memory_int[#t~string68.base,4 + #t~string68.offset := 112];#memory_int := #memory_int[#t~string68.base,5 + #t~string68.offset := 58];#memory_int := #memory_int[#t~string68.base,6 + #t~string68.offset := 0];call #t~string70.base, #t~string70.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string70.base,#t~string70.offset := 32];#memory_int := #memory_int[#t~string70.base,1 + #t~string70.offset := 37];#memory_int := #memory_int[#t~string70.base,2 + #t~string70.offset := 105];#memory_int := #memory_int[#t~string70.base,3 + #t~string70.offset := 0];call #t~string72.base, #t~string72.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string72.base,#t~string72.offset := 32];#memory_int := #memory_int[#t~string72.base,1 + #t~string72.offset := 37];#memory_int := #memory_int[#t~string72.base,2 + #t~string72.offset := 105];#memory_int := #memory_int[#t~string72.base,3 + #t~string72.offset := 0];call #t~string74.base, #t~string74.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string74.base,#t~string74.offset := 32];#memory_int := #memory_int[#t~string74.base,1 + #t~string74.offset := 37];#memory_int := #memory_int[#t~string74.base,2 + #t~string74.offset := 105];#memory_int := #memory_int[#t~string74.base,3 + #t~string74.offset := 0];call #t~string76.base, #t~string76.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string76.base,#t~string76.offset := 32];#memory_int := #memory_int[#t~string76.base,1 + #t~string76.offset := 37];#memory_int := #memory_int[#t~string76.base,2 + #t~string76.offset := 105];#memory_int := #memory_int[#t~string76.base,3 + #t~string76.offset := 0];call #t~string78.base, #t~string78.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string78.base,#t~string78.offset := 32];#memory_int := #memory_int[#t~string78.base,1 + #t~string78.offset := 37];#memory_int := #memory_int[#t~string78.base,2 + #t~string78.offset := 105];#memory_int := #memory_int[#t~string78.base,3 + #t~string78.offset := 0];call #t~string80.base, #t~string80.offset := #Ultimate.alloc(6);#memory_int := #memory_int[#t~string80.base,#t~string80.offset := 32];#memory_int := #memory_int[#t~string80.base,1 + #t~string80.offset := 70];#memory_int := #memory_int[#t~string80.base,2 + #t~string80.offset := 95];#memory_int := #memory_int[#t~string80.base,3 + #t~string80.offset := 112];#memory_int := #memory_int[#t~string80.base,4 + #t~string80.offset := 58];#memory_int := #memory_int[#t~string80.base,5 + #t~string80.offset := 0];call #t~string83.base, #t~string83.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string83.base,#t~string83.offset := 32];#memory_int := #memory_int[#t~string83.base,1 + #t~string83.offset := 37];#memory_int := #memory_int[#t~string83.base,2 + #t~string83.offset := 105];#memory_int := #memory_int[#t~string83.base,3 + #t~string83.offset := 0];call #t~string86.base, #t~string86.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string86.base,#t~string86.offset := 32];#memory_int := #memory_int[#t~string86.base,1 + #t~string86.offset := 37];#memory_int := #memory_int[#t~string86.base,2 + #t~string86.offset := 105];#memory_int := #memory_int[#t~string86.base,3 + #t~string86.offset := 0];call #t~string89.base, #t~string89.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string89.base,#t~string89.offset := 32];#memory_int := #memory_int[#t~string89.base,1 + #t~string89.offset := 37];#memory_int := #memory_int[#t~string89.base,2 + #t~string89.offset := 105];#memory_int := #memory_int[#t~string89.base,3 + #t~string89.offset := 0];call #t~string92.base, #t~string92.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string92.base,#t~string92.offset := 32];#memory_int := #memory_int[#t~string92.base,1 + #t~string92.offset := 37];#memory_int := #memory_int[#t~string92.base,2 + #t~string92.offset := 105];#memory_int := #memory_int[#t~string92.base,3 + #t~string92.offset := 0];call #t~string95.base, #t~string95.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string95.base,#t~string95.offset := 32];#memory_int := #memory_int[#t~string95.base,1 + #t~string95.offset := 37];#memory_int := #memory_int[#t~string95.base,2 + #t~string95.offset := 105];#memory_int := #memory_int[#t~string95.base,3 + #t~string95.offset := 0];call #t~string97.base, #t~string97.offset := #Ultimate.alloc(2);#memory_int := #memory_int[#t~string97.base,#t~string97.offset := 10];#memory_int := #memory_int[#t~string97.base,1 + #t~string97.offset := 0];call #t~string128.base, #t~string128.offset := #Ultimate.alloc(30);call #t~string129.base, #t~string129.offset := #Ultimate.alloc(9);call #t~string130.base, #t~string130.offset := #Ultimate.alloc(21);call #t~string131.base, #t~string131.offset := #Ultimate.alloc(30);call #t~string132.base, #t~string132.offset := #Ultimate.alloc(9);call #t~string133.base, #t~string133.offset := #Ultimate.alloc(21);call #t~string137.base, #t~string137.offset := #Ultimate.alloc(30);call #t~string138.base, #t~string138.offset := #Ultimate.alloc(9);call #t~string139.base, #t~string139.offset := #Ultimate.alloc(25);call #t~string140.base, #t~string140.offset := #Ultimate.alloc(30);call #t~string141.base, #t~string141.offset := #Ultimate.alloc(9);call #t~string142.base, #t~string142.offset := #Ultimate.alloc(25);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 871964#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res;havoc main_#t~ret159, main_~retValue_acc~26, main_~tmp~26;havoc main_~retValue_acc~26;havoc main_~tmp~26;assume { :begin_inline_select_helpers } true; 873153#L2122 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 872987#L2115 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res;havoc valid_product_~retValue_acc~21;havoc valid_product_~retValue_acc~21;valid_product_~retValue_acc~21 := 1;valid_product_#res := valid_product_~retValue_acc~21; 872988#L2130 main_#t~ret159 := valid_product_#res;assume { :end_inline_valid_product } true;main_~tmp~26 := main_#t~ret159;havoc main_#t~ret159; 870090#L2596 assume 0 != main_~tmp~26;assume { :begin_inline_setup } true; 870091#L2573 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret152, bigMacCall_~tmp~23;havoc bigMacCall_~tmp~23;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~23;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~23; 868136#L2178 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~23 := 4;getOrigin_#res := getOrigin_~retValue_acc~23; 867467#L2203 bigMacCall_#t~ret152 := getOrigin_#res;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~23 := bigMacCall_#t~ret152;havoc bigMacCall_#t~ret152;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~23;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 870592#L2963 assume 0 == initPersonOnFloor_~floor; 870593#L2964 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 867779#L3071-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 869178#L2755 assume !(0 == callOnFloor_~floorID); 871608#L2758 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 871609#L2767-2 assume { :end_inline_callOnFloor } true; 871836#L3107 assume { :end_inline_initPersonOnFloor } true; 871837#L2378 assume { :end_inline_bigMacCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_~tmp~10, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~10;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~8, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~8;havoc stopRequestedAtCurrentFloor_~tmp___0~4;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 869430#L2692 assume !(0 == isFloorCalling_~floorID); 869432#L2696 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 868312#L2719 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 873892#L1568 stopRequestedAtCurrentFloor_#t~ret25 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 873893#L952 assume 0 != stopRequestedAtCurrentFloor_~tmp~8;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 872131#L283 stopRequestedAtCurrentFloor_#t~ret26 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 872132#L956 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 880713#L969 timeShift_#t~ret41 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret41;havoc timeShift_#t~ret41; 880711#L1105 assume !(0 != timeShift_~tmp___9~2); 880709#L1196 assume !(1 == ~doorState~0); 873915#L1196-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 873916#L2692-3 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 869160#L2719-3 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 869161#L1568-1 stopRequestedInDirection_#t~ret19 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 880703#L835 assume 0 != stopRequestedInDirection_~tmp___0~2;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 880704#L283-1 stopRequestedInDirection_#t~ret20 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~5 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 896375#L848 timeShift_#t~ret48 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret48;havoc timeShift_#t~ret48; 896372#L1204 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret22, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 896373#L892 assume !(1 == ~currentHeading~0); 898263#L902 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 898262#L902-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 894506#L908-1 assume { :end_inline_continueInDirection } true; 894501#L1213-2 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret106, __utac_acc__Specification14_spec__1_#t~ret107, __utac_acc__Specification14_spec__1_#t~ret108, __utac_acc__Specification14_spec__1_#t~ret109, __utac_acc__Specification14_spec__1_~tmp~14, __utac_acc__Specification14_spec__1_~tmp___0~10, __utac_acc__Specification14_spec__1_~tmp___1~7, __utac_acc__Specification14_spec__1_~tmp___2~5;havoc __utac_acc__Specification14_spec__1_~tmp~14;havoc __utac_acc__Specification14_spec__1_~tmp___0~10;havoc __utac_acc__Specification14_spec__1_~tmp___1~7;havoc __utac_acc__Specification14_spec__1_~tmp___2~5;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 871199#L2692-25 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 869115#L2719-25 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 867582#L1568-3 __utac_acc__Specification14_spec__1_#t~ret106 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5 := __utac_acc__Specification14_spec__1_#t~ret106;havoc __utac_acc__Specification14_spec__1_#t~ret106; 867583#L1687 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5); 871804#L1687-1 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 868880#L1228 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_~tmp~10, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~10;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~8, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~8;havoc stopRequestedAtCurrentFloor_~tmp___0~4;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 868881#L2692-26 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 894485#L2719-26 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 894484#L1568-4 stopRequestedAtCurrentFloor_#t~ret25 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 894483#L952-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~8);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;havoc stopRequestedAtCurrentFloor__wrappee__weight_#res;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret23, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret24, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 894478#L2692-28 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 894476#L2719-28 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret23 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret23;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret23; 894473#L925-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11; 894472#L937-3 stopRequestedAtCurrentFloor_#t~ret28 := stopRequestedAtCurrentFloor__wrappee__weight_#res;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;stopRequestedAtCurrentFloor_~retValue_acc~12 := stopRequestedAtCurrentFloor_#t~ret28;havoc stopRequestedAtCurrentFloor_#t~ret28;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 894471#L969-1 timeShift_#t~ret41 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret41;havoc timeShift_#t~ret41; 894470#L1105-2 assume !(0 != timeShift_~tmp___9~2); 894469#L1196-3 assume !(1 == ~doorState~0); 894467#L1196-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 894466#L2692-29 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 894464#L2719-29 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 894463#L1568-5 stopRequestedInDirection_#t~ret19 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 894461#L835-2 assume 0 != stopRequestedInDirection_~tmp___0~2;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 894459#L283-5 stopRequestedInDirection_#t~ret20 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~5 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 894457#L848-2 timeShift_#t~ret48 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret48;havoc timeShift_#t~ret48; 894453#L1204-2 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret22, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 893887#L892-3 assume !(1 == ~currentHeading~0); 893881#L902-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 893877#L902-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 871611#L908-7 assume { :end_inline_continueInDirection } true; 867932#L1213-5 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret106, __utac_acc__Specification14_spec__1_#t~ret107, __utac_acc__Specification14_spec__1_#t~ret108, __utac_acc__Specification14_spec__1_#t~ret109, __utac_acc__Specification14_spec__1_~tmp~14, __utac_acc__Specification14_spec__1_~tmp___0~10, __utac_acc__Specification14_spec__1_~tmp___1~7, __utac_acc__Specification14_spec__1_~tmp___2~5;havoc __utac_acc__Specification14_spec__1_~tmp~14;havoc __utac_acc__Specification14_spec__1_~tmp___0~10;havoc __utac_acc__Specification14_spec__1_~tmp___1~7;havoc __utac_acc__Specification14_spec__1_~tmp___2~5;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 867933#L2692-51 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 877968#L2719-51 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 877969#L1568-7 __utac_acc__Specification14_spec__1_#t~ret106 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5 := __utac_acc__Specification14_spec__1_#t~ret106;havoc __utac_acc__Specification14_spec__1_#t~ret106; 877952#L1687-2 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5); 877951#L1687-3 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 877945#L1228-1 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_~tmp~10, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~10;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~8, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~8;havoc stopRequestedAtCurrentFloor_~tmp___0~4;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 877946#L2692-52 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 893772#L2719-52 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 893771#L1568-8 stopRequestedAtCurrentFloor_#t~ret25 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 893770#L952-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~8);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;havoc stopRequestedAtCurrentFloor__wrappee__weight_#res;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret23, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret24, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 893769#L2692-54 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 893763#L2719-54 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret23 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret23;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret23; 893755#L925-5 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11; 893753#L937-5 stopRequestedAtCurrentFloor_#t~ret28 := stopRequestedAtCurrentFloor__wrappee__weight_#res;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;stopRequestedAtCurrentFloor_~retValue_acc~12 := stopRequestedAtCurrentFloor_#t~ret28;havoc stopRequestedAtCurrentFloor_#t~ret28;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 893735#L969-2 timeShift_#t~ret41 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret41;havoc timeShift_#t~ret41; 893715#L1105-4 assume !(0 != timeShift_~tmp___9~2); 893716#L1196-6 assume !(1 == ~doorState~0); 894868#L1196-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 871095#L2692-55 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 871096#L2719-55 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 895053#L1568-9 stopRequestedInDirection_#t~ret19 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 895051#L835-4 assume 0 != stopRequestedInDirection_~tmp___0~2;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 895052#L283-9 stopRequestedInDirection_#t~ret20 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~5 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 895278#L848-4 timeShift_#t~ret48 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret48;havoc timeShift_#t~ret48; 895272#L1204-4 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret22, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 894509#L892-6 assume !(1 == ~currentHeading~0); 894451#L902-18 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 894450#L902-20 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 871596#L908-13 assume { :end_inline_continueInDirection } true; 867945#L1213-8 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret106, __utac_acc__Specification14_spec__1_#t~ret107, __utac_acc__Specification14_spec__1_#t~ret108, __utac_acc__Specification14_spec__1_#t~ret109, __utac_acc__Specification14_spec__1_~tmp~14, __utac_acc__Specification14_spec__1_~tmp___0~10, __utac_acc__Specification14_spec__1_~tmp___1~7, __utac_acc__Specification14_spec__1_~tmp___2~5;havoc __utac_acc__Specification14_spec__1_~tmp~14;havoc __utac_acc__Specification14_spec__1_~tmp___0~10;havoc __utac_acc__Specification14_spec__1_~tmp___1~7;havoc __utac_acc__Specification14_spec__1_~tmp___2~5;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 867946#L2692-77 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 869043#L2719-77 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 867572#L1568-11 __utac_acc__Specification14_spec__1_#t~ret106 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5 := __utac_acc__Specification14_spec__1_#t~ret106;havoc __utac_acc__Specification14_spec__1_#t~ret106; 867573#L1687-4 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5); 871783#L1687-5 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 868884#L1228-2 assume { :end_inline_timeShift } true; 868885#L2390 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret147, bobCall_~tmp~18;havoc bobCall_~tmp~18;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~23;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~23; 868147#L2178-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~23 := 4;getOrigin_#res := getOrigin_~retValue_acc~23; 867982#L2203-1 bobCall_#t~ret147 := getOrigin_#res;assume { :end_inline_getOrigin } true;bobCall_~tmp~18 := bobCall_#t~ret147;havoc bobCall_#t~ret147;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~18;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 870601#L2963-1 assume 0 == initPersonOnFloor_~floor; 870602#L2964-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 867425#L3071-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 869186#L2755-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 871805#L2767-5 assume { :end_inline_callOnFloor } true; 878519#L3107-1 assume { :end_inline_initPersonOnFloor } true; 878520#L2323 assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret153, cleanup_#t~ret154, cleanup_~i~3, cleanup_~tmp~24, cleanup_~tmp___0~11, cleanup_~__cil_tmp4~2;havoc cleanup_~i~3;havoc cleanup_~tmp~24;havoc cleanup_~tmp___0~11;havoc cleanup_~__cil_tmp4~2;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_~tmp~10, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~10;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~8, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~8;havoc stopRequestedAtCurrentFloor_~tmp___0~4;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 875074#L2692-78 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 875075#L2719-78 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 875066#L1568-12 stopRequestedAtCurrentFloor_#t~ret25 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 875067#L952-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~8;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 872087#L283-12 stopRequestedAtCurrentFloor_#t~ret26 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 872088#L956-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 886028#L969-3 timeShift_#t~ret41 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret41;havoc timeShift_#t~ret41; 886029#L1105-6 assume !(0 != timeShift_~tmp___9~2); 890242#L1196-9 assume !(1 == ~doorState~0); 890241#L1196-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 890240#L2692-81 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 890239#L2719-81 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 890238#L1568-13 stopRequestedInDirection_#t~ret19 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 890236#L835-6 assume 0 != stopRequestedInDirection_~tmp___0~2;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 890235#L283-13 stopRequestedInDirection_#t~ret20 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~5 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 890225#L848-6 timeShift_#t~ret48 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret48;havoc timeShift_#t~ret48; 887050#L1204-6 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret22, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 887030#L892-9 assume !(1 == ~currentHeading~0); 887007#L902-27 assume !(0 == ~currentFloorID~0); 887006#L902-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 887005#L908-19 assume { :end_inline_continueInDirection } true; 877144#L1213-11 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret106, __utac_acc__Specification14_spec__1_#t~ret107, __utac_acc__Specification14_spec__1_#t~ret108, __utac_acc__Specification14_spec__1_#t~ret109, __utac_acc__Specification14_spec__1_~tmp~14, __utac_acc__Specification14_spec__1_~tmp___0~10, __utac_acc__Specification14_spec__1_~tmp___1~7, __utac_acc__Specification14_spec__1_~tmp___2~5;havoc __utac_acc__Specification14_spec__1_~tmp~14;havoc __utac_acc__Specification14_spec__1_~tmp___0~10;havoc __utac_acc__Specification14_spec__1_~tmp___1~7;havoc __utac_acc__Specification14_spec__1_~tmp___2~5;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 877145#L2692-103 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 877138#L2719-103 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 877139#L1568-15 __utac_acc__Specification14_spec__1_#t~ret106 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5 := __utac_acc__Specification14_spec__1_#t~ret106;havoc __utac_acc__Specification14_spec__1_#t~ret106; 877134#L1687-6 assume 0 != __utac_acc__Specification14_spec__1_~tmp___2~5;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 877135#L283-15 __utac_acc__Specification14_spec__1_#t~ret107 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification14_spec__1_~tmp~14 := __utac_acc__Specification14_spec__1_#t~ret107;havoc __utac_acc__Specification14_spec__1_#t~ret107;assume { :begin_inline_isExecutiveFloor } true;isExecutiveFloor_#in~floorID := __utac_acc__Specification14_spec__1_~tmp~14;havoc isExecutiveFloor_#res;havoc isExecutiveFloor_~floorID, isExecutiveFloor_~retValue_acc~16;isExecutiveFloor_~floorID := isExecutiveFloor_#in~floorID;havoc isExecutiveFloor_~retValue_acc~16;isExecutiveFloor_~retValue_acc~16 := (if ~executiveFloor~0 == isExecutiveFloor_~floorID then 1 else 0);isExecutiveFloor_#res := isExecutiveFloor_~retValue_acc~16; 877128#L1577-3 __utac_acc__Specification14_spec__1_#t~ret108 := isExecutiveFloor_#res;assume { :end_inline_isExecutiveFloor } true;__utac_acc__Specification14_spec__1_~tmp___0~10 := __utac_acc__Specification14_spec__1_#t~ret108;havoc __utac_acc__Specification14_spec__1_#t~ret108; 877129#L1692-6 assume 0 != __utac_acc__Specification14_spec__1_~tmp___0~10; 877122#L1687-7 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 877123#L1228-3 assume { :end_inline_timeShift } true;cleanup_~i~3 := 0; 877117#L2405-3 [2018-11-18 15:38:56,510 INFO L796 eck$LassoCheckResult]: Loop: 877117#L2405-3 assume true; 877118#L2405-1 assume !false; 877113#L2406 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 877114#L2409 assume cleanup_~i~3 < cleanup_~__cil_tmp4~2;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~0;havoc isBlocked_~retValue_acc~0;isBlocked_~retValue_acc~0 := 0;isBlocked_#res := isBlocked_~retValue_acc~0; 877109#L130 cleanup_#t~ret153 := isBlocked_#res;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~11 := cleanup_#t~ret153;havoc cleanup_#t~ret153; 877110#L2413 assume 1 != cleanup_~tmp___0~11; 913248#L2413-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res;havoc isIdle_#t~ret7, isIdle_~retValue_acc~7, isIdle_~tmp~3;havoc isIdle_~retValue_acc~7;havoc isIdle_~tmp~3;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret2, anyStopRequested_#t~ret3, anyStopRequested_#t~ret4, anyStopRequested_#t~ret5, anyStopRequested_#t~ret6, anyStopRequested_~retValue_acc~6, anyStopRequested_~tmp~2, anyStopRequested_~tmp___0~0, anyStopRequested_~tmp___1~0, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~6;havoc anyStopRequested_~tmp~2;havoc anyStopRequested_~tmp___0~0;havoc anyStopRequested_~tmp___1~0;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 877104#L2692-104 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 877105#L2719-104 anyStopRequested_#t~ret2 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret2;havoc anyStopRequested_#t~ret2; 877100#L391 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~6 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~6; 877101#L455 isIdle_#t~ret7 := anyStopRequested_#res;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~3 := isIdle_#t~ret7;havoc isIdle_#t~ret7;isIdle_~retValue_acc~7 := (if 0 == isIdle_~tmp~3 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~7; 877096#L468 cleanup_#t~ret154 := isIdle_#res;assume { :end_inline_isIdle } true;cleanup_~tmp~24 := cleanup_#t~ret154;havoc cleanup_#t~ret154; 877097#L2425 assume !(0 != cleanup_~tmp~24);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_~tmp~10, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~10;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~8, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~8;havoc stopRequestedAtCurrentFloor_~tmp___0~4;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 877091#L2692-109 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 877089#L2719-109 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 877084#L1568-16 stopRequestedAtCurrentFloor_#t~ret25 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~8 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 877085#L952-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~8;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 877079#L283-16 stopRequestedAtCurrentFloor_#t~ret26 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 877080#L956-4 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 886613#L969-4 timeShift_#t~ret41 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret41;havoc timeShift_#t~ret41; 886614#L1105-8 assume !(0 != timeShift_~tmp___9~2); 913241#L1196-12 assume !(1 == ~doorState~0); 913240#L1196-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 913239#L2692-112 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 913238#L2719-112 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 913237#L1568-17 stopRequestedInDirection_#t~ret19 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 913235#L835-8 assume 0 != stopRequestedInDirection_~tmp___0~2;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 913233#L283-17 stopRequestedInDirection_#t~ret20 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~5 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 913229#L848-8 timeShift_#t~ret48 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret48;havoc timeShift_#t~ret48; 913221#L1204-8 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret22, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 913218#L892-12 assume !(1 == ~currentHeading~0); 913215#L902-36 assume !(0 == ~currentFloorID~0); 913212#L902-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 911351#L908-25 assume { :end_inline_continueInDirection } true; 911352#L1213-14 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret106, __utac_acc__Specification14_spec__1_#t~ret107, __utac_acc__Specification14_spec__1_#t~ret108, __utac_acc__Specification14_spec__1_#t~ret109, __utac_acc__Specification14_spec__1_~tmp~14, __utac_acc__Specification14_spec__1_~tmp___0~10, __utac_acc__Specification14_spec__1_~tmp___1~7, __utac_acc__Specification14_spec__1_~tmp___2~5;havoc __utac_acc__Specification14_spec__1_~tmp~14;havoc __utac_acc__Specification14_spec__1_~tmp___0~10;havoc __utac_acc__Specification14_spec__1_~tmp___1~7;havoc __utac_acc__Specification14_spec__1_~tmp___2~5;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 877160#L2692-134 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 877159#L2719-134 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 877158#L1568-19 __utac_acc__Specification14_spec__1_#t~ret106 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~5 := __utac_acc__Specification14_spec__1_#t~ret106;havoc __utac_acc__Specification14_spec__1_#t~ret106; 877157#L1687-8 assume 0 != __utac_acc__Specification14_spec__1_~tmp___2~5;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 877156#L283-19 __utac_acc__Specification14_spec__1_#t~ret107 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification14_spec__1_~tmp~14 := __utac_acc__Specification14_spec__1_#t~ret107;havoc __utac_acc__Specification14_spec__1_#t~ret107;assume { :begin_inline_isExecutiveFloor } true;isExecutiveFloor_#in~floorID := __utac_acc__Specification14_spec__1_~tmp~14;havoc isExecutiveFloor_#res;havoc isExecutiveFloor_~floorID, isExecutiveFloor_~retValue_acc~16;isExecutiveFloor_~floorID := isExecutiveFloor_#in~floorID;havoc isExecutiveFloor_~retValue_acc~16;isExecutiveFloor_~retValue_acc~16 := (if ~executiveFloor~0 == isExecutiveFloor_~floorID then 1 else 0);isExecutiveFloor_#res := isExecutiveFloor_~retValue_acc~16; 877154#L1577-4 __utac_acc__Specification14_spec__1_#t~ret108 := isExecutiveFloor_#res;assume { :end_inline_isExecutiveFloor } true;__utac_acc__Specification14_spec__1_~tmp___0~10 := __utac_acc__Specification14_spec__1_#t~ret108;havoc __utac_acc__Specification14_spec__1_#t~ret108; 877155#L1692-8 assume 0 != __utac_acc__Specification14_spec__1_~tmp___0~10; 877148#L1687-9 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 877149#L1228-4 assume { :end_inline_timeShift } true;cleanup_~i~3 := 1 + cleanup_~i~3; 877117#L2405-3 [2018-11-18 15:38:56,514 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 15:38:56,514 INFO L82 PathProgramCache]: Analyzing trace with hash 1080414807, now seen corresponding path program 1 times [2018-11-18 15:38:56,514 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 15:38:56,514 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 15:38:56,515 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 15:38:56,515 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 15:38:56,515 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 15:38:56,526 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 15:38:57,288 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 15:38:57,288 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 15:38:57,289 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-18 15:38:57,289 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-18 15:38:57,289 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 15:38:57,289 INFO L82 PathProgramCache]: Analyzing trace with hash 890015365, now seen corresponding path program 1 times [2018-11-18 15:38:57,289 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 15:38:57,289 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 15:38:57,290 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 15:38:57,290 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 15:38:57,290 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 15:38:57,296 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2018-11-18 15:38:57,303 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2018-11-18 15:38:57,779 WARN L180 SmtUtils]: Spent 445.00 ms on a formula simplification. DAG size of input: 191 DAG size of output: 172 [2018-11-18 15:38:58,275 WARN L180 SmtUtils]: Spent 442.00 ms on a formula simplification. DAG size of input: 169 DAG size of output: 121 [2018-11-18 15:38:58,282 INFO L216 LassoAnalysis]: Preferences: [2018-11-18 15:38:58,283 INFO L124 ssoRankerPreferences]: Compute integeral hull: false [2018-11-18 15:38:58,283 INFO L125 ssoRankerPreferences]: Enable LassoPartitioneer: true [2018-11-18 15:38:58,283 INFO L126 ssoRankerPreferences]: Term annotations enabled: false [2018-11-18 15:38:58,284 INFO L127 ssoRankerPreferences]: Use exernal solver: true [2018-11-18 15:38:58,284 INFO L128 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 15:38:58,284 INFO L129 ssoRankerPreferences]: Dump SMT script to file: false [2018-11-18 15:38:58,284 INFO L130 ssoRankerPreferences]: Path of dumped script: [2018-11-18 15:38:58,284 INFO L131 ssoRankerPreferences]: Filename of dumped script: elevator_spec14_product19_true-unreach-call_true-termination.cil.c_Iteration5_Loop [2018-11-18 15:38:58,284 INFO L132 ssoRankerPreferences]: MapElimAlgo: Frank [2018-11-18 15:38:58,284 INFO L282 LassoAnalysis]: Starting lasso preprocessing... [2018-11-18 15:38:58,305 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:38:58,313 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:38:58,321 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:38:58,323 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:38:58,325 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:38:58,330 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:38:58,335 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:38:58,336 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:38:58,337 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:38:58,339 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:38:58,341 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:38:58,344 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:38:58,360 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:38:58,362 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:38:58,364 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:38:58,367 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:38:58,383 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:38:58,385 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:38:58,387 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:38:58,389 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:38:58,391 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:38:58,393 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:38:58,394 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:38:58,395 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:38:58,397 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:38:58,400 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:38:58,411 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:38:58,413 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:38:58,418 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:38:58,419 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:38:58,421 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:38:58,425 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:38:58,427 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:38:58,448 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:38:58,449 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:38:58,450 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:38:58,452 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:38:58,457 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:38:58,461 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:38:58,463 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:38:58,467 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:38:58,469 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:38:58,470 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:38:58,471 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:38:58,473 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:38:58,477 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:38:58,478 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:38:58,479 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:38:58,480 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:38:58,481 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:38:58,482 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:38:58,485 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:38:58,487 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:38:58,487 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:38:58,488 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:38:58,489 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:38:58,490 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:38:58,496 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:38:58,496 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:38:58,497 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:38:58,498 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:38:58,499 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:38:58,500 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:38:58,501 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:38:58,826 INFO L300 LassoAnalysis]: Preprocessing complete. [2018-11-18 15:38:58,828 INFO L412 LassoAnalysis]: Checking for nontermination... No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_1565a7fb-9549-4849-b471-ed1ec8354dd7/bin-2019/uautomizer/z3 Starting monitored process 2 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 2 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 15:38:58,838 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 15:38:58,838 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 15:38:58,845 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 15:38:58,846 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification14_spec__1_#t~ret106=0} Honda state: {ULTIMATE.start___utac_acc__Specification14_spec__1_#t~ret106=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_1565a7fb-9549-4849-b471-ed1ec8354dd7/bin-2019/uautomizer/z3 Starting monitored process 3 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 3 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 15:38:58,866 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 15:38:58,866 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 15:38:58,868 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 15:38:58,869 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_cleanup_#t~ret153=0} Honda state: {ULTIMATE.start_cleanup_#t~ret153=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_1565a7fb-9549-4849-b471-ed1ec8354dd7/bin-2019/uautomizer/z3 Starting monitored process 4 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 4 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 15:38:58,890 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 15:38:58,890 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 15:38:58,892 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 15:38:58,892 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_#t~ret20=0} Honda state: {ULTIMATE.start_stopRequestedInDirection_#t~ret20=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_1565a7fb-9549-4849-b471-ed1ec8354dd7/bin-2019/uautomizer/z3 Starting monitored process 5 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 5 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 15:38:58,919 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 15:38:58,919 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 15:38:58,921 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 15:38:58,921 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_anyStopRequested_~tmp___1~0=0} Honda state: {ULTIMATE.start_anyStopRequested_~tmp___1~0=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_1565a7fb-9549-4849-b471-ed1ec8354dd7/bin-2019/uautomizer/z3 Starting monitored process 6 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 6 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 15:38:58,954 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 15:38:58,954 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 15:38:58,957 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 15:38:58,957 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedAtCurrentFloor_#res=0, ULTIMATE.start_stopRequestedAtCurrentFloor_~retValue_acc~12=0} Honda state: {ULTIMATE.start_stopRequestedAtCurrentFloor_#res=0, ULTIMATE.start_stopRequestedAtCurrentFloor_~retValue_acc~12=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_1565a7fb-9549-4849-b471-ed1ec8354dd7/bin-2019/uautomizer/z3 Starting monitored process 7 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 7 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 15:38:58,975 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 15:38:58,975 INFO L163 nArgumentSynthesizer]: Using integer mode. No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_1565a7fb-9549-4849-b471-ed1ec8354dd7/bin-2019/uautomizer/z3 Starting monitored process 8 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 8 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 15:38:58,998 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 3 Nilpotent components: true [2018-11-18 15:38:58,998 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 15:38:59,483 INFO L452 LassoAnalysis]: Proving nontermination failed: No geometric nontermination argument exists. [2018-11-18 15:38:59,485 INFO L216 LassoAnalysis]: Preferences: [2018-11-18 15:38:59,485 INFO L124 ssoRankerPreferences]: Compute integeral hull: false [2018-11-18 15:38:59,485 INFO L125 ssoRankerPreferences]: Enable LassoPartitioneer: true [2018-11-18 15:38:59,485 INFO L126 ssoRankerPreferences]: Term annotations enabled: false [2018-11-18 15:38:59,485 INFO L127 ssoRankerPreferences]: Use exernal solver: false [2018-11-18 15:38:59,485 INFO L128 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 15:38:59,485 INFO L129 ssoRankerPreferences]: Dump SMT script to file: false [2018-11-18 15:38:59,485 INFO L130 ssoRankerPreferences]: Path of dumped script: [2018-11-18 15:38:59,485 INFO L131 ssoRankerPreferences]: Filename of dumped script: elevator_spec14_product19_true-unreach-call_true-termination.cil.c_Iteration5_Loop [2018-11-18 15:38:59,485 INFO L132 ssoRankerPreferences]: MapElimAlgo: Frank [2018-11-18 15:38:59,485 INFO L282 LassoAnalysis]: Starting lasso preprocessing... [2018-11-18 15:38:59,489 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:38:59,499 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:38:59,501 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:38:59,502 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:38:59,508 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:38:59,510 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:38:59,515 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:38:59,516 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:38:59,517 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:38:59,542 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:38:59,545 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:38:59,547 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:38:59,552 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:38:59,554 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:38:59,557 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:38:59,560 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:38:59,562 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:38:59,568 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:38:59,581 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:38:59,584 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:38:59,586 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:38:59,588 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:38:59,591 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:38:59,593 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:38:59,596 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:38:59,609 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:38:59,611 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:38:59,617 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:38:59,620 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:38:59,622 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:38:59,624 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:38:59,628 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:38:59,632 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:38:59,634 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:38:59,636 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:38:59,646 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:38:59,648 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:38:59,650 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:38:59,657 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:38:59,664 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:38:59,666 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:38:59,677 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:38:59,679 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:38:59,681 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:38:59,683 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:38:59,684 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:38:59,686 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:38:59,688 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:38:59,693 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:38:59,695 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:38:59,701 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:38:59,711 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:38:59,713 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:38:59,715 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:38:59,752 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:38:59,754 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:38:59,756 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:38:59,767 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:38:59,769 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:38:59,771 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:38:59,773 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:38:59,774 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:38:59,777 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:38:59,779 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:39:00,172 INFO L300 LassoAnalysis]: Preprocessing complete. [2018-11-18 15:39:00,176 INFO L497 LassoAnalysis]: Using template 'affine'. [2018-11-18 15:39:00,177 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 15:39:00,178 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 15:39:00,179 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 15:39:00,179 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 15:39:00,179 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 15:39:00,179 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 15:39:00,180 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 15:39:00,181 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 15:39:00,183 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 15:39:00,183 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 15:39:00,183 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 15:39:00,184 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 15:39:00,184 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 15:39:00,184 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 15:39:00,184 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 15:39:00,184 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 15:39:00,184 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 15:39:00,185 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 15:39:00,185 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 15:39:00,185 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 15:39:00,186 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 15:39:00,186 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 15:39:00,186 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 15:39:00,186 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 15:39:00,186 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 15:39:00,186 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 15:39:00,187 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 15:39:00,187 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 15:39:00,187 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 15:39:00,188 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 15:39:00,188 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 15:39:00,188 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 15:39:00,188 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 15:39:00,188 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 15:39:00,188 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 15:39:00,189 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 15:39:00,190 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 15:39:00,190 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 15:39:00,190 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 15:39:00,190 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 15:39:00,190 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 15:39:00,190 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 15:39:00,191 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 15:39:00,191 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 15:39:00,191 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 15:39:00,191 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 15:39:00,192 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 15:39:00,192 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 15:39:00,192 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 15:39:00,192 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 15:39:00,192 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 15:39:00,193 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 15:39:00,193 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 15:39:00,196 INFO L421 nArgumentSynthesizer]: Found a termination argument, trying to simplify. [2018-11-18 15:39:00,200 INFO L443 ModelExtractionUtils]: Simplification made 4 calls to the SMT solver. [2018-11-18 15:39:00,200 INFO L444 ModelExtractionUtils]: 1 out of 5 variables were initially zero. Simplification set additionally 1 variables to zero. [2018-11-18 15:39:00,201 INFO L437 nArgumentSynthesizer]: Simplifying supporting invariants... [2018-11-18 15:39:00,202 INFO L440 nArgumentSynthesizer]: Removed 0 redundant supporting invariants from a total of 0. [2018-11-18 15:39:00,202 INFO L518 LassoAnalysis]: Proved termination. [2018-11-18 15:39:00,202 INFO L520 LassoAnalysis]: Termination argument consisting of: Ranking function f(~cleanupTimeShifts~0, ULTIMATE.start_cleanup_~i~3) = 1*~cleanupTimeShifts~0 - 1*ULTIMATE.start_cleanup_~i~3 Supporting invariants [] [2018-11-18 15:39:00,203 INFO L297 tatePredicateManager]: 0 out of 0 supporting invariants were superfluous and have been removed [2018-11-18 15:39:00,238 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 15:39:00,336 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 15:39:00,345 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-18 15:39:00,385 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 15:39:00,387 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-18 15:39:00,410 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 15:39:00,415 INFO L152 lantAutomatonBouncer]: Defining deterministic Buchi interpolant automaton with honda bouncer for stem and without honda bouncer for loop.1 stem predicates 3 loop predicates [2018-11-18 15:39:00,416 INFO L72 iDifferenceNCSBLazy3]: Start buchiDifferenceNCSBLazy3. First operand 61932 states and 114943 transitions. cyclomatic complexity: 53017 Second operand 5 states. [2018-11-18 15:39:00,872 INFO L76 iDifferenceNCSBLazy3]: Finished buchiDifferenceNCSBLazy3. First operand 61932 states and 114943 transitions. cyclomatic complexity: 53017. Second operand 5 states. Result 75986 states and 140945 transitions. Complement of second has 8 states. [2018-11-18 15:39:00,873 INFO L142 InterpolantAutomaton]: Switched to read-only mode: Buchi interpolant automaton has 5 states 1 stem states 3 non-accepting loop states 1 accepting loop states [2018-11-18 15:39:00,873 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2018-11-18 15:39:00,880 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 11237 transitions. [2018-11-18 15:39:00,882 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 5 states and 11237 transitions. Stem has 147 letters. Loop has 44 letters. [2018-11-18 15:39:00,883 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2018-11-18 15:39:00,884 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 5 states and 11237 transitions. Stem has 191 letters. Loop has 44 letters. [2018-11-18 15:39:00,885 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2018-11-18 15:39:00,885 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 5 states and 11237 transitions. Stem has 147 letters. Loop has 88 letters. [2018-11-18 15:39:00,886 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2018-11-18 15:39:00,886 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 75986 states and 140945 transitions. [2018-11-18 15:39:01,118 INFO L131 ngComponentsAnalysis]: Automaton has 0 accepting balls. 0 [2018-11-18 15:39:01,119 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 75986 states to 0 states and 0 transitions. [2018-11-18 15:39:01,119 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 0 [2018-11-18 15:39:01,119 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 0 [2018-11-18 15:39:01,119 INFO L73 IsDeterministic]: Start isDeterministic. Operand 0 states and 0 transitions. [2018-11-18 15:39:01,119 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-18 15:39:01,119 INFO L705 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2018-11-18 15:39:01,119 INFO L728 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2018-11-18 15:39:01,119 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-18 15:39:01,119 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-18 15:39:01,120 INFO L87 Difference]: Start difference. First operand 0 states and 0 transitions. Second operand 3 states. [2018-11-18 15:39:01,120 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 15:39:01,120 INFO L93 Difference]: Finished difference Result 0 states and 0 transitions. [2018-11-18 15:39:01,120 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2018-11-18 15:39:01,120 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 0 states and 0 transitions. [2018-11-18 15:39:01,120 INFO L131 ngComponentsAnalysis]: Automaton has 0 accepting balls. 0 [2018-11-18 15:39:01,120 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 0 states to 0 states and 0 transitions. [2018-11-18 15:39:01,120 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 0 [2018-11-18 15:39:01,120 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 0 [2018-11-18 15:39:01,120 INFO L73 IsDeterministic]: Start isDeterministic. Operand 0 states and 0 transitions. [2018-11-18 15:39:01,120 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-18 15:39:01,120 INFO L705 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2018-11-18 15:39:01,121 INFO L728 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2018-11-18 15:39:01,121 INFO L608 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2018-11-18 15:39:01,121 INFO L442 BuchiCegarLoop]: ======== Iteration 6============ [2018-11-18 15:39:01,121 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 0 states and 0 transitions. [2018-11-18 15:39:01,121 INFO L131 ngComponentsAnalysis]: Automaton has 0 accepting balls. 0 [2018-11-18 15:39:01,121 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is true [2018-11-18 15:39:01,126 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer CFG 18.11 03:39:01 BoogieIcfgContainer [2018-11-18 15:39:01,127 INFO L132 PluginConnector]: ------------------------ END BuchiAutomizer---------------------------- [2018-11-18 15:39:01,127 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2018-11-18 15:39:01,127 INFO L271 PluginConnector]: Initializing Witness Printer... [2018-11-18 15:39:01,127 INFO L276 PluginConnector]: Witness Printer initialized [2018-11-18 15:39:01,128 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 18.11 03:37:56" (3/4) ... [2018-11-18 15:39:01,131 INFO L147 WitnessPrinter]: No result that supports witness generation found [2018-11-18 15:39:01,131 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2018-11-18 15:39:01,131 INFO L168 Benchmark]: Toolchain (without parser) took 71740.98 ms. Allocated memory was 1.0 GB in the beginning and 5.2 GB in the end (delta: 4.1 GB). Free memory was 955.4 MB in the beginning and 692.4 MB in the end (delta: 263.0 MB). Peak memory consumption was 4.4 GB. Max. memory is 11.5 GB. [2018-11-18 15:39:01,132 INFO L168 Benchmark]: CDTParser took 0.15 ms. Allocated memory is still 1.0 GB. Free memory is still 982.7 MB. There was no memory consumed. Max. memory is 11.5 GB. [2018-11-18 15:39:01,132 INFO L168 Benchmark]: CACSL2BoogieTranslator took 571.77 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 167.8 MB). Free memory was 955.4 MB in the beginning and 1.1 GB in the end (delta: -175.1 MB). Peak memory consumption was 50.5 MB. Max. memory is 11.5 GB. [2018-11-18 15:39:01,133 INFO L168 Benchmark]: Boogie Procedure Inliner took 177.32 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 54.1 MB). Peak memory consumption was 54.1 MB. Max. memory is 11.5 GB. [2018-11-18 15:39:01,133 INFO L168 Benchmark]: Boogie Preprocessor took 182.68 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.0 GB in the end (delta: 60.3 MB). Peak memory consumption was 60.3 MB. Max. memory is 11.5 GB. [2018-11-18 15:39:01,134 INFO L168 Benchmark]: RCFGBuilder took 6426.57 ms. Allocated memory was 1.2 GB in the beginning and 1.4 GB in the end (delta: 201.9 MB). Free memory was 1.0 GB in the beginning and 797.7 MB in the end (delta: 218.3 MB). Peak memory consumption was 432.4 MB. Max. memory is 11.5 GB. [2018-11-18 15:39:01,134 INFO L168 Benchmark]: BuchiAutomizer took 64375.63 ms. Allocated memory was 1.4 GB in the beginning and 5.2 GB in the end (delta: 3.8 GB). Free memory was 797.7 MB in the beginning and 692.4 MB in the end (delta: 105.3 MB). Peak memory consumption was 3.9 GB. Max. memory is 11.5 GB. [2018-11-18 15:39:01,135 INFO L168 Benchmark]: Witness Printer took 3.88 ms. Allocated memory is still 5.2 GB. Free memory is still 692.4 MB. There was no memory consumed. Max. memory is 11.5 GB. [2018-11-18 15:39:01,138 INFO L336 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.15 ms. Allocated memory is still 1.0 GB. Free memory is still 982.7 MB. There was no memory consumed. Max. memory is 11.5 GB. * CACSL2BoogieTranslator took 571.77 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 167.8 MB). Free memory was 955.4 MB in the beginning and 1.1 GB in the end (delta: -175.1 MB). Peak memory consumption was 50.5 MB. Max. memory is 11.5 GB. * Boogie Procedure Inliner took 177.32 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 54.1 MB). Peak memory consumption was 54.1 MB. Max. memory is 11.5 GB. * Boogie Preprocessor took 182.68 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.0 GB in the end (delta: 60.3 MB). Peak memory consumption was 60.3 MB. Max. memory is 11.5 GB. * RCFGBuilder took 6426.57 ms. Allocated memory was 1.2 GB in the beginning and 1.4 GB in the end (delta: 201.9 MB). Free memory was 1.0 GB in the beginning and 797.7 MB in the end (delta: 218.3 MB). Peak memory consumption was 432.4 MB. Max. memory is 11.5 GB. * BuchiAutomizer took 64375.63 ms. Allocated memory was 1.4 GB in the beginning and 5.2 GB in the end (delta: 3.8 GB). Free memory was 797.7 MB in the beginning and 692.4 MB in the end (delta: 105.3 MB). Peak memory consumption was 3.9 GB. Max. memory is 11.5 GB. * Witness Printer took 3.88 ms. Allocated memory is still 5.2 GB. Free memory is still 692.4 MB. There was no memory consumed. Max. memory is 11.5 GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: Constructed decomposition of program Your program was decomposed into 6 terminating modules (5 trivial, 1 deterministic, 0 nondeterministic). One deterministic module has affine ranking function cleanupTimeShifts + -1 * i and consists of 5 locations. 5 modules have a trivial ranking function, the largest among these consists of 8 locations. - StatisticsResult: Timing statistics BüchiAutomizer plugin needed 64.3s and 6 iterations. TraceHistogramMax:1. Analysis of lassos took 7.4s. Construction of modules took 32.8s. Büchi inclusion checks took 9.9s. Highest rank in rank-based complementation 3. Minimization of det autom 6. Minimization of nondet autom 0. Automata minimization 8.6s AutomataMinimizationTime, 4 MinimizatonAttempts, 576429 StatesRemovedByMinimization, 4 NontrivialMinimizations. Non-live state removal took 4.0s Buchi closure took 0.4s. Biggest automaton had 62485 states and ocurred in iteration 3. Nontrivial modules had stage [1, 0, 0, 0, 0]. InterpolantCoveringCapabilityFinite: 0/0 InterpolantCoveringCapabilityBuchi: 0/0 HoareTripleCheckerStatistics: 92022 SDtfs, 523125 SDslu, 575341 SDs, 0 SdLazy, 26460 SolverSat, 3922 SolverUnsat, 0 SolverUnknown, 0 SolverNotchecked, 32.8s Time LassoAnalysisResults: nont0 unkn0 SFLI0 SFLT0 conc0 concLT0 SILN0 SILU0 SILI4 SILT1 lasso0 LassoPreprocessingBenchmarks: Lassos: inital176 mio100 ax100 hnf100 lsp21 ukn100 mio100 lsp100 div100 bol100 ite100 ukn100 eq224 hnf86 smp100 dnf150 smp100 tf101 neg98 sie103 LassoTerminationAnalysisBenchmarks: ConstraintsSatisfiability: unsat Degree: 0 Time: 5ms VariablesStem: 0 VariablesLoop: 2 DisjunctsStem: 1 DisjunctsLoop: 1 SupportingInvariants: 0 MotzkinApplications: 2 LassoTerminationAnalysisBenchmarks: LassoNonterminationAnalysisSatFixpoint: 5 LassoNonterminationAnalysisSatUnbounded: 0 LassoNonterminationAnalysisUnsat: 1 LassoNonterminationAnalysisUnknown: 0 LassoNonterminationAnalysisTime: 0.5s - TerminationAnalysisResult: Termination proven Buchi Automizer proved that your program is terminating RESULT: Ultimate proved your program to be correct! [MP z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (1)] Forcibly destroying the process Received shutdown request...