./Ultimate.py --spec ../../sv-benchmarks/c/Termination.prp --file ../../sv-benchmarks/c/product-lines/elevator_spec14_product23_true-unreach-call_true-termination.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for termination Using default analysis Version 5842f4b8 Calling Ultimate with: java -Dosgi.configuration.area=/tmp/vcloud-vcloud-master/worker/working_dir_8fdaa819-2e7e-4395-8b13-972f21c147e2/bin-2019/uautomizer/data/config -Xmx12G -Xms1G -jar /tmp/vcloud-vcloud-master/worker/working_dir_8fdaa819-2e7e-4395-8b13-972f21c147e2/bin-2019/uautomizer/plugins/org.eclipse.equinox.launcher_1.3.100.v20150511-1540.jar -data @noDefault -ultimatedata /tmp/vcloud-vcloud-master/worker/working_dir_8fdaa819-2e7e-4395-8b13-972f21c147e2/bin-2019/uautomizer/data -tc /tmp/vcloud-vcloud-master/worker/working_dir_8fdaa819-2e7e-4395-8b13-972f21c147e2/bin-2019/uautomizer/config/AutomizerTermination.xml -i ../../sv-benchmarks/c/product-lines/elevator_spec14_product23_true-unreach-call_true-termination.cil.c -s /tmp/vcloud-vcloud-master/worker/working_dir_8fdaa819-2e7e-4395-8b13-972f21c147e2/bin-2019/uautomizer/config/svcomp-Termination-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud-vcloud-master/worker/working_dir_8fdaa819-2e7e-4395-8b13-972f21c147e2/bin-2019/uautomizer --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(F end) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash b469da88d090b934567b045cce13a1bacba3958c ...................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................... Execution finished normally Writing output log to file Ultimate.log Result: TRUE --- Real Ultimate output --- This is Ultimate 0.1.23-5842f4b [2018-11-18 15:12:59,343 INFO L170 SettingsManager]: Resetting all preferences to default values... [2018-11-18 15:12:59,344 INFO L174 SettingsManager]: Resetting UltimateCore preferences to default values [2018-11-18 15:12:59,350 INFO L177 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2018-11-18 15:12:59,350 INFO L174 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2018-11-18 15:12:59,351 INFO L174 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2018-11-18 15:12:59,352 INFO L174 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2018-11-18 15:12:59,353 INFO L174 SettingsManager]: Resetting LassoRanker preferences to default values [2018-11-18 15:12:59,354 INFO L174 SettingsManager]: Resetting Reaching Definitions preferences to default values [2018-11-18 15:12:59,355 INFO L174 SettingsManager]: Resetting SyntaxChecker preferences to default values [2018-11-18 15:12:59,355 INFO L177 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2018-11-18 15:12:59,356 INFO L174 SettingsManager]: Resetting LTL2Aut preferences to default values [2018-11-18 15:12:59,356 INFO L174 SettingsManager]: Resetting PEA to Boogie preferences to default values [2018-11-18 15:12:59,357 INFO L174 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2018-11-18 15:12:59,357 INFO L174 SettingsManager]: Resetting ChcToBoogie preferences to default values [2018-11-18 15:12:59,358 INFO L174 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2018-11-18 15:12:59,358 INFO L174 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2018-11-18 15:12:59,359 INFO L174 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2018-11-18 15:12:59,361 INFO L174 SettingsManager]: Resetting CodeCheck preferences to default values [2018-11-18 15:12:59,362 INFO L174 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2018-11-18 15:12:59,362 INFO L174 SettingsManager]: Resetting RCFGBuilder preferences to default values [2018-11-18 15:12:59,363 INFO L174 SettingsManager]: Resetting TraceAbstraction preferences to default values [2018-11-18 15:12:59,364 INFO L177 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2018-11-18 15:12:59,364 INFO L177 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2018-11-18 15:12:59,364 INFO L174 SettingsManager]: Resetting TreeAutomizer preferences to default values [2018-11-18 15:12:59,364 INFO L174 SettingsManager]: Resetting IcfgTransformer preferences to default values [2018-11-18 15:12:59,365 INFO L174 SettingsManager]: Resetting Boogie Printer preferences to default values [2018-11-18 15:12:59,365 INFO L174 SettingsManager]: Resetting ReqPrinter preferences to default values [2018-11-18 15:12:59,367 INFO L174 SettingsManager]: Resetting Witness Printer preferences to default values [2018-11-18 15:12:59,368 INFO L177 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2018-11-18 15:12:59,368 INFO L174 SettingsManager]: Resetting CDTParser preferences to default values [2018-11-18 15:12:59,368 INFO L177 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2018-11-18 15:12:59,368 INFO L177 SettingsManager]: ReqParser provides no preferences, ignoring... [2018-11-18 15:12:59,368 INFO L174 SettingsManager]: Resetting SmtParser preferences to default values [2018-11-18 15:12:59,369 INFO L174 SettingsManager]: Resetting Witness Parser preferences to default values [2018-11-18 15:12:59,369 INFO L181 SettingsManager]: Finished resetting all preferences to default values... [2018-11-18 15:12:59,370 INFO L98 SettingsManager]: Beginning loading settings from /tmp/vcloud-vcloud-master/worker/working_dir_8fdaa819-2e7e-4395-8b13-972f21c147e2/bin-2019/uautomizer/config/svcomp-Termination-32bit-Automizer_Default.epf [2018-11-18 15:12:59,379 INFO L110 SettingsManager]: Loading preferences was successful [2018-11-18 15:12:59,379 INFO L112 SettingsManager]: Preferences different from defaults after loading the file: [2018-11-18 15:12:59,380 INFO L131 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2018-11-18 15:12:59,380 INFO L133 SettingsManager]: * Create parallel compositions if possible=false [2018-11-18 15:12:59,380 INFO L133 SettingsManager]: * Use SBE=true [2018-11-18 15:12:59,380 INFO L131 SettingsManager]: Preferences of BuchiAutomizer differ from their defaults: [2018-11-18 15:12:59,380 INFO L133 SettingsManager]: * NCSB implementation=INTSET_LAZY3 [2018-11-18 15:12:59,381 INFO L133 SettingsManager]: * Use old map elimination=false [2018-11-18 15:12:59,381 INFO L133 SettingsManager]: * Use external solver (rank synthesis)=false [2018-11-18 15:12:59,381 INFO L133 SettingsManager]: * Use only trivial implications for array writes=true [2018-11-18 15:12:59,381 INFO L133 SettingsManager]: * Rank analysis=LINEAR_WITH_GUESSES [2018-11-18 15:12:59,381 INFO L131 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2018-11-18 15:12:59,381 INFO L133 SettingsManager]: * sizeof long=4 [2018-11-18 15:12:59,381 INFO L133 SettingsManager]: * Check unreachability of error function in SV-COMP mode=false [2018-11-18 15:12:59,381 INFO L133 SettingsManager]: * Overapproximate operations on floating types=true [2018-11-18 15:12:59,382 INFO L133 SettingsManager]: * sizeof POINTER=4 [2018-11-18 15:12:59,383 INFO L133 SettingsManager]: * Check division by zero=IGNORE [2018-11-18 15:12:59,383 INFO L133 SettingsManager]: * Pointer to allocated memory at dereference=ASSUME [2018-11-18 15:12:59,383 INFO L133 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=ASSUME [2018-11-18 15:12:59,383 INFO L133 SettingsManager]: * Check array bounds for arrays that are off heap=ASSUME [2018-11-18 15:12:59,384 INFO L133 SettingsManager]: * sizeof long double=12 [2018-11-18 15:12:59,384 INFO L133 SettingsManager]: * Check if freed pointer was valid=false [2018-11-18 15:12:59,384 INFO L133 SettingsManager]: * Assume nondeterminstic values are in range=false [2018-11-18 15:12:59,384 INFO L133 SettingsManager]: * Use constant arrays=true [2018-11-18 15:12:59,384 INFO L133 SettingsManager]: * Pointer base address is valid at dereference=ASSUME [2018-11-18 15:12:59,384 INFO L131 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2018-11-18 15:12:59,384 INFO L133 SettingsManager]: * Size of a code block=SequenceOfStatements [2018-11-18 15:12:59,384 INFO L133 SettingsManager]: * To the following directory=/home/matthias/ultimate/dump [2018-11-18 15:12:59,385 INFO L131 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2018-11-18 15:12:59,385 INFO L133 SettingsManager]: * Trace refinement strategy=CAMEL [2018-11-18 15:12:59,385 INFO L133 SettingsManager]: * Dump automata to the following directory=/home/matthias/ultimate/dump/auto [2018-11-18 15:12:59,385 INFO L131 SettingsManager]: Preferences of IcfgTransformer differ from their defaults: [2018-11-18 15:12:59,386 INFO L133 SettingsManager]: * TransformationType=MODULO_NEIGHBOR Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud-vcloud-master/worker/working_dir_8fdaa819-2e7e-4395-8b13-972f21c147e2/bin-2019/uautomizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(F end) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> b469da88d090b934567b045cce13a1bacba3958c [2018-11-18 15:12:59,408 INFO L81 nceAwareModelManager]: Repository-Root is: /tmp [2018-11-18 15:12:59,417 INFO L258 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2018-11-18 15:12:59,419 INFO L214 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2018-11-18 15:12:59,420 INFO L271 PluginConnector]: Initializing CDTParser... [2018-11-18 15:12:59,421 INFO L276 PluginConnector]: CDTParser initialized [2018-11-18 15:12:59,421 INFO L418 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud-vcloud-master/worker/working_dir_8fdaa819-2e7e-4395-8b13-972f21c147e2/bin-2019/uautomizer/../../sv-benchmarks/c/product-lines/elevator_spec14_product23_true-unreach-call_true-termination.cil.c [2018-11-18 15:12:59,459 INFO L221 CDTParser]: Created temporary CDT project at /tmp/vcloud-vcloud-master/worker/working_dir_8fdaa819-2e7e-4395-8b13-972f21c147e2/bin-2019/uautomizer/data/8da68d97a/85d8238499634c48872293538b1bb47f/FLAG86d42b66d [2018-11-18 15:12:59,934 INFO L307 CDTParser]: Found 1 translation units. [2018-11-18 15:12:59,934 INFO L161 CDTParser]: Scanning /tmp/vcloud-vcloud-master/worker/working_dir_8fdaa819-2e7e-4395-8b13-972f21c147e2/sv-benchmarks/c/product-lines/elevator_spec14_product23_true-unreach-call_true-termination.cil.c [2018-11-18 15:12:59,944 INFO L355 CDTParser]: About to delete temporary CDT project at /tmp/vcloud-vcloud-master/worker/working_dir_8fdaa819-2e7e-4395-8b13-972f21c147e2/bin-2019/uautomizer/data/8da68d97a/85d8238499634c48872293538b1bb47f/FLAG86d42b66d [2018-11-18 15:13:00,442 INFO L363 CDTParser]: Successfully deleted /tmp/vcloud-vcloud-master/worker/working_dir_8fdaa819-2e7e-4395-8b13-972f21c147e2/bin-2019/uautomizer/data/8da68d97a/85d8238499634c48872293538b1bb47f [2018-11-18 15:13:00,445 INFO L296 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2018-11-18 15:13:00,446 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2018-11-18 15:13:00,446 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2018-11-18 15:13:00,446 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2018-11-18 15:13:00,448 INFO L276 PluginConnector]: CACSL2BoogieTranslator initialized [2018-11-18 15:13:00,449 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 18.11 03:13:00" (1/1) ... [2018-11-18 15:13:00,450 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@525215d5 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 03:13:00, skipping insertion in model container [2018-11-18 15:13:00,451 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 18.11 03:13:00" (1/1) ... [2018-11-18 15:13:00,456 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2018-11-18 15:13:00,497 INFO L176 MainTranslator]: Built tables and reachable declarations [2018-11-18 15:13:00,816 INFO L201 PostProcessor]: Analyzing one entry point: main [2018-11-18 15:13:00,883 INFO L191 MainTranslator]: Completed pre-run [2018-11-18 15:13:00,948 INFO L201 PostProcessor]: Analyzing one entry point: main [2018-11-18 15:13:00,976 INFO L195 MainTranslator]: Completed translation [2018-11-18 15:13:00,976 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 03:13:00 WrapperNode [2018-11-18 15:13:00,976 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2018-11-18 15:13:00,977 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2018-11-18 15:13:00,977 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2018-11-18 15:13:00,977 INFO L276 PluginConnector]: Boogie Procedure Inliner initialized [2018-11-18 15:13:00,982 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 03:13:00" (1/1) ... [2018-11-18 15:13:01,001 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 03:13:00" (1/1) ... [2018-11-18 15:13:01,185 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2018-11-18 15:13:01,185 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2018-11-18 15:13:01,185 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2018-11-18 15:13:01,185 INFO L276 PluginConnector]: Boogie Preprocessor initialized [2018-11-18 15:13:01,191 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 03:13:00" (1/1) ... [2018-11-18 15:13:01,191 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 03:13:00" (1/1) ... [2018-11-18 15:13:01,219 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 03:13:00" (1/1) ... [2018-11-18 15:13:01,219 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 03:13:00" (1/1) ... [2018-11-18 15:13:01,301 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 03:13:00" (1/1) ... [2018-11-18 15:13:01,390 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 03:13:00" (1/1) ... [2018-11-18 15:13:01,435 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 03:13:00" (1/1) ... [2018-11-18 15:13:01,493 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2018-11-18 15:13:01,493 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2018-11-18 15:13:01,493 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2018-11-18 15:13:01,493 INFO L276 PluginConnector]: RCFGBuilder initialized [2018-11-18 15:13:01,494 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 03:13:00" (1/1) ... No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_8fdaa819-2e7e-4395-8b13-972f21c147e2/bin-2019/uautomizer/z3 Starting monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 15:13:01,535 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.alloc [2018-11-18 15:13:01,535 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2018-11-18 15:13:01,535 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2018-11-18 15:13:10,307 INFO L278 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2018-11-18 15:13:10,308 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 18.11 03:13:10 BoogieIcfgContainer [2018-11-18 15:13:10,308 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2018-11-18 15:13:10,308 INFO L113 PluginConnector]: ------------------------BuchiAutomizer---------------------------- [2018-11-18 15:13:10,308 INFO L271 PluginConnector]: Initializing BuchiAutomizer... [2018-11-18 15:13:10,310 INFO L276 PluginConnector]: BuchiAutomizer initialized [2018-11-18 15:13:10,311 INFO L102 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2018-11-18 15:13:10,311 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "CDTParser AST 18.11 03:13:00" (1/3) ... [2018-11-18 15:13:10,311 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@46f19b31 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 18.11 03:13:10, skipping insertion in model container [2018-11-18 15:13:10,312 INFO L102 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2018-11-18 15:13:10,312 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 03:13:00" (2/3) ... [2018-11-18 15:13:10,312 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@46f19b31 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 18.11 03:13:10, skipping insertion in model container [2018-11-18 15:13:10,312 INFO L102 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2018-11-18 15:13:10,312 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 18.11 03:13:10" (3/3) ... [2018-11-18 15:13:10,313 INFO L375 chiAutomizerObserver]: Analyzing ICFG elevator_spec14_product23_true-unreach-call_true-termination.cil.c [2018-11-18 15:13:10,342 INFO L133 ementStrategyFactory]: Using default assertion order modulation [2018-11-18 15:13:10,342 INFO L374 BuchiCegarLoop]: Interprodecural is true [2018-11-18 15:13:10,343 INFO L375 BuchiCegarLoop]: Hoare is false [2018-11-18 15:13:10,343 INFO L376 BuchiCegarLoop]: Compute interpolants for ForwardPredicates [2018-11-18 15:13:10,343 INFO L377 BuchiCegarLoop]: Backedges is STRAIGHT_LINE [2018-11-18 15:13:10,343 INFO L378 BuchiCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2018-11-18 15:13:10,343 INFO L379 BuchiCegarLoop]: Difference is false [2018-11-18 15:13:10,343 INFO L380 BuchiCegarLoop]: Minimize is MINIMIZE_SEVPA [2018-11-18 15:13:10,343 INFO L383 BuchiCegarLoop]: ======== Iteration 0==of CEGAR loop == BuchiCegarLoop======== [2018-11-18 15:13:10,427 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 8717 states. [2018-11-18 15:13:10,544 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1760 [2018-11-18 15:13:10,544 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-18 15:13:10,545 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-18 15:13:10,560 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 15:13:10,560 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 15:13:10,560 INFO L442 BuchiCegarLoop]: ======== Iteration 1============ [2018-11-18 15:13:10,560 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 8717 states. [2018-11-18 15:13:10,625 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1760 [2018-11-18 15:13:10,625 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-18 15:13:10,626 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-18 15:13:10,630 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 15:13:10,630 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 15:13:10,638 INFO L794 eck$LassoCheckResult]: Stem: 1694#ULTIMATE.startENTRYtrue assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];call #t~string42.base, #t~string42.offset := #Ultimate.alloc(30);call #t~string43.base, #t~string43.offset := #Ultimate.alloc(9);call #t~string44.base, #t~string44.offset := #Ultimate.alloc(21);call #t~string45.base, #t~string45.offset := #Ultimate.alloc(30);call #t~string46.base, #t~string46.offset := #Ultimate.alloc(9);call #t~string47.base, #t~string47.offset := #Ultimate.alloc(21);call #t~string51.base, #t~string51.offset := #Ultimate.alloc(30);call #t~string52.base, #t~string52.offset := #Ultimate.alloc(9);call #t~string53.base, #t~string53.offset := #Ultimate.alloc(25);call #t~string54.base, #t~string54.offset := #Ultimate.alloc(30);call #t~string55.base, #t~string55.offset := #Ultimate.alloc(9);call #t~string56.base, #t~string56.offset := #Ultimate.alloc(25);call #t~string118.base, #t~string118.offset := #Ultimate.alloc(10);call #t~string120.base, #t~string120.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string120.base,#t~string120.offset := 91];#memory_int := #memory_int[#t~string120.base,1 + #t~string120.offset := 95];#memory_int := #memory_int[#t~string120.base,2 + #t~string120.offset := 93];#memory_int := #memory_int[#t~string120.base,3 + #t~string120.offset := 0];call #t~string122.base, #t~string122.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string122.base,#t~string122.offset := 91];#memory_int := #memory_int[#t~string122.base,1 + #t~string122.offset := 93];#memory_int := #memory_int[#t~string122.base,2 + #t~string122.offset := 32];#memory_int := #memory_int[#t~string122.base,3 + #t~string122.offset := 0];call #t~string124.base, #t~string124.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string124.base,#t~string124.offset := 32];#memory_int := #memory_int[#t~string124.base,1 + #t~string124.offset := 97];#memory_int := #memory_int[#t~string124.base,2 + #t~string124.offset := 116];#memory_int := #memory_int[#t~string124.base,3 + #t~string124.offset := 32];#memory_int := #memory_int[#t~string124.base,4 + #t~string124.offset := 0];call #t~string126.base, #t~string126.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string126.base,#t~string126.offset := 37];#memory_int := #memory_int[#t~string126.base,1 + #t~string126.offset := 105];#memory_int := #memory_int[#t~string126.base,2 + #t~string126.offset := 0];call #t~string128.base, #t~string128.offset := #Ultimate.alloc(10);call #t~string130.base, #t~string130.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string130.base,#t~string130.offset := 117];#memory_int := #memory_int[#t~string130.base,1 + #t~string130.offset := 112];#memory_int := #memory_int[#t~string130.base,2 + #t~string130.offset := 0];call #t~string132.base, #t~string132.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string132.base,#t~string132.offset := 100];#memory_int := #memory_int[#t~string132.base,1 + #t~string132.offset := 111];#memory_int := #memory_int[#t~string132.base,2 + #t~string132.offset := 119];#memory_int := #memory_int[#t~string132.base,3 + #t~string132.offset := 110];#memory_int := #memory_int[#t~string132.base,4 + #t~string132.offset := 0];call #t~string134.base, #t~string134.offset := #Ultimate.alloc(7);#memory_int := #memory_int[#t~string134.base,#t~string134.offset := 32];#memory_int := #memory_int[#t~string134.base,1 + #t~string134.offset := 73];#memory_int := #memory_int[#t~string134.base,2 + #t~string134.offset := 76];#memory_int := #memory_int[#t~string134.base,3 + #t~string134.offset := 95];#memory_int := #memory_int[#t~string134.base,4 + #t~string134.offset := 112];#memory_int := #memory_int[#t~string134.base,5 + #t~string134.offset := 58];#memory_int := #memory_int[#t~string134.base,6 + #t~string134.offset := 0];call #t~string136.base, #t~string136.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string136.base,#t~string136.offset := 32];#memory_int := #memory_int[#t~string136.base,1 + #t~string136.offset := 37];#memory_int := #memory_int[#t~string136.base,2 + #t~string136.offset := 105];#memory_int := #memory_int[#t~string136.base,3 + #t~string136.offset := 0];call #t~string138.base, #t~string138.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string138.base,#t~string138.offset := 32];#memory_int := #memory_int[#t~string138.base,1 + #t~string138.offset := 37];#memory_int := #memory_int[#t~string138.base,2 + #t~string138.offset := 105];#memory_int := #memory_int[#t~string138.base,3 + #t~string138.offset := 0];call #t~string140.base, #t~string140.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string140.base,#t~string140.offset := 32];#memory_int := #memory_int[#t~string140.base,1 + #t~string140.offset := 37];#memory_int := #memory_int[#t~string140.base,2 + #t~string140.offset := 105];#memory_int := #memory_int[#t~string140.base,3 + #t~string140.offset := 0];call #t~string142.base, #t~string142.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string142.base,#t~string142.offset := 32];#memory_int := #memory_int[#t~string142.base,1 + #t~string142.offset := 37];#memory_int := #memory_int[#t~string142.base,2 + #t~string142.offset := 105];#memory_int := #memory_int[#t~string142.base,3 + #t~string142.offset := 0];call #t~string144.base, #t~string144.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string144.base,#t~string144.offset := 32];#memory_int := #memory_int[#t~string144.base,1 + #t~string144.offset := 37];#memory_int := #memory_int[#t~string144.base,2 + #t~string144.offset := 105];#memory_int := #memory_int[#t~string144.base,3 + #t~string144.offset := 0];call #t~string146.base, #t~string146.offset := #Ultimate.alloc(6);#memory_int := #memory_int[#t~string146.base,#t~string146.offset := 32];#memory_int := #memory_int[#t~string146.base,1 + #t~string146.offset := 70];#memory_int := #memory_int[#t~string146.base,2 + #t~string146.offset := 95];#memory_int := #memory_int[#t~string146.base,3 + #t~string146.offset := 112];#memory_int := #memory_int[#t~string146.base,4 + #t~string146.offset := 58];#memory_int := #memory_int[#t~string146.base,5 + #t~string146.offset := 0];call #t~string149.base, #t~string149.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string149.base,#t~string149.offset := 32];#memory_int := #memory_int[#t~string149.base,1 + #t~string149.offset := 37];#memory_int := #memory_int[#t~string149.base,2 + #t~string149.offset := 105];#memory_int := #memory_int[#t~string149.base,3 + #t~string149.offset := 0];call #t~string152.base, #t~string152.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string152.base,#t~string152.offset := 32];#memory_int := #memory_int[#t~string152.base,1 + #t~string152.offset := 37];#memory_int := #memory_int[#t~string152.base,2 + #t~string152.offset := 105];#memory_int := #memory_int[#t~string152.base,3 + #t~string152.offset := 0];call #t~string155.base, #t~string155.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string155.base,#t~string155.offset := 32];#memory_int := #memory_int[#t~string155.base,1 + #t~string155.offset := 37];#memory_int := #memory_int[#t~string155.base,2 + #t~string155.offset := 105];#memory_int := #memory_int[#t~string155.base,3 + #t~string155.offset := 0];call #t~string158.base, #t~string158.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string158.base,#t~string158.offset := 32];#memory_int := #memory_int[#t~string158.base,1 + #t~string158.offset := 37];#memory_int := #memory_int[#t~string158.base,2 + #t~string158.offset := 105];#memory_int := #memory_int[#t~string158.base,3 + #t~string158.offset := 0];call #t~string161.base, #t~string161.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string161.base,#t~string161.offset := 32];#memory_int := #memory_int[#t~string161.base,1 + #t~string161.offset := 37];#memory_int := #memory_int[#t~string161.base,2 + #t~string161.offset := 105];#memory_int := #memory_int[#t~string161.base,3 + #t~string161.offset := 0];call #t~string163.base, #t~string163.offset := #Ultimate.alloc(2);#memory_int := #memory_int[#t~string163.base,#t~string163.offset := 10];#memory_int := #memory_int[#t~string163.base,1 + #t~string163.offset := 0];~cleanupTimeShifts~0 := 12;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 8081#L-1true assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res;havoc main_#t~ret13, main_~retValue_acc~1, main_~tmp~8;havoc main_~retValue_acc~1;havoc main_~tmp~8;assume { :begin_inline_select_helpers } true; 5378#L3308true assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 5898#L3301true assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res;havoc valid_product_~retValue_acc~31;havoc valid_product_~retValue_acc~31;valid_product_~retValue_acc~31 := 1;valid_product_#res := valid_product_~retValue_acc~31; 6638#L3316true main_#t~ret13 := valid_product_#res;assume { :end_inline_valid_product } true;main_~tmp~8 := main_#t~ret13;havoc main_#t~ret13; 7797#L385true assume 0 != main_~tmp~8;assume { :begin_inline_setup } true; 7904#L358true assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret6, bigMacCall_~tmp~5;havoc bigMacCall_~tmp~5;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~28;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~28; 1208#L3211true assume 0 == getOrigin_~person;getOrigin_~retValue_acc~28 := 4;getOrigin_#res := getOrigin_~retValue_acc~28; 257#L3236true bigMacCall_#t~ret6 := getOrigin_#res;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5 := bigMacCall_#t~ret6;havoc bigMacCall_#t~ret6;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~5;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 7728#L1269true assume 0 == initPersonOnFloor_~floor; 7579#L1270true assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 6583#L1377-1true assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 7883#L1061true assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 8317#L1073-2true assume { :end_inline_callOnFloor } true; 7886#L1413true assume { :end_inline_initPersonOnFloor } true; 3903#L158true assume { :end_inline_bigMacCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_~tmp~27, timeShift_~tmp___0~12, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~12;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret91, stopRequestedAtCurrentFloor_#t~ret92, stopRequestedAtCurrentFloor_#t~ret93, stopRequestedAtCurrentFloor_#t~ret94, stopRequestedAtCurrentFloor_~retValue_acc~22, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~10;havoc stopRequestedAtCurrentFloor_~retValue_acc~22;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~10;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret165, isExecutiveFloorCalling_~retValue_acc~25;havoc isExecutiveFloorCalling_~retValue_acc~25;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 2771#L998true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 6561#L1025true isExecutiveFloorCalling_#t~ret165 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25 := isExecutiveFloorCalling_#t~ret165;havoc isExecutiveFloorCalling_#t~ret165;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~25; 3972#L3154true stopRequestedAtCurrentFloor_#t~ret91 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~25 := stopRequestedAtCurrentFloor_#t~ret91;havoc stopRequestedAtCurrentFloor_#t~ret91; 904#L2539true assume 0 != stopRequestedAtCurrentFloor_~tmp~25;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 1198#L1802true stopRequestedAtCurrentFloor_#t~ret92 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~10 := stopRequestedAtCurrentFloor_#t~ret92;havoc stopRequestedAtCurrentFloor_#t~ret92; 836#L2543true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10);stopRequestedAtCurrentFloor_~retValue_acc~22 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~22; 2994#L2556true timeShift_#t~ret107 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret107;havoc timeShift_#t~ret107; 1008#L2691true assume !(0 != timeShift_~tmp___9~2); 7029#L2782true assume !(1 == ~doorState~0); 7039#L2782-2true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~21, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~6;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~21;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~6;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret165, isExecutiveFloorCalling_~retValue_acc~25;havoc isExecutiveFloorCalling_~retValue_acc~25;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 2761#L998-3true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 6550#L1025-3true isExecutiveFloorCalling_#t~ret165 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25 := isExecutiveFloorCalling_#t~ret165;havoc isExecutiveFloorCalling_#t~ret165;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~25; 3981#L3154-1true stopRequestedInDirection_#t~ret82 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret82;havoc stopRequestedInDirection_#t~ret82; 3460#L2394true assume 0 != stopRequestedInDirection_~tmp___0~7;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 1274#L1802-3true stopRequestedInDirection_#t~ret83 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~21 := stopRequestedInDirection_#t~ret83;havoc stopRequestedInDirection_#t~ret83;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~6 := (if stopRequestedInDirection_~tmp~21 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~18 := (if stopRequestedInDirection_~__cil_tmp8~6 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 2784#L2407true timeShift_#t~ret114 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret114;havoc timeShift_#t~ret114; 6392#L2790true assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret85, continueInDirection_~dir, continueInDirection_~tmp~22;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~22;~currentHeading~0 := continueInDirection_~dir; 5032#L2451true assume !(1 == ~currentHeading~0); 4600#L2461true assume !(0 == ~currentFloorID~0); 4602#L2461-2true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 8036#L2467-1true assume { :end_inline_continueInDirection } true; 4121#L2799-2true assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret20, __utac_acc__Specification14_spec__1_#t~ret21, __utac_acc__Specification14_spec__1_#t~ret22, __utac_acc__Specification14_spec__1_#t~ret23, __utac_acc__Specification14_spec__1_~tmp~11, __utac_acc__Specification14_spec__1_~tmp___0~4, __utac_acc__Specification14_spec__1_~tmp___1~3, __utac_acc__Specification14_spec__1_~tmp___2~1;havoc __utac_acc__Specification14_spec__1_~tmp~11;havoc __utac_acc__Specification14_spec__1_~tmp___0~4;havoc __utac_acc__Specification14_spec__1_~tmp___1~3;havoc __utac_acc__Specification14_spec__1_~tmp___2~1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret165, isExecutiveFloorCalling_~retValue_acc~25;havoc isExecutiveFloorCalling_~retValue_acc~25;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 2623#L998-65true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 6602#L1025-65true isExecutiveFloorCalling_#t~ret165 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25 := isExecutiveFloorCalling_#t~ret165;havoc isExecutiveFloorCalling_#t~ret165;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~25; 3979#L3154-3true __utac_acc__Specification14_spec__1_#t~ret20 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~1 := __utac_acc__Specification14_spec__1_#t~ret20;havoc __utac_acc__Specification14_spec__1_#t~ret20; 4113#L509true assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~1); 4114#L509-1true assume { :end_inline___utac_acc__Specification14_spec__1 } true; 8156#L2814true assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_~tmp~27, timeShift_~tmp___0~12, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~12;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret91, stopRequestedAtCurrentFloor_#t~ret92, stopRequestedAtCurrentFloor_#t~ret93, stopRequestedAtCurrentFloor_#t~ret94, stopRequestedAtCurrentFloor_~retValue_acc~22, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~10;havoc stopRequestedAtCurrentFloor_~retValue_acc~22;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~10;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret165, isExecutiveFloorCalling_~retValue_acc~25;havoc isExecutiveFloorCalling_~retValue_acc~25;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 2588#L998-66true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 6603#L1025-66true isExecutiveFloorCalling_#t~ret165 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25 := isExecutiveFloorCalling_#t~ret165;havoc isExecutiveFloorCalling_#t~ret165;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~25; 3962#L3154-4true stopRequestedAtCurrentFloor_#t~ret91 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~25 := stopRequestedAtCurrentFloor_#t~ret91;havoc stopRequestedAtCurrentFloor_#t~ret91; 911#L2539-1true assume 0 != stopRequestedAtCurrentFloor_~tmp~25;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 1266#L1802-6true stopRequestedAtCurrentFloor_#t~ret92 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~10 := stopRequestedAtCurrentFloor_#t~ret92;havoc stopRequestedAtCurrentFloor_#t~ret92; 830#L2543-1true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10);stopRequestedAtCurrentFloor_~retValue_acc~22 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~22; 2993#L2556-1true timeShift_#t~ret107 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret107;havoc timeShift_#t~ret107; 1011#L2691-2true assume !(0 != timeShift_~tmp___9~2); 7036#L2782-3true assume !(1 == ~doorState~0); 7013#L2782-5true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~21, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~6;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~21;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~6;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret165, isExecutiveFloorCalling_~retValue_acc~25;havoc isExecutiveFloorCalling_~retValue_acc~25;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 2598#L998-69true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 6435#L1025-69true isExecutiveFloorCalling_#t~ret165 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25 := isExecutiveFloorCalling_#t~ret165;havoc isExecutiveFloorCalling_#t~ret165;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~25; 3958#L3154-5true stopRequestedInDirection_#t~ret82 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret82;havoc stopRequestedInDirection_#t~ret82; 3444#L2394-2true assume 0 != stopRequestedInDirection_~tmp___0~7;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 1269#L1802-9true stopRequestedInDirection_#t~ret83 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~21 := stopRequestedInDirection_#t~ret83;havoc stopRequestedInDirection_#t~ret83;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~6 := (if stopRequestedInDirection_~tmp~21 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~18 := (if stopRequestedInDirection_~__cil_tmp8~6 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 2789#L2407-2true timeShift_#t~ret114 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret114;havoc timeShift_#t~ret114; 6383#L2790-2true assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret85, continueInDirection_~dir, continueInDirection_~tmp~22;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~22;~currentHeading~0 := continueInDirection_~dir; 5038#L2451-3true assume !(1 == ~currentHeading~0); 8182#L2461-9true assume !(0 == ~currentFloorID~0); 8183#L2461-11true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 8032#L2467-7true assume { :end_inline_continueInDirection } true; 4124#L2799-5true assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret20, __utac_acc__Specification14_spec__1_#t~ret21, __utac_acc__Specification14_spec__1_#t~ret22, __utac_acc__Specification14_spec__1_#t~ret23, __utac_acc__Specification14_spec__1_~tmp~11, __utac_acc__Specification14_spec__1_~tmp___0~4, __utac_acc__Specification14_spec__1_~tmp___1~3, __utac_acc__Specification14_spec__1_~tmp___2~1;havoc __utac_acc__Specification14_spec__1_~tmp~11;havoc __utac_acc__Specification14_spec__1_~tmp___0~4;havoc __utac_acc__Specification14_spec__1_~tmp___1~3;havoc __utac_acc__Specification14_spec__1_~tmp___2~1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret165, isExecutiveFloorCalling_~retValue_acc~25;havoc isExecutiveFloorCalling_~retValue_acc~25;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 2662#L998-131true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 6468#L1025-131true isExecutiveFloorCalling_#t~ret165 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25 := isExecutiveFloorCalling_#t~ret165;havoc isExecutiveFloorCalling_#t~ret165;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~25; 3969#L3154-7true __utac_acc__Specification14_spec__1_#t~ret20 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~1 := __utac_acc__Specification14_spec__1_#t~ret20;havoc __utac_acc__Specification14_spec__1_#t~ret20; 4117#L509-2true assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~1); 4118#L509-3true assume { :end_inline___utac_acc__Specification14_spec__1 } true; 8158#L2814-1true assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_~tmp~27, timeShift_~tmp___0~12, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~12;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret91, stopRequestedAtCurrentFloor_#t~ret92, stopRequestedAtCurrentFloor_#t~ret93, stopRequestedAtCurrentFloor_#t~ret94, stopRequestedAtCurrentFloor_~retValue_acc~22, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~10;havoc stopRequestedAtCurrentFloor_~retValue_acc~22;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~10;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret165, isExecutiveFloorCalling_~retValue_acc~25;havoc isExecutiveFloorCalling_~retValue_acc~25;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 2664#L998-132true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 6469#L1025-132true isExecutiveFloorCalling_#t~ret165 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25 := isExecutiveFloorCalling_#t~ret165;havoc isExecutiveFloorCalling_#t~ret165;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~25; 3965#L3154-8true stopRequestedAtCurrentFloor_#t~ret91 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~25 := stopRequestedAtCurrentFloor_#t~ret91;havoc stopRequestedAtCurrentFloor_#t~ret91; 877#L2539-2true assume 0 != stopRequestedAtCurrentFloor_~tmp~25;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 1259#L1802-12true stopRequestedAtCurrentFloor_#t~ret92 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~10 := stopRequestedAtCurrentFloor_#t~ret92;havoc stopRequestedAtCurrentFloor_#t~ret92; 831#L2543-2true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10);stopRequestedAtCurrentFloor_~retValue_acc~22 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~22; 2995#L2556-2true timeShift_#t~ret107 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret107;havoc timeShift_#t~ret107; 1012#L2691-4true assume !(0 != timeShift_~tmp___9~2); 7018#L2782-6true assume !(1 == ~doorState~0); 7020#L2782-8true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~21, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~6;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~21;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~6;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret165, isExecutiveFloorCalling_~retValue_acc~25;havoc isExecutiveFloorCalling_~retValue_acc~25;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 2673#L998-135true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 6476#L1025-135true isExecutiveFloorCalling_#t~ret165 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25 := isExecutiveFloorCalling_#t~ret165;havoc isExecutiveFloorCalling_#t~ret165;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~25; 3948#L3154-9true stopRequestedInDirection_#t~ret82 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret82;havoc stopRequestedInDirection_#t~ret82; 3445#L2394-4true assume 0 != stopRequestedInDirection_~tmp___0~7;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 1261#L1802-15true stopRequestedInDirection_#t~ret83 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~21 := stopRequestedInDirection_#t~ret83;havoc stopRequestedInDirection_#t~ret83;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~6 := (if stopRequestedInDirection_~tmp~21 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~18 := (if stopRequestedInDirection_~__cil_tmp8~6 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 2775#L2407-4true timeShift_#t~ret114 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret114;havoc timeShift_#t~ret114; 6385#L2790-4true assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret85, continueInDirection_~dir, continueInDirection_~tmp~22;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~22;~currentHeading~0 := continueInDirection_~dir; 5026#L2451-6true assume !(1 == ~currentHeading~0); 8176#L2461-18true assume !(0 == ~currentFloorID~0); 8157#L2461-20true assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 8024#L2467-13true assume { :end_inline_continueInDirection } true; 4112#L2799-8true assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret20, __utac_acc__Specification14_spec__1_#t~ret21, __utac_acc__Specification14_spec__1_#t~ret22, __utac_acc__Specification14_spec__1_#t~ret23, __utac_acc__Specification14_spec__1_~tmp~11, __utac_acc__Specification14_spec__1_~tmp___0~4, __utac_acc__Specification14_spec__1_~tmp___1~3, __utac_acc__Specification14_spec__1_~tmp___2~1;havoc __utac_acc__Specification14_spec__1_~tmp~11;havoc __utac_acc__Specification14_spec__1_~tmp___0~4;havoc __utac_acc__Specification14_spec__1_~tmp___1~3;havoc __utac_acc__Specification14_spec__1_~tmp___2~1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret165, isExecutiveFloorCalling_~retValue_acc~25;havoc isExecutiveFloorCalling_~retValue_acc~25;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 2454#L998-197true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 4517#L1025-197true isExecutiveFloorCalling_#t~ret165 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25 := isExecutiveFloorCalling_#t~ret165;havoc isExecutiveFloorCalling_#t~ret165;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~25; 3946#L3154-11true __utac_acc__Specification14_spec__1_#t~ret20 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~1 := __utac_acc__Specification14_spec__1_#t~ret20;havoc __utac_acc__Specification14_spec__1_#t~ret20; 4099#L509-4true assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~1); 4102#L509-5true assume { :end_inline___utac_acc__Specification14_spec__1 } true; 8167#L2814-2true assume { :end_inline_timeShift } true; 4598#L171true assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~28;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~28; 1206#L3211-1true assume 0 == getOrigin_~person;getOrigin_~retValue_acc~28 := 4;getOrigin_#res := getOrigin_~retValue_acc~28; 261#L3236-1true bobCall_#t~ret1 := getOrigin_#res;assume { :end_inline_getOrigin } true;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 7719#L1269-1true assume 0 == initPersonOnFloor_~floor; 7571#L1270-2true assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 6569#L1377-3true assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 7877#L1061-2true assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 8311#L1073-5true assume { :end_inline_callOnFloor } true; 7885#L1413-1true assume { :end_inline_initPersonOnFloor } true; 3372#L103true assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret7, cleanup_#t~ret8, cleanup_~i~0, cleanup_~tmp~6, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~0;havoc cleanup_~i~0;havoc cleanup_~tmp~6;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~0;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_~tmp~27, timeShift_~tmp___0~12, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~12;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret91, stopRequestedAtCurrentFloor_#t~ret92, stopRequestedAtCurrentFloor_#t~ret93, stopRequestedAtCurrentFloor_#t~ret94, stopRequestedAtCurrentFloor_~retValue_acc~22, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~10;havoc stopRequestedAtCurrentFloor_~retValue_acc~22;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~10;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret165, isExecutiveFloorCalling_~retValue_acc~25;havoc isExecutiveFloorCalling_~retValue_acc~25;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 2456#L998-198true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 4518#L1025-198true isExecutiveFloorCalling_#t~ret165 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25 := isExecutiveFloorCalling_#t~ret165;havoc isExecutiveFloorCalling_#t~ret165;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~25; 3957#L3154-12true stopRequestedAtCurrentFloor_#t~ret91 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~25 := stopRequestedAtCurrentFloor_#t~ret91;havoc stopRequestedAtCurrentFloor_#t~ret91; 886#L2539-3true assume 0 != stopRequestedAtCurrentFloor_~tmp~25;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 1255#L1802-18true stopRequestedAtCurrentFloor_#t~ret92 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~10 := stopRequestedAtCurrentFloor_#t~ret92;havoc stopRequestedAtCurrentFloor_#t~ret92; 833#L2543-3true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10);stopRequestedAtCurrentFloor_~retValue_acc~22 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~22; 2989#L2556-3true timeShift_#t~ret107 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret107;havoc timeShift_#t~ret107; 1079#L2691-6true assume !(0 != timeShift_~tmp___9~2); 7026#L2782-9true assume !(1 == ~doorState~0); 6995#L2782-11true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~21, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~6;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~21;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~6;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret165, isExecutiveFloorCalling_~retValue_acc~25;havoc isExecutiveFloorCalling_~retValue_acc~25;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 2436#L998-201true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 4511#L1025-201true isExecutiveFloorCalling_#t~ret165 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25 := isExecutiveFloorCalling_#t~ret165;havoc isExecutiveFloorCalling_#t~ret165;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~25; 3950#L3154-13true stopRequestedInDirection_#t~ret82 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret82;havoc stopRequestedInDirection_#t~ret82; 3430#L2394-6true assume 0 != stopRequestedInDirection_~tmp___0~7;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 1258#L1802-21true stopRequestedInDirection_#t~ret83 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~21 := stopRequestedInDirection_#t~ret83;havoc stopRequestedInDirection_#t~ret83;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~6 := (if stopRequestedInDirection_~tmp~21 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~18 := (if stopRequestedInDirection_~__cil_tmp8~6 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 2779#L2407-6true timeShift_#t~ret114 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret114;havoc timeShift_#t~ret114; 6389#L2790-6true assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret85, continueInDirection_~dir, continueInDirection_~tmp~22;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~22;~currentHeading~0 := continueInDirection_~dir; 5030#L2451-9true assume !(1 == ~currentHeading~0); 8146#L2461-27true assume !(0 == ~currentFloorID~0); 8153#L2461-29true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 8015#L2467-19true assume { :end_inline_continueInDirection } true; 4101#L2799-11true assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret20, __utac_acc__Specification14_spec__1_#t~ret21, __utac_acc__Specification14_spec__1_#t~ret22, __utac_acc__Specification14_spec__1_#t~ret23, __utac_acc__Specification14_spec__1_~tmp~11, __utac_acc__Specification14_spec__1_~tmp___0~4, __utac_acc__Specification14_spec__1_~tmp___1~3, __utac_acc__Specification14_spec__1_~tmp___2~1;havoc __utac_acc__Specification14_spec__1_~tmp~11;havoc __utac_acc__Specification14_spec__1_~tmp___0~4;havoc __utac_acc__Specification14_spec__1_~tmp___1~3;havoc __utac_acc__Specification14_spec__1_~tmp___2~1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret165, isExecutiveFloorCalling_~retValue_acc~25;havoc isExecutiveFloorCalling_~retValue_acc~25;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 1853#L998-263true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 4219#L1025-263true isExecutiveFloorCalling_#t~ret165 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25 := isExecutiveFloorCalling_#t~ret165;havoc isExecutiveFloorCalling_#t~ret165;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~25; 3931#L3154-15true __utac_acc__Specification14_spec__1_#t~ret20 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~1 := __utac_acc__Specification14_spec__1_#t~ret20;havoc __utac_acc__Specification14_spec__1_#t~ret20; 4104#L509-6true assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~1); 4106#L509-7true assume { :end_inline___utac_acc__Specification14_spec__1 } true; 8162#L2814-3true assume { :end_inline_timeShift } true;cleanup_~i~0 := 0; 8378#L188-3true [2018-11-18 15:13:10,639 INFO L796 eck$LassoCheckResult]: Loop: 8378#L188-3true assume true; 8363#L188-1true assume !false; 8440#L189true cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 8325#L192true assume cleanup_~i~0 < cleanup_~__cil_tmp4~0;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~8;havoc isBlocked_~retValue_acc~8;isBlocked_~retValue_acc~8 := 0;isBlocked_#res := isBlocked_~retValue_acc~8; 416#L1649true cleanup_#t~ret7 := isBlocked_#res;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0 := cleanup_#t~ret7;havoc cleanup_#t~ret7; 7312#L196true assume 1 != cleanup_~tmp___0~0; 7310#L196-1true assume { :begin_inline_isIdle } true;havoc isIdle_#res;havoc isIdle_#t~ret66, isIdle_~retValue_acc~15, isIdle_~tmp~18;havoc isIdle_~retValue_acc~15;havoc isIdle_~tmp~18;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret61, anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_#t~ret64, anyStopRequested_#t~ret65, anyStopRequested_~retValue_acc~14, anyStopRequested_~tmp~17, anyStopRequested_~tmp___0~5, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~2, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~14;havoc anyStopRequested_~tmp~17;havoc anyStopRequested_~tmp___0~5;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~2;havoc anyStopRequested_~tmp___3~0;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 2218#L998-264true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 4179#L1025-264true anyStopRequested_#t~ret61 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret61;havoc anyStopRequested_#t~ret61; 6483#L1910true assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~14 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~14; 7715#L1974true isIdle_#t~ret66 := anyStopRequested_#res;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~18 := isIdle_#t~ret66;havoc isIdle_#t~ret66;isIdle_~retValue_acc~15 := (if 0 == isIdle_~tmp~18 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~15; 1058#L1987true cleanup_#t~ret8 := isIdle_#res;assume { :end_inline_isIdle } true;cleanup_~tmp~6 := cleanup_#t~ret8;havoc cleanup_#t~ret8; 7753#L208true assume !(0 != cleanup_~tmp~6);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_~tmp~27, timeShift_~tmp___0~12, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~12;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret91, stopRequestedAtCurrentFloor_#t~ret92, stopRequestedAtCurrentFloor_#t~ret93, stopRequestedAtCurrentFloor_#t~ret94, stopRequestedAtCurrentFloor_~retValue_acc~22, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~10;havoc stopRequestedAtCurrentFloor_~retValue_acc~22;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~10;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret165, isExecutiveFloorCalling_~retValue_acc~25;havoc isExecutiveFloorCalling_~retValue_acc~25;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 2187#L998-269true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 4157#L1025-269true isExecutiveFloorCalling_#t~ret165 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25 := isExecutiveFloorCalling_#t~ret165;havoc isExecutiveFloorCalling_#t~ret165;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~25; 3928#L3154-16true stopRequestedAtCurrentFloor_#t~ret91 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~25 := stopRequestedAtCurrentFloor_#t~ret91;havoc stopRequestedAtCurrentFloor_#t~ret91; 881#L2539-4true assume 0 != stopRequestedAtCurrentFloor_~tmp~25;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 1245#L1802-24true stopRequestedAtCurrentFloor_#t~ret92 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~10 := stopRequestedAtCurrentFloor_#t~ret92;havoc stopRequestedAtCurrentFloor_#t~ret92; 832#L2543-4true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10);stopRequestedAtCurrentFloor_~retValue_acc~22 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~22; 2990#L2556-4true timeShift_#t~ret107 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret107;havoc timeShift_#t~ret107; 1081#L2691-8true assume !(0 != timeShift_~tmp___9~2); 7000#L2782-12true assume !(1 == ~doorState~0); 7011#L2782-14true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~21, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~6;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~21;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~6;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret165, isExecutiveFloorCalling_~retValue_acc~25;havoc isExecutiveFloorCalling_~retValue_acc~25;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 2205#L998-272true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 4166#L1025-272true isExecutiveFloorCalling_#t~ret165 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25 := isExecutiveFloorCalling_#t~ret165;havoc isExecutiveFloorCalling_#t~ret165;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~25; 3940#L3154-17true stopRequestedInDirection_#t~ret82 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret82;havoc stopRequestedInDirection_#t~ret82; 3432#L2394-8true assume 0 != stopRequestedInDirection_~tmp___0~7;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 1251#L1802-27true stopRequestedInDirection_#t~ret83 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~21 := stopRequestedInDirection_#t~ret83;havoc stopRequestedInDirection_#t~ret83;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~6 := (if stopRequestedInDirection_~tmp~21 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~18 := (if stopRequestedInDirection_~__cil_tmp8~6 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 2781#L2407-8true timeShift_#t~ret114 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret114;havoc timeShift_#t~ret114; 6508#L2790-8true assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret85, continueInDirection_~dir, continueInDirection_~tmp~22;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~22;~currentHeading~0 := continueInDirection_~dir; 5016#L2451-12true assume !(1 == ~currentHeading~0); 8122#L2461-36true assume !(0 == ~currentFloorID~0); 8123#L2461-38true assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 8000#L2467-25true assume { :end_inline_continueInDirection } true; 4107#L2799-14true assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret20, __utac_acc__Specification14_spec__1_#t~ret21, __utac_acc__Specification14_spec__1_#t~ret22, __utac_acc__Specification14_spec__1_#t~ret23, __utac_acc__Specification14_spec__1_~tmp~11, __utac_acc__Specification14_spec__1_~tmp___0~4, __utac_acc__Specification14_spec__1_~tmp___1~3, __utac_acc__Specification14_spec__1_~tmp___2~1;havoc __utac_acc__Specification14_spec__1_~tmp~11;havoc __utac_acc__Specification14_spec__1_~tmp___0~4;havoc __utac_acc__Specification14_spec__1_~tmp___1~3;havoc __utac_acc__Specification14_spec__1_~tmp___2~1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret165, isExecutiveFloorCalling_~retValue_acc~25;havoc isExecutiveFloorCalling_~retValue_acc~25;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 6137#L998-334true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 4049#L1025-334true isExecutiveFloorCalling_#t~ret165 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25 := isExecutiveFloorCalling_#t~ret165;havoc isExecutiveFloorCalling_#t~ret165;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~25; 3938#L3154-19true __utac_acc__Specification14_spec__1_#t~ret20 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~1 := __utac_acc__Specification14_spec__1_#t~ret20;havoc __utac_acc__Specification14_spec__1_#t~ret20; 4109#L509-8true assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~1); 4094#L509-9true assume { :end_inline___utac_acc__Specification14_spec__1 } true; 8170#L2814-4true assume { :end_inline_timeShift } true;cleanup_~i~0 := 1 + cleanup_~i~0; 8378#L188-3true [2018-11-18 15:13:10,650 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 15:13:10,652 INFO L82 PathProgramCache]: Analyzing trace with hash -994412148, now seen corresponding path program 1 times [2018-11-18 15:13:10,653 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 15:13:10,654 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 15:13:10,695 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 15:13:10,696 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 15:13:10,696 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 15:13:10,777 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 15:13:11,523 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 15:13:11,524 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 15:13:11,525 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-18 15:13:11,528 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-18 15:13:11,528 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 15:13:11,528 INFO L82 PathProgramCache]: Analyzing trace with hash -1174651722, now seen corresponding path program 1 times [2018-11-18 15:13:11,528 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 15:13:11,528 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 15:13:11,529 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 15:13:11,529 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 15:13:11,529 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 15:13:11,539 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 15:13:11,567 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 15:13:11,567 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 15:13:11,567 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-18 15:13:11,568 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-18 15:13:11,578 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-18 15:13:11,579 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-18 15:13:11,580 INFO L87 Difference]: Start difference. First operand 8717 states. Second operand 3 states. [2018-11-18 15:13:13,647 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 15:13:13,648 INFO L93 Difference]: Finished difference Result 15640 states and 29276 transitions. [2018-11-18 15:13:13,648 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-18 15:13:13,650 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 15640 states and 29276 transitions. [2018-11-18 15:13:13,728 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 3506 [2018-11-18 15:13:13,809 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 15640 states to 15616 states and 29247 transitions. [2018-11-18 15:13:13,810 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 15616 [2018-11-18 15:13:13,826 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 15616 [2018-11-18 15:13:13,826 INFO L73 IsDeterministic]: Start isDeterministic. Operand 15616 states and 29247 transitions. [2018-11-18 15:13:13,850 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-18 15:13:13,850 INFO L705 BuchiCegarLoop]: Abstraction has 15616 states and 29247 transitions. [2018-11-18 15:13:13,882 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 15616 states and 29247 transitions. [2018-11-18 15:13:14,069 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 15616 to 15608. [2018-11-18 15:13:14,070 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 15608 states. [2018-11-18 15:13:14,094 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15608 states to 15608 states and 29235 transitions. [2018-11-18 15:13:14,095 INFO L728 BuchiCegarLoop]: Abstraction has 15608 states and 29235 transitions. [2018-11-18 15:13:14,095 INFO L608 BuchiCegarLoop]: Abstraction has 15608 states and 29235 transitions. [2018-11-18 15:13:14,095 INFO L442 BuchiCegarLoop]: ======== Iteration 2============ [2018-11-18 15:13:14,095 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 15608 states and 29235 transitions. [2018-11-18 15:13:14,152 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 3504 [2018-11-18 15:13:14,152 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-18 15:13:14,152 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-18 15:13:14,156 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 15:13:14,156 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 15:13:14,157 INFO L794 eck$LassoCheckResult]: Stem: 26871#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];call #t~string42.base, #t~string42.offset := #Ultimate.alloc(30);call #t~string43.base, #t~string43.offset := #Ultimate.alloc(9);call #t~string44.base, #t~string44.offset := #Ultimate.alloc(21);call #t~string45.base, #t~string45.offset := #Ultimate.alloc(30);call #t~string46.base, #t~string46.offset := #Ultimate.alloc(9);call #t~string47.base, #t~string47.offset := #Ultimate.alloc(21);call #t~string51.base, #t~string51.offset := #Ultimate.alloc(30);call #t~string52.base, #t~string52.offset := #Ultimate.alloc(9);call #t~string53.base, #t~string53.offset := #Ultimate.alloc(25);call #t~string54.base, #t~string54.offset := #Ultimate.alloc(30);call #t~string55.base, #t~string55.offset := #Ultimate.alloc(9);call #t~string56.base, #t~string56.offset := #Ultimate.alloc(25);call #t~string118.base, #t~string118.offset := #Ultimate.alloc(10);call #t~string120.base, #t~string120.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string120.base,#t~string120.offset := 91];#memory_int := #memory_int[#t~string120.base,1 + #t~string120.offset := 95];#memory_int := #memory_int[#t~string120.base,2 + #t~string120.offset := 93];#memory_int := #memory_int[#t~string120.base,3 + #t~string120.offset := 0];call #t~string122.base, #t~string122.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string122.base,#t~string122.offset := 91];#memory_int := #memory_int[#t~string122.base,1 + #t~string122.offset := 93];#memory_int := #memory_int[#t~string122.base,2 + #t~string122.offset := 32];#memory_int := #memory_int[#t~string122.base,3 + #t~string122.offset := 0];call #t~string124.base, #t~string124.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string124.base,#t~string124.offset := 32];#memory_int := #memory_int[#t~string124.base,1 + #t~string124.offset := 97];#memory_int := #memory_int[#t~string124.base,2 + #t~string124.offset := 116];#memory_int := #memory_int[#t~string124.base,3 + #t~string124.offset := 32];#memory_int := #memory_int[#t~string124.base,4 + #t~string124.offset := 0];call #t~string126.base, #t~string126.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string126.base,#t~string126.offset := 37];#memory_int := #memory_int[#t~string126.base,1 + #t~string126.offset := 105];#memory_int := #memory_int[#t~string126.base,2 + #t~string126.offset := 0];call #t~string128.base, #t~string128.offset := #Ultimate.alloc(10);call #t~string130.base, #t~string130.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string130.base,#t~string130.offset := 117];#memory_int := #memory_int[#t~string130.base,1 + #t~string130.offset := 112];#memory_int := #memory_int[#t~string130.base,2 + #t~string130.offset := 0];call #t~string132.base, #t~string132.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string132.base,#t~string132.offset := 100];#memory_int := #memory_int[#t~string132.base,1 + #t~string132.offset := 111];#memory_int := #memory_int[#t~string132.base,2 + #t~string132.offset := 119];#memory_int := #memory_int[#t~string132.base,3 + #t~string132.offset := 110];#memory_int := #memory_int[#t~string132.base,4 + #t~string132.offset := 0];call #t~string134.base, #t~string134.offset := #Ultimate.alloc(7);#memory_int := #memory_int[#t~string134.base,#t~string134.offset := 32];#memory_int := #memory_int[#t~string134.base,1 + #t~string134.offset := 73];#memory_int := #memory_int[#t~string134.base,2 + #t~string134.offset := 76];#memory_int := #memory_int[#t~string134.base,3 + #t~string134.offset := 95];#memory_int := #memory_int[#t~string134.base,4 + #t~string134.offset := 112];#memory_int := #memory_int[#t~string134.base,5 + #t~string134.offset := 58];#memory_int := #memory_int[#t~string134.base,6 + #t~string134.offset := 0];call #t~string136.base, #t~string136.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string136.base,#t~string136.offset := 32];#memory_int := #memory_int[#t~string136.base,1 + #t~string136.offset := 37];#memory_int := #memory_int[#t~string136.base,2 + #t~string136.offset := 105];#memory_int := #memory_int[#t~string136.base,3 + #t~string136.offset := 0];call #t~string138.base, #t~string138.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string138.base,#t~string138.offset := 32];#memory_int := #memory_int[#t~string138.base,1 + #t~string138.offset := 37];#memory_int := #memory_int[#t~string138.base,2 + #t~string138.offset := 105];#memory_int := #memory_int[#t~string138.base,3 + #t~string138.offset := 0];call #t~string140.base, #t~string140.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string140.base,#t~string140.offset := 32];#memory_int := #memory_int[#t~string140.base,1 + #t~string140.offset := 37];#memory_int := #memory_int[#t~string140.base,2 + #t~string140.offset := 105];#memory_int := #memory_int[#t~string140.base,3 + #t~string140.offset := 0];call #t~string142.base, #t~string142.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string142.base,#t~string142.offset := 32];#memory_int := #memory_int[#t~string142.base,1 + #t~string142.offset := 37];#memory_int := #memory_int[#t~string142.base,2 + #t~string142.offset := 105];#memory_int := #memory_int[#t~string142.base,3 + #t~string142.offset := 0];call #t~string144.base, #t~string144.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string144.base,#t~string144.offset := 32];#memory_int := #memory_int[#t~string144.base,1 + #t~string144.offset := 37];#memory_int := #memory_int[#t~string144.base,2 + #t~string144.offset := 105];#memory_int := #memory_int[#t~string144.base,3 + #t~string144.offset := 0];call #t~string146.base, #t~string146.offset := #Ultimate.alloc(6);#memory_int := #memory_int[#t~string146.base,#t~string146.offset := 32];#memory_int := #memory_int[#t~string146.base,1 + #t~string146.offset := 70];#memory_int := #memory_int[#t~string146.base,2 + #t~string146.offset := 95];#memory_int := #memory_int[#t~string146.base,3 + #t~string146.offset := 112];#memory_int := #memory_int[#t~string146.base,4 + #t~string146.offset := 58];#memory_int := #memory_int[#t~string146.base,5 + #t~string146.offset := 0];call #t~string149.base, #t~string149.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string149.base,#t~string149.offset := 32];#memory_int := #memory_int[#t~string149.base,1 + #t~string149.offset := 37];#memory_int := #memory_int[#t~string149.base,2 + #t~string149.offset := 105];#memory_int := #memory_int[#t~string149.base,3 + #t~string149.offset := 0];call #t~string152.base, #t~string152.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string152.base,#t~string152.offset := 32];#memory_int := #memory_int[#t~string152.base,1 + #t~string152.offset := 37];#memory_int := #memory_int[#t~string152.base,2 + #t~string152.offset := 105];#memory_int := #memory_int[#t~string152.base,3 + #t~string152.offset := 0];call #t~string155.base, #t~string155.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string155.base,#t~string155.offset := 32];#memory_int := #memory_int[#t~string155.base,1 + #t~string155.offset := 37];#memory_int := #memory_int[#t~string155.base,2 + #t~string155.offset := 105];#memory_int := #memory_int[#t~string155.base,3 + #t~string155.offset := 0];call #t~string158.base, #t~string158.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string158.base,#t~string158.offset := 32];#memory_int := #memory_int[#t~string158.base,1 + #t~string158.offset := 37];#memory_int := #memory_int[#t~string158.base,2 + #t~string158.offset := 105];#memory_int := #memory_int[#t~string158.base,3 + #t~string158.offset := 0];call #t~string161.base, #t~string161.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string161.base,#t~string161.offset := 32];#memory_int := #memory_int[#t~string161.base,1 + #t~string161.offset := 37];#memory_int := #memory_int[#t~string161.base,2 + #t~string161.offset := 105];#memory_int := #memory_int[#t~string161.base,3 + #t~string161.offset := 0];call #t~string163.base, #t~string163.offset := #Ultimate.alloc(2);#memory_int := #memory_int[#t~string163.base,#t~string163.offset := 10];#memory_int := #memory_int[#t~string163.base,1 + #t~string163.offset := 0];~cleanupTimeShifts~0 := 12;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 26872#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res;havoc main_#t~ret13, main_~retValue_acc~1, main_~tmp~8;havoc main_~retValue_acc~1;havoc main_~tmp~8;assume { :begin_inline_select_helpers } true; 31019#L3308 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 31020#L3301 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res;havoc valid_product_~retValue_acc~31;havoc valid_product_~retValue_acc~31;valid_product_~retValue_acc~31 := 1;valid_product_#res := valid_product_~retValue_acc~31; 31488#L3316 main_#t~ret13 := valid_product_#res;assume { :end_inline_valid_product } true;main_~tmp~8 := main_#t~ret13;havoc main_#t~ret13; 31802#L385 assume 0 != main_~tmp~8;assume { :begin_inline_setup } true; 32601#L358 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret6, bigMacCall_~tmp~5;havoc bigMacCall_~tmp~5;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~28;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~28; 26268#L3211 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~28 := 4;getOrigin_#res := getOrigin_~retValue_acc~28; 24941#L3236 bigMacCall_#t~ret6 := getOrigin_#res;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5 := bigMacCall_#t~ret6;havoc bigMacCall_#t~ret6;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~5;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 24942#L1269 assume 0 == initPersonOnFloor_~floor; 32464#L1270 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 24488#L1377-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 31777#L1061 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 32638#L1073-2 assume { :end_inline_callOnFloor } true; 32642#L1413 assume { :end_inline_initPersonOnFloor } true; 29415#L158 assume { :end_inline_bigMacCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_~tmp~27, timeShift_~tmp___0~12, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~12;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret91, stopRequestedAtCurrentFloor_#t~ret92, stopRequestedAtCurrentFloor_#t~ret93, stopRequestedAtCurrentFloor_#t~ret94, stopRequestedAtCurrentFloor_~retValue_acc~22, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~10;havoc stopRequestedAtCurrentFloor_~retValue_acc~22;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~10;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret165, isExecutiveFloorCalling_~retValue_acc~25;havoc isExecutiveFloorCalling_~retValue_acc~25;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 28564#L998 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 27146#L1025 isExecutiveFloorCalling_#t~ret165 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25 := isExecutiveFloorCalling_#t~ret165;havoc isExecutiveFloorCalling_#t~ret165;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~25; 29552#L3154 stopRequestedAtCurrentFloor_#t~ret91 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~25 := stopRequestedAtCurrentFloor_#t~ret91;havoc stopRequestedAtCurrentFloor_#t~ret91; 25931#L2539 assume 0 != stopRequestedAtCurrentFloor_~tmp~25;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 25933#L1802 stopRequestedAtCurrentFloor_#t~ret92 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~10 := stopRequestedAtCurrentFloor_#t~ret92;havoc stopRequestedAtCurrentFloor_#t~ret92; 25871#L2543 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10);stopRequestedAtCurrentFloor_~retValue_acc~22 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~22; 25872#L2556 timeShift_#t~ret107 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret107;havoc timeShift_#t~ret107; 25979#L2691 assume !(0 != timeShift_~tmp___9~2); 25980#L2782 assume !(1 == ~doorState~0); 31922#L2782-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~21, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~6;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~21;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~6;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret165, isExecutiveFloorCalling_~retValue_acc~25;havoc isExecutiveFloorCalling_~retValue_acc~25;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 28560#L998-3 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 27181#L1025-3 isExecutiveFloorCalling_#t~ret165 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25 := isExecutiveFloorCalling_#t~ret165;havoc isExecutiveFloorCalling_#t~ret165;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~25; 29570#L3154-1 stopRequestedInDirection_#t~ret82 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret82;havoc stopRequestedInDirection_#t~ret82; 29108#L2394 assume 0 != stopRequestedInDirection_~tmp___0~7;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 26340#L1802-3 stopRequestedInDirection_#t~ret83 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~21 := stopRequestedInDirection_#t~ret83;havoc stopRequestedInDirection_#t~ret83;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~6 := (if stopRequestedInDirection_~tmp~21 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~18 := (if stopRequestedInDirection_~__cil_tmp8~6 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 26341#L2407 timeShift_#t~ret114 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret114;havoc timeShift_#t~ret114; 28573#L2790 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret85, continueInDirection_~dir, continueInDirection_~tmp~22;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~22;~currentHeading~0 := continueInDirection_~dir; 30618#L2451 assume !(1 == ~currentHeading~0); 30236#L2461 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 30237#L2461-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 36367#L2467-1 assume { :end_inline_continueInDirection } true; 32054#L2799-2 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret20, __utac_acc__Specification14_spec__1_#t~ret21, __utac_acc__Specification14_spec__1_#t~ret22, __utac_acc__Specification14_spec__1_#t~ret23, __utac_acc__Specification14_spec__1_~tmp~11, __utac_acc__Specification14_spec__1_~tmp___0~4, __utac_acc__Specification14_spec__1_~tmp___1~3, __utac_acc__Specification14_spec__1_~tmp___2~1;havoc __utac_acc__Specification14_spec__1_~tmp~11;havoc __utac_acc__Specification14_spec__1_~tmp___0~4;havoc __utac_acc__Specification14_spec__1_~tmp___1~3;havoc __utac_acc__Specification14_spec__1_~tmp___2~1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret165, isExecutiveFloorCalling_~retValue_acc~25;havoc isExecutiveFloorCalling_~retValue_acc~25;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 36366#L998-65 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 36361#L1025-65 isExecutiveFloorCalling_#t~ret165 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25 := isExecutiveFloorCalling_#t~ret165;havoc isExecutiveFloorCalling_#t~ret165;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~25; 36360#L3154-3 __utac_acc__Specification14_spec__1_#t~ret20 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~1 := __utac_acc__Specification14_spec__1_#t~ret20;havoc __utac_acc__Specification14_spec__1_#t~ret20; 36355#L509 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~1); 36353#L509-1 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 36352#L2814 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_~tmp~27, timeShift_~tmp___0~12, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~12;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret91, stopRequestedAtCurrentFloor_#t~ret92, stopRequestedAtCurrentFloor_#t~ret93, stopRequestedAtCurrentFloor_#t~ret94, stopRequestedAtCurrentFloor_~retValue_acc~22, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~10;havoc stopRequestedAtCurrentFloor_~retValue_acc~22;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~10;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret165, isExecutiveFloorCalling_~retValue_acc~25;havoc isExecutiveFloorCalling_~retValue_acc~25;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 36350#L998-66 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 36346#L1025-66 isExecutiveFloorCalling_#t~ret165 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25 := isExecutiveFloorCalling_#t~ret165;havoc isExecutiveFloorCalling_#t~ret165;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~25; 36340#L3154-4 stopRequestedAtCurrentFloor_#t~ret91 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~25 := stopRequestedAtCurrentFloor_#t~ret91;havoc stopRequestedAtCurrentFloor_#t~ret91; 36338#L2539-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~25;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 36339#L1802-6 stopRequestedAtCurrentFloor_#t~ret92 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~10 := stopRequestedAtCurrentFloor_#t~ret92;havoc stopRequestedAtCurrentFloor_#t~ret92; 36299#L2543-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10);stopRequestedAtCurrentFloor_~retValue_acc~22 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~22; 36298#L2556-1 timeShift_#t~ret107 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret107;havoc timeShift_#t~ret107; 36296#L2691-2 assume !(0 != timeShift_~tmp___9~2); 36295#L2782-3 assume !(1 == ~doorState~0); 36294#L2782-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~21, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~6;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~21;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~6;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret165, isExecutiveFloorCalling_~retValue_acc~25;havoc isExecutiveFloorCalling_~retValue_acc~25;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 36289#L998-69 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 36283#L1025-69 isExecutiveFloorCalling_#t~ret165 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25 := isExecutiveFloorCalling_#t~ret165;havoc isExecutiveFloorCalling_#t~ret165;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~25; 34939#L3154-5 stopRequestedInDirection_#t~ret82 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret82;havoc stopRequestedInDirection_#t~ret82; 34752#L2394-2 assume 0 != stopRequestedInDirection_~tmp___0~7;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 34744#L1802-9 stopRequestedInDirection_#t~ret83 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~21 := stopRequestedInDirection_#t~ret83;havoc stopRequestedInDirection_#t~ret83;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~6 := (if stopRequestedInDirection_~tmp~21 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~18 := (if stopRequestedInDirection_~__cil_tmp8~6 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 34740#L2407-2 timeShift_#t~ret114 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret114;havoc timeShift_#t~ret114; 34735#L2790-2 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret85, continueInDirection_~dir, continueInDirection_~tmp~22;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~22;~currentHeading~0 := continueInDirection_~dir; 34732#L2451-3 assume !(1 == ~currentHeading~0); 30622#L2461-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 30571#L2461-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 36003#L2467-7 assume { :end_inline_continueInDirection } true; 36001#L2799-5 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret20, __utac_acc__Specification14_spec__1_#t~ret21, __utac_acc__Specification14_spec__1_#t~ret22, __utac_acc__Specification14_spec__1_#t~ret23, __utac_acc__Specification14_spec__1_~tmp~11, __utac_acc__Specification14_spec__1_~tmp___0~4, __utac_acc__Specification14_spec__1_~tmp___1~3, __utac_acc__Specification14_spec__1_~tmp___2~1;havoc __utac_acc__Specification14_spec__1_~tmp~11;havoc __utac_acc__Specification14_spec__1_~tmp___0~4;havoc __utac_acc__Specification14_spec__1_~tmp___1~3;havoc __utac_acc__Specification14_spec__1_~tmp___2~1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret165, isExecutiveFloorCalling_~retValue_acc~25;havoc isExecutiveFloorCalling_~retValue_acc~25;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 36000#L998-131 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 35995#L1025-131 isExecutiveFloorCalling_#t~ret165 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25 := isExecutiveFloorCalling_#t~ret165;havoc isExecutiveFloorCalling_#t~ret165;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~25; 35994#L3154-7 __utac_acc__Specification14_spec__1_#t~ret20 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~1 := __utac_acc__Specification14_spec__1_#t~ret20;havoc __utac_acc__Specification14_spec__1_#t~ret20; 35988#L509-2 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~1); 35987#L509-3 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 35986#L2814-1 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_~tmp~27, timeShift_~tmp___0~12, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~12;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret91, stopRequestedAtCurrentFloor_#t~ret92, stopRequestedAtCurrentFloor_#t~ret93, stopRequestedAtCurrentFloor_#t~ret94, stopRequestedAtCurrentFloor_~retValue_acc~22, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~10;havoc stopRequestedAtCurrentFloor_~retValue_acc~22;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~10;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret165, isExecutiveFloorCalling_~retValue_acc~25;havoc isExecutiveFloorCalling_~retValue_acc~25;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 35984#L998-132 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 35980#L1025-132 isExecutiveFloorCalling_#t~ret165 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25 := isExecutiveFloorCalling_#t~ret165;havoc isExecutiveFloorCalling_#t~ret165;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~25; 35975#L3154-8 stopRequestedAtCurrentFloor_#t~ret91 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~25 := stopRequestedAtCurrentFloor_#t~ret91;havoc stopRequestedAtCurrentFloor_#t~ret91; 35972#L2539-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~25;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 35968#L1802-12 stopRequestedAtCurrentFloor_#t~ret92 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~10 := stopRequestedAtCurrentFloor_#t~ret92;havoc stopRequestedAtCurrentFloor_#t~ret92; 35963#L2543-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10);stopRequestedAtCurrentFloor_~retValue_acc~22 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~22; 35961#L2556-2 timeShift_#t~ret107 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret107;havoc timeShift_#t~ret107; 35959#L2691-4 assume !(0 != timeShift_~tmp___9~2); 35960#L2782-6 assume !(1 == ~doorState~0); 36482#L2782-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~21, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~6;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~21;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~6;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret165, isExecutiveFloorCalling_~retValue_acc~25;havoc isExecutiveFloorCalling_~retValue_acc~25;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 34944#L998-135 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 34754#L1025-135 isExecutiveFloorCalling_#t~ret165 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25 := isExecutiveFloorCalling_#t~ret165;havoc isExecutiveFloorCalling_#t~ret165;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~25; 34745#L3154-9 stopRequestedInDirection_#t~ret82 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret82;havoc stopRequestedInDirection_#t~ret82; 34741#L2394-4 assume 0 != stopRequestedInDirection_~tmp___0~7;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 34739#L1802-15 stopRequestedInDirection_#t~ret83 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~21 := stopRequestedInDirection_#t~ret83;havoc stopRequestedInDirection_#t~ret83;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~6 := (if stopRequestedInDirection_~tmp~21 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~18 := (if stopRequestedInDirection_~__cil_tmp8~6 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 34737#L2407-4 timeShift_#t~ret114 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret114;havoc timeShift_#t~ret114; 34733#L2790-4 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret85, continueInDirection_~dir, continueInDirection_~tmp~22;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~22;~currentHeading~0 := continueInDirection_~dir; 34731#L2451-6 assume !(1 == ~currentHeading~0); 30613#L2461-18 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 30569#L2461-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 32815#L2467-13 assume { :end_inline_continueInDirection } true; 29750#L2799-8 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret20, __utac_acc__Specification14_spec__1_#t~ret21, __utac_acc__Specification14_spec__1_#t~ret22, __utac_acc__Specification14_spec__1_#t~ret23, __utac_acc__Specification14_spec__1_~tmp~11, __utac_acc__Specification14_spec__1_~tmp___0~4, __utac_acc__Specification14_spec__1_~tmp___1~3, __utac_acc__Specification14_spec__1_~tmp___2~1;havoc __utac_acc__Specification14_spec__1_~tmp~11;havoc __utac_acc__Specification14_spec__1_~tmp___0~4;havoc __utac_acc__Specification14_spec__1_~tmp___1~3;havoc __utac_acc__Specification14_spec__1_~tmp___2~1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret165, isExecutiveFloorCalling_~retValue_acc~25;havoc isExecutiveFloorCalling_~retValue_acc~25;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 28277#L998-197 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 28278#L1025-197 isExecutiveFloorCalling_#t~ret165 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25 := isExecutiveFloorCalling_#t~ret165;havoc isExecutiveFloorCalling_#t~ret165;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~25; 29502#L3154-11 __utac_acc__Specification14_spec__1_#t~ret20 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~1 := __utac_acc__Specification14_spec__1_#t~ret20;havoc __utac_acc__Specification14_spec__1_#t~ret20; 29503#L509-4 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~1); 29737#L509-5 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 29740#L2814-2 assume { :end_inline_timeShift } true; 30234#L171 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~28;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~28; 26266#L3211-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~28 := 4;getOrigin_#res := getOrigin_~retValue_acc~28; 24952#L3236-1 bobCall_#t~ret1 := getOrigin_#res;assume { :end_inline_getOrigin } true;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 24953#L1269-1 assume 0 == initPersonOnFloor_~floor; 32456#L1270-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 24506#L1377-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 31764#L1061-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 32631#L1073-5 assume { :end_inline_callOnFloor } true; 32641#L1413-1 assume { :end_inline_initPersonOnFloor } true; 29031#L103 assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret7, cleanup_#t~ret8, cleanup_~i~0, cleanup_~tmp~6, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~0;havoc cleanup_~i~0;havoc cleanup_~tmp~6;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~0;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_~tmp~27, timeShift_~tmp___0~12, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~12;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret91, stopRequestedAtCurrentFloor_#t~ret92, stopRequestedAtCurrentFloor_#t~ret93, stopRequestedAtCurrentFloor_#t~ret94, stopRequestedAtCurrentFloor_~retValue_acc~22, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~10;havoc stopRequestedAtCurrentFloor_~retValue_acc~22;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~10;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret165, isExecutiveFloorCalling_~retValue_acc~25;havoc isExecutiveFloorCalling_~retValue_acc~25;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 28283#L998-198 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 28284#L1025-198 isExecutiveFloorCalling_#t~ret165 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25 := isExecutiveFloorCalling_#t~ret165;havoc isExecutiveFloorCalling_#t~ret165;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~25; 29524#L3154-12 stopRequestedAtCurrentFloor_#t~ret91 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~25 := stopRequestedAtCurrentFloor_#t~ret91;havoc stopRequestedAtCurrentFloor_#t~ret91; 25914#L2539-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~25;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 25916#L1802-18 stopRequestedAtCurrentFloor_#t~ret92 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~10 := stopRequestedAtCurrentFloor_#t~ret92;havoc stopRequestedAtCurrentFloor_#t~ret92; 25866#L2543-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10);stopRequestedAtCurrentFloor_~retValue_acc~22 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~22; 25868#L2556-3 timeShift_#t~ret107 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret107;havoc timeShift_#t~ret107; 26124#L2691-6 assume !(0 != timeShift_~tmp___9~2); 26126#L2782-9 assume !(1 == ~doorState~0); 31907#L2782-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~21, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~6;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~21;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~6;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret165, isExecutiveFloorCalling_~retValue_acc~25;havoc isExecutiveFloorCalling_~retValue_acc~25;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 28234#L998-201 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 28235#L1025-201 isExecutiveFloorCalling_#t~ret165 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25 := isExecutiveFloorCalling_#t~ret165;havoc isExecutiveFloorCalling_#t~ret165;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~25; 29510#L3154-13 stopRequestedInDirection_#t~ret82 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret82;havoc stopRequestedInDirection_#t~ret82; 29079#L2394-6 assume 0 != stopRequestedInDirection_~tmp___0~7;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 26321#L1802-21 stopRequestedInDirection_#t~ret83 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~21 := stopRequestedInDirection_#t~ret83;havoc stopRequestedInDirection_#t~ret83;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~6 := (if stopRequestedInDirection_~tmp~21 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~18 := (if stopRequestedInDirection_~__cil_tmp8~6 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 26322#L2407-6 timeShift_#t~ret114 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret114;havoc timeShift_#t~ret114; 28570#L2790-6 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret85, continueInDirection_~dir, continueInDirection_~tmp~22;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~22;~currentHeading~0 := continueInDirection_~dir; 30616#L2451-9 assume !(1 == ~currentHeading~0); 30617#L2461-27 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 30460#L2461-29 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 33909#L2467-19 assume { :end_inline_continueInDirection } true; 33905#L2799-11 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret20, __utac_acc__Specification14_spec__1_#t~ret21, __utac_acc__Specification14_spec__1_#t~ret22, __utac_acc__Specification14_spec__1_#t~ret23, __utac_acc__Specification14_spec__1_~tmp~11, __utac_acc__Specification14_spec__1_~tmp___0~4, __utac_acc__Specification14_spec__1_~tmp___1~3, __utac_acc__Specification14_spec__1_~tmp___2~1;havoc __utac_acc__Specification14_spec__1_~tmp~11;havoc __utac_acc__Specification14_spec__1_~tmp___0~4;havoc __utac_acc__Specification14_spec__1_~tmp___1~3;havoc __utac_acc__Specification14_spec__1_~tmp___2~1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret165, isExecutiveFloorCalling_~retValue_acc~25;havoc isExecutiveFloorCalling_~retValue_acc~25;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 33903#L998-263 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 33899#L1025-263 isExecutiveFloorCalling_#t~ret165 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25 := isExecutiveFloorCalling_#t~ret165;havoc isExecutiveFloorCalling_#t~ret165;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~25; 33898#L3154-15 __utac_acc__Specification14_spec__1_#t~ret20 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~1 := __utac_acc__Specification14_spec__1_#t~ret20;havoc __utac_acc__Specification14_spec__1_#t~ret20; 33880#L509-6 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~1); 33877#L509-7 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 33876#L2814-3 assume { :end_inline_timeShift } true;cleanup_~i~0 := 0; 33874#L188-3 [2018-11-18 15:13:14,157 INFO L796 eck$LassoCheckResult]: Loop: 33874#L188-3 assume true; 33873#L188-1 assume !false; 33872#L189 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 33871#L192 assume cleanup_~i~0 < cleanup_~__cil_tmp4~0;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~8;havoc isBlocked_~retValue_acc~8;isBlocked_~retValue_acc~8 := 0;isBlocked_#res := isBlocked_~retValue_acc~8; 33870#L1649 cleanup_#t~ret7 := isBlocked_#res;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0 := cleanup_#t~ret7;havoc cleanup_#t~ret7; 33869#L196 assume 1 != cleanup_~tmp___0~0; 33868#L196-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res;havoc isIdle_#t~ret66, isIdle_~retValue_acc~15, isIdle_~tmp~18;havoc isIdle_~retValue_acc~15;havoc isIdle_~tmp~18;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret61, anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_#t~ret64, anyStopRequested_#t~ret65, anyStopRequested_~retValue_acc~14, anyStopRequested_~tmp~17, anyStopRequested_~tmp___0~5, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~2, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~14;havoc anyStopRequested_~tmp~17;havoc anyStopRequested_~tmp___0~5;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~2;havoc anyStopRequested_~tmp___3~0;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 33867#L998-264 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 33858#L1025-264 anyStopRequested_#t~ret61 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret61;havoc anyStopRequested_#t~ret61; 33732#L1910 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~14 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~14; 33719#L1974 isIdle_#t~ret66 := anyStopRequested_#res;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~18 := isIdle_#t~ret66;havoc isIdle_#t~ret66;isIdle_~retValue_acc~15 := (if 0 == isIdle_~tmp~18 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~15; 33717#L1987 cleanup_#t~ret8 := isIdle_#res;assume { :end_inline_isIdle } true;cleanup_~tmp~6 := cleanup_#t~ret8;havoc cleanup_#t~ret8; 33713#L208 assume !(0 != cleanup_~tmp~6);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_~tmp~27, timeShift_~tmp___0~12, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~12;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret91, stopRequestedAtCurrentFloor_#t~ret92, stopRequestedAtCurrentFloor_#t~ret93, stopRequestedAtCurrentFloor_#t~ret94, stopRequestedAtCurrentFloor_~retValue_acc~22, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~10;havoc stopRequestedAtCurrentFloor_~retValue_acc~22;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~10;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret165, isExecutiveFloorCalling_~retValue_acc~25;havoc isExecutiveFloorCalling_~retValue_acc~25;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 33710#L998-269 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 33705#L1025-269 isExecutiveFloorCalling_#t~ret165 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25 := isExecutiveFloorCalling_#t~ret165;havoc isExecutiveFloorCalling_#t~ret165;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~25; 33704#L3154-16 stopRequestedAtCurrentFloor_#t~ret91 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~25 := stopRequestedAtCurrentFloor_#t~ret91;havoc stopRequestedAtCurrentFloor_#t~ret91; 33702#L2539-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~25;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 33699#L1802-24 stopRequestedAtCurrentFloor_#t~ret92 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~10 := stopRequestedAtCurrentFloor_#t~ret92;havoc stopRequestedAtCurrentFloor_#t~ret92; 33696#L2543-4 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10);stopRequestedAtCurrentFloor_~retValue_acc~22 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~22; 33691#L2556-4 timeShift_#t~ret107 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret107;havoc timeShift_#t~ret107; 33690#L2691-8 assume !(0 != timeShift_~tmp___9~2); 33688#L2782-12 assume !(1 == ~doorState~0); 33687#L2782-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~21, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~6;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~21;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~6;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret165, isExecutiveFloorCalling_~retValue_acc~25;havoc isExecutiveFloorCalling_~retValue_acc~25;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 33678#L998-272 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 33675#L1025-272 isExecutiveFloorCalling_#t~ret165 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25 := isExecutiveFloorCalling_#t~ret165;havoc isExecutiveFloorCalling_#t~ret165;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~25; 33514#L3154-17 stopRequestedInDirection_#t~ret82 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret82;havoc stopRequestedInDirection_#t~ret82; 33505#L2394-8 assume 0 != stopRequestedInDirection_~tmp___0~7;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 33266#L1802-27 stopRequestedInDirection_#t~ret83 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~21 := stopRequestedInDirection_#t~ret83;havoc stopRequestedInDirection_#t~ret83;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~6 := (if stopRequestedInDirection_~tmp~21 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~18 := (if stopRequestedInDirection_~__cil_tmp8~6 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 33131#L2407-8 timeShift_#t~ret114 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret114;havoc timeShift_#t~ret114; 33124#L2790-8 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret85, continueInDirection_~dir, continueInDirection_~tmp~22;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~22;~currentHeading~0 := continueInDirection_~dir; 33121#L2451-12 assume !(1 == ~currentHeading~0); 30607#L2461-36 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 30417#L2461-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 34485#L2467-25 assume { :end_inline_continueInDirection } true; 34482#L2799-14 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret20, __utac_acc__Specification14_spec__1_#t~ret21, __utac_acc__Specification14_spec__1_#t~ret22, __utac_acc__Specification14_spec__1_#t~ret23, __utac_acc__Specification14_spec__1_~tmp~11, __utac_acc__Specification14_spec__1_~tmp___0~4, __utac_acc__Specification14_spec__1_~tmp___1~3, __utac_acc__Specification14_spec__1_~tmp___2~1;havoc __utac_acc__Specification14_spec__1_~tmp~11;havoc __utac_acc__Specification14_spec__1_~tmp___0~4;havoc __utac_acc__Specification14_spec__1_~tmp___1~3;havoc __utac_acc__Specification14_spec__1_~tmp___2~1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret165, isExecutiveFloorCalling_~retValue_acc~25;havoc isExecutiveFloorCalling_~retValue_acc~25;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 33895#L998-334 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 33892#L1025-334 isExecutiveFloorCalling_#t~ret165 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25 := isExecutiveFloorCalling_#t~ret165;havoc isExecutiveFloorCalling_#t~ret165;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~25; 33891#L3154-19 __utac_acc__Specification14_spec__1_#t~ret20 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~1 := __utac_acc__Specification14_spec__1_#t~ret20;havoc __utac_acc__Specification14_spec__1_#t~ret20; 33885#L509-8 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~1); 33878#L509-9 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 33875#L2814-4 assume { :end_inline_timeShift } true;cleanup_~i~0 := 1 + cleanup_~i~0; 33874#L188-3 [2018-11-18 15:13:14,163 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 15:13:14,163 INFO L82 PathProgramCache]: Analyzing trace with hash 1708605840, now seen corresponding path program 1 times [2018-11-18 15:13:14,163 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 15:13:14,163 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 15:13:14,164 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 15:13:14,164 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 15:13:14,164 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 15:13:14,191 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 15:13:15,075 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 15:13:15,075 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 15:13:15,075 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-18 15:13:15,076 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-18 15:13:15,076 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 15:13:15,076 INFO L82 PathProgramCache]: Analyzing trace with hash -781624712, now seen corresponding path program 1 times [2018-11-18 15:13:15,076 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 15:13:15,076 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 15:13:15,077 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 15:13:15,077 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 15:13:15,077 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 15:13:15,084 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 15:13:15,149 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 15:13:15,149 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 15:13:15,149 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2018-11-18 15:13:15,150 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-18 15:13:15,150 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2018-11-18 15:13:15,150 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2018-11-18 15:13:15,150 INFO L87 Difference]: Start difference. First operand 15608 states and 29235 transitions. cyclomatic complexity: 13628 Second operand 7 states. [2018-11-18 15:13:33,956 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 15:13:33,956 INFO L93 Difference]: Finished difference Result 139617 states and 259866 transitions. [2018-11-18 15:13:33,956 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2018-11-18 15:13:33,957 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 139617 states and 259866 transitions. [2018-11-18 15:13:34,444 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 32342 [2018-11-18 15:13:34,768 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 139617 states to 139617 states and 259866 transitions. [2018-11-18 15:13:34,768 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 139617 [2018-11-18 15:13:34,856 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 139617 [2018-11-18 15:13:34,856 INFO L73 IsDeterministic]: Start isDeterministic. Operand 139617 states and 259866 transitions. [2018-11-18 15:13:34,958 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-18 15:13:34,958 INFO L705 BuchiCegarLoop]: Abstraction has 139617 states and 259866 transitions. [2018-11-18 15:13:35,036 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 139617 states and 259866 transitions. [2018-11-18 15:13:35,687 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 139617 to 44913. [2018-11-18 15:13:35,687 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 44913 states. [2018-11-18 15:13:35,732 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 44913 states to 44913 states and 83681 transitions. [2018-11-18 15:13:35,732 INFO L728 BuchiCegarLoop]: Abstraction has 44913 states and 83681 transitions. [2018-11-18 15:13:35,732 INFO L608 BuchiCegarLoop]: Abstraction has 44913 states and 83681 transitions. [2018-11-18 15:13:35,732 INFO L442 BuchiCegarLoop]: ======== Iteration 3============ [2018-11-18 15:13:35,733 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 44913 states and 83681 transitions. [2018-11-18 15:13:35,812 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 10120 [2018-11-18 15:13:35,812 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-18 15:13:35,812 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-18 15:13:35,816 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 15:13:35,816 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 15:13:35,817 INFO L794 eck$LassoCheckResult]: Stem: 182383#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];call #t~string42.base, #t~string42.offset := #Ultimate.alloc(30);call #t~string43.base, #t~string43.offset := #Ultimate.alloc(9);call #t~string44.base, #t~string44.offset := #Ultimate.alloc(21);call #t~string45.base, #t~string45.offset := #Ultimate.alloc(30);call #t~string46.base, #t~string46.offset := #Ultimate.alloc(9);call #t~string47.base, #t~string47.offset := #Ultimate.alloc(21);call #t~string51.base, #t~string51.offset := #Ultimate.alloc(30);call #t~string52.base, #t~string52.offset := #Ultimate.alloc(9);call #t~string53.base, #t~string53.offset := #Ultimate.alloc(25);call #t~string54.base, #t~string54.offset := #Ultimate.alloc(30);call #t~string55.base, #t~string55.offset := #Ultimate.alloc(9);call #t~string56.base, #t~string56.offset := #Ultimate.alloc(25);call #t~string118.base, #t~string118.offset := #Ultimate.alloc(10);call #t~string120.base, #t~string120.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string120.base,#t~string120.offset := 91];#memory_int := #memory_int[#t~string120.base,1 + #t~string120.offset := 95];#memory_int := #memory_int[#t~string120.base,2 + #t~string120.offset := 93];#memory_int := #memory_int[#t~string120.base,3 + #t~string120.offset := 0];call #t~string122.base, #t~string122.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string122.base,#t~string122.offset := 91];#memory_int := #memory_int[#t~string122.base,1 + #t~string122.offset := 93];#memory_int := #memory_int[#t~string122.base,2 + #t~string122.offset := 32];#memory_int := #memory_int[#t~string122.base,3 + #t~string122.offset := 0];call #t~string124.base, #t~string124.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string124.base,#t~string124.offset := 32];#memory_int := #memory_int[#t~string124.base,1 + #t~string124.offset := 97];#memory_int := #memory_int[#t~string124.base,2 + #t~string124.offset := 116];#memory_int := #memory_int[#t~string124.base,3 + #t~string124.offset := 32];#memory_int := #memory_int[#t~string124.base,4 + #t~string124.offset := 0];call #t~string126.base, #t~string126.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string126.base,#t~string126.offset := 37];#memory_int := #memory_int[#t~string126.base,1 + #t~string126.offset := 105];#memory_int := #memory_int[#t~string126.base,2 + #t~string126.offset := 0];call #t~string128.base, #t~string128.offset := #Ultimate.alloc(10);call #t~string130.base, #t~string130.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string130.base,#t~string130.offset := 117];#memory_int := #memory_int[#t~string130.base,1 + #t~string130.offset := 112];#memory_int := #memory_int[#t~string130.base,2 + #t~string130.offset := 0];call #t~string132.base, #t~string132.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string132.base,#t~string132.offset := 100];#memory_int := #memory_int[#t~string132.base,1 + #t~string132.offset := 111];#memory_int := #memory_int[#t~string132.base,2 + #t~string132.offset := 119];#memory_int := #memory_int[#t~string132.base,3 + #t~string132.offset := 110];#memory_int := #memory_int[#t~string132.base,4 + #t~string132.offset := 0];call #t~string134.base, #t~string134.offset := #Ultimate.alloc(7);#memory_int := #memory_int[#t~string134.base,#t~string134.offset := 32];#memory_int := #memory_int[#t~string134.base,1 + #t~string134.offset := 73];#memory_int := #memory_int[#t~string134.base,2 + #t~string134.offset := 76];#memory_int := #memory_int[#t~string134.base,3 + #t~string134.offset := 95];#memory_int := #memory_int[#t~string134.base,4 + #t~string134.offset := 112];#memory_int := #memory_int[#t~string134.base,5 + #t~string134.offset := 58];#memory_int := #memory_int[#t~string134.base,6 + #t~string134.offset := 0];call #t~string136.base, #t~string136.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string136.base,#t~string136.offset := 32];#memory_int := #memory_int[#t~string136.base,1 + #t~string136.offset := 37];#memory_int := #memory_int[#t~string136.base,2 + #t~string136.offset := 105];#memory_int := #memory_int[#t~string136.base,3 + #t~string136.offset := 0];call #t~string138.base, #t~string138.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string138.base,#t~string138.offset := 32];#memory_int := #memory_int[#t~string138.base,1 + #t~string138.offset := 37];#memory_int := #memory_int[#t~string138.base,2 + #t~string138.offset := 105];#memory_int := #memory_int[#t~string138.base,3 + #t~string138.offset := 0];call #t~string140.base, #t~string140.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string140.base,#t~string140.offset := 32];#memory_int := #memory_int[#t~string140.base,1 + #t~string140.offset := 37];#memory_int := #memory_int[#t~string140.base,2 + #t~string140.offset := 105];#memory_int := #memory_int[#t~string140.base,3 + #t~string140.offset := 0];call #t~string142.base, #t~string142.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string142.base,#t~string142.offset := 32];#memory_int := #memory_int[#t~string142.base,1 + #t~string142.offset := 37];#memory_int := #memory_int[#t~string142.base,2 + #t~string142.offset := 105];#memory_int := #memory_int[#t~string142.base,3 + #t~string142.offset := 0];call #t~string144.base, #t~string144.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string144.base,#t~string144.offset := 32];#memory_int := #memory_int[#t~string144.base,1 + #t~string144.offset := 37];#memory_int := #memory_int[#t~string144.base,2 + #t~string144.offset := 105];#memory_int := #memory_int[#t~string144.base,3 + #t~string144.offset := 0];call #t~string146.base, #t~string146.offset := #Ultimate.alloc(6);#memory_int := #memory_int[#t~string146.base,#t~string146.offset := 32];#memory_int := #memory_int[#t~string146.base,1 + #t~string146.offset := 70];#memory_int := #memory_int[#t~string146.base,2 + #t~string146.offset := 95];#memory_int := #memory_int[#t~string146.base,3 + #t~string146.offset := 112];#memory_int := #memory_int[#t~string146.base,4 + #t~string146.offset := 58];#memory_int := #memory_int[#t~string146.base,5 + #t~string146.offset := 0];call #t~string149.base, #t~string149.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string149.base,#t~string149.offset := 32];#memory_int := #memory_int[#t~string149.base,1 + #t~string149.offset := 37];#memory_int := #memory_int[#t~string149.base,2 + #t~string149.offset := 105];#memory_int := #memory_int[#t~string149.base,3 + #t~string149.offset := 0];call #t~string152.base, #t~string152.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string152.base,#t~string152.offset := 32];#memory_int := #memory_int[#t~string152.base,1 + #t~string152.offset := 37];#memory_int := #memory_int[#t~string152.base,2 + #t~string152.offset := 105];#memory_int := #memory_int[#t~string152.base,3 + #t~string152.offset := 0];call #t~string155.base, #t~string155.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string155.base,#t~string155.offset := 32];#memory_int := #memory_int[#t~string155.base,1 + #t~string155.offset := 37];#memory_int := #memory_int[#t~string155.base,2 + #t~string155.offset := 105];#memory_int := #memory_int[#t~string155.base,3 + #t~string155.offset := 0];call #t~string158.base, #t~string158.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string158.base,#t~string158.offset := 32];#memory_int := #memory_int[#t~string158.base,1 + #t~string158.offset := 37];#memory_int := #memory_int[#t~string158.base,2 + #t~string158.offset := 105];#memory_int := #memory_int[#t~string158.base,3 + #t~string158.offset := 0];call #t~string161.base, #t~string161.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string161.base,#t~string161.offset := 32];#memory_int := #memory_int[#t~string161.base,1 + #t~string161.offset := 37];#memory_int := #memory_int[#t~string161.base,2 + #t~string161.offset := 105];#memory_int := #memory_int[#t~string161.base,3 + #t~string161.offset := 0];call #t~string163.base, #t~string163.offset := #Ultimate.alloc(2);#memory_int := #memory_int[#t~string163.base,#t~string163.offset := 10];#memory_int := #memory_int[#t~string163.base,1 + #t~string163.offset := 0];~cleanupTimeShifts~0 := 12;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 182384#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res;havoc main_#t~ret13, main_~retValue_acc~1, main_~tmp~8;havoc main_~retValue_acc~1;havoc main_~tmp~8;assume { :begin_inline_select_helpers } true; 187298#L3308 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 187299#L3301 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res;havoc valid_product_~retValue_acc~31;havoc valid_product_~retValue_acc~31;valid_product_~retValue_acc~31 := 1;valid_product_#res := valid_product_~retValue_acc~31; 187813#L3316 main_#t~ret13 := valid_product_#res;assume { :end_inline_valid_product } true;main_~tmp~8 := main_#t~ret13;havoc main_#t~ret13; 188248#L385 assume 0 != main_~tmp~8;assume { :begin_inline_setup } true; 189221#L358 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret6, bigMacCall_~tmp~5;havoc bigMacCall_~tmp~5;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~28;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~28; 181703#L3211 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~28 := 4;getOrigin_#res := getOrigin_~retValue_acc~28; 180236#L3236 bigMacCall_#t~ret6 := getOrigin_#res;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5 := bigMacCall_#t~ret6;havoc bigMacCall_#t~ret6;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~5;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 180237#L1269 assume 0 == initPersonOnFloor_~floor; 189035#L1270 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 179754#L1377-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 188217#L1061 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 189280#L1073-2 assume { :end_inline_callOnFloor } true; 189286#L1413 assume { :end_inline_initPersonOnFloor } true; 185315#L158 assume { :end_inline_bigMacCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_~tmp~27, timeShift_~tmp___0~12, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~12;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret91, stopRequestedAtCurrentFloor_#t~ret92, stopRequestedAtCurrentFloor_#t~ret93, stopRequestedAtCurrentFloor_#t~ret94, stopRequestedAtCurrentFloor_~retValue_acc~22, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~10;havoc stopRequestedAtCurrentFloor_~retValue_acc~22;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~10;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret165, isExecutiveFloorCalling_~retValue_acc~25;havoc isExecutiveFloorCalling_~retValue_acc~25;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 184203#L998 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 184204#L1025 isExecutiveFloorCalling_#t~ret165 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25 := isExecutiveFloorCalling_#t~ret165;havoc isExecutiveFloorCalling_#t~ret165;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~25; 185460#L3154 stopRequestedAtCurrentFloor_#t~ret91 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~25 := stopRequestedAtCurrentFloor_#t~ret91;havoc stopRequestedAtCurrentFloor_#t~ret91; 181327#L2539 assume 0 != stopRequestedAtCurrentFloor_~tmp~25;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 181329#L1802 stopRequestedAtCurrentFloor_#t~ret92 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~10 := stopRequestedAtCurrentFloor_#t~ret92;havoc stopRequestedAtCurrentFloor_#t~ret92; 181234#L2543 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10);stopRequestedAtCurrentFloor_~retValue_acc~22 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~22; 181235#L2556 timeShift_#t~ret107 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret107;havoc timeShift_#t~ret107; 209054#L2691 assume !(0 != timeShift_~tmp___9~2); 209055#L2782 assume !(1 == ~doorState~0); 213116#L2782-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~21, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~6;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~21;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~6;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret165, isExecutiveFloorCalling_~retValue_acc~25;havoc isExecutiveFloorCalling_~retValue_acc~25;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 213115#L998-3 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 213114#L1025-3 isExecutiveFloorCalling_#t~ret165 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25 := isExecutiveFloorCalling_#t~ret165;havoc isExecutiveFloorCalling_#t~ret165;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~25; 213113#L3154-1 stopRequestedInDirection_#t~ret82 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret82;havoc stopRequestedInDirection_#t~ret82; 213111#L2394 assume 0 != stopRequestedInDirection_~tmp___0~7;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 181789#L1802-3 stopRequestedInDirection_#t~ret83 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~21 := stopRequestedInDirection_#t~ret83;havoc stopRequestedInDirection_#t~ret83;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~6 := (if stopRequestedInDirection_~tmp~21 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~18 := (if stopRequestedInDirection_~__cil_tmp8~6 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 181790#L2407 timeShift_#t~ret114 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret114;havoc timeShift_#t~ret114; 184213#L2790 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret85, continueInDirection_~dir, continueInDirection_~tmp~22;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~22;~currentHeading~0 := continueInDirection_~dir; 188042#L2451 assume !(1 == ~currentHeading~0); 186326#L2461 assume !(0 == ~currentFloorID~0); 186327#L2461-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 186329#L2467-1 assume { :end_inline_continueInDirection } true; 212868#L2799-2 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret20, __utac_acc__Specification14_spec__1_#t~ret21, __utac_acc__Specification14_spec__1_#t~ret22, __utac_acc__Specification14_spec__1_#t~ret23, __utac_acc__Specification14_spec__1_~tmp~11, __utac_acc__Specification14_spec__1_~tmp___0~4, __utac_acc__Specification14_spec__1_~tmp___1~3, __utac_acc__Specification14_spec__1_~tmp___2~1;havoc __utac_acc__Specification14_spec__1_~tmp~11;havoc __utac_acc__Specification14_spec__1_~tmp___0~4;havoc __utac_acc__Specification14_spec__1_~tmp___1~3;havoc __utac_acc__Specification14_spec__1_~tmp___2~1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret165, isExecutiveFloorCalling_~retValue_acc~25;havoc isExecutiveFloorCalling_~retValue_acc~25;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 212867#L998-65 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 191956#L1025-65 isExecutiveFloorCalling_#t~ret165 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25 := isExecutiveFloorCalling_#t~ret165;havoc isExecutiveFloorCalling_#t~ret165;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~25; 212866#L3154-3 __utac_acc__Specification14_spec__1_#t~ret20 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~1 := __utac_acc__Specification14_spec__1_#t~ret20;havoc __utac_acc__Specification14_spec__1_#t~ret20; 212863#L509 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~1); 212859#L509-1 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 212858#L2814 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_~tmp~27, timeShift_~tmp___0~12, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~12;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret91, stopRequestedAtCurrentFloor_#t~ret92, stopRequestedAtCurrentFloor_#t~ret93, stopRequestedAtCurrentFloor_#t~ret94, stopRequestedAtCurrentFloor_~retValue_acc~22, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~10;havoc stopRequestedAtCurrentFloor_~retValue_acc~22;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~10;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret165, isExecutiveFloorCalling_~retValue_acc~25;havoc isExecutiveFloorCalling_~retValue_acc~25;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 206807#L998-66 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 190226#L1025-66 isExecutiveFloorCalling_#t~ret165 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25 := isExecutiveFloorCalling_#t~ret165;havoc isExecutiveFloorCalling_#t~ret165;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~25; 206801#L3154-4 stopRequestedAtCurrentFloor_#t~ret91 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~25 := stopRequestedAtCurrentFloor_#t~ret91;havoc stopRequestedAtCurrentFloor_#t~ret91; 206802#L2539-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~25;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 205787#L1802-6 stopRequestedAtCurrentFloor_#t~ret92 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~10 := stopRequestedAtCurrentFloor_#t~ret92;havoc stopRequestedAtCurrentFloor_#t~ret92; 205788#L2543-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10);stopRequestedAtCurrentFloor_~retValue_acc~22 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~22; 212855#L2556-1 timeShift_#t~ret107 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret107;havoc timeShift_#t~ret107; 212852#L2691-2 assume !(0 != timeShift_~tmp___9~2); 212853#L2782-3 assume !(1 == ~doorState~0); 217141#L2782-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~21, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~6;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~21;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~6;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret165, isExecutiveFloorCalling_~retValue_acc~25;havoc isExecutiveFloorCalling_~retValue_acc~25;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 217140#L998-69 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 217139#L1025-69 isExecutiveFloorCalling_#t~ret165 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25 := isExecutiveFloorCalling_#t~ret165;havoc isExecutiveFloorCalling_#t~ret165;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~25; 217138#L3154-5 stopRequestedInDirection_#t~ret82 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret82;havoc stopRequestedInDirection_#t~ret82; 217137#L2394-2 assume 0 != stopRequestedInDirection_~tmp___0~7;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 181781#L1802-9 stopRequestedInDirection_#t~ret83 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~21 := stopRequestedInDirection_#t~ret83;havoc stopRequestedInDirection_#t~ret83;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~6 := (if stopRequestedInDirection_~tmp~21 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~18 := (if stopRequestedInDirection_~__cil_tmp8~6 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 181782#L2407-2 timeShift_#t~ret114 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret114;havoc timeShift_#t~ret114; 184222#L2790-2 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret85, continueInDirection_~dir, continueInDirection_~tmp~22;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~22;~currentHeading~0 := continueInDirection_~dir; 186823#L2451-3 assume !(1 == ~currentHeading~0); 186824#L2461-9 assume !(0 == ~currentFloorID~0); 186746#L2461-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 189566#L2467-7 assume { :end_inline_continueInDirection } true; 185717#L2799-5 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret20, __utac_acc__Specification14_spec__1_#t~ret21, __utac_acc__Specification14_spec__1_#t~ret22, __utac_acc__Specification14_spec__1_#t~ret23, __utac_acc__Specification14_spec__1_~tmp~11, __utac_acc__Specification14_spec__1_~tmp___0~4, __utac_acc__Specification14_spec__1_~tmp___1~3, __utac_acc__Specification14_spec__1_~tmp___2~1;havoc __utac_acc__Specification14_spec__1_~tmp~11;havoc __utac_acc__Specification14_spec__1_~tmp___0~4;havoc __utac_acc__Specification14_spec__1_~tmp___1~3;havoc __utac_acc__Specification14_spec__1_~tmp___2~1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret165, isExecutiveFloorCalling_~retValue_acc~25;havoc isExecutiveFloorCalling_~retValue_acc~25;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 185718#L998-131 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 188114#L1025-131 isExecutiveFloorCalling_#t~ret165 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25 := isExecutiveFloorCalling_#t~ret165;havoc isExecutiveFloorCalling_#t~ret165;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~25; 188115#L3154-7 __utac_acc__Specification14_spec__1_#t~ret20 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~1 := __utac_acc__Specification14_spec__1_#t~ret20;havoc __utac_acc__Specification14_spec__1_#t~ret20; 185707#L509-2 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~1); 185708#L509-3 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 206734#L2814-1 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_~tmp~27, timeShift_~tmp___0~12, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~12;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret91, stopRequestedAtCurrentFloor_#t~ret92, stopRequestedAtCurrentFloor_#t~ret93, stopRequestedAtCurrentFloor_#t~ret94, stopRequestedAtCurrentFloor_~retValue_acc~22, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~10;havoc stopRequestedAtCurrentFloor_~retValue_acc~22;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~10;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret165, isExecutiveFloorCalling_~retValue_acc~25;havoc isExecutiveFloorCalling_~retValue_acc~25;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 206735#L998-132 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 195480#L1025-132 isExecutiveFloorCalling_#t~ret165 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25 := isExecutiveFloorCalling_#t~ret165;havoc isExecutiveFloorCalling_#t~ret165;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~25; 206728#L3154-8 stopRequestedAtCurrentFloor_#t~ret91 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~25 := stopRequestedAtCurrentFloor_#t~ret91;havoc stopRequestedAtCurrentFloor_#t~ret91; 206729#L2539-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~25;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 205777#L1802-12 stopRequestedAtCurrentFloor_#t~ret92 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~10 := stopRequestedAtCurrentFloor_#t~ret92;havoc stopRequestedAtCurrentFloor_#t~ret92; 205778#L2543-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10);stopRequestedAtCurrentFloor_~retValue_acc~22 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~22; 212742#L2556-2 timeShift_#t~ret107 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret107;havoc timeShift_#t~ret107; 212743#L2691-4 assume !(0 != timeShift_~tmp___9~2); 214235#L2782-6 assume !(1 == ~doorState~0); 218304#L2782-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~21, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~6;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~21;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~6;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret165, isExecutiveFloorCalling_~retValue_acc~25;havoc isExecutiveFloorCalling_~retValue_acc~25;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 218300#L998-135 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 218301#L1025-135 isExecutiveFloorCalling_#t~ret165 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25 := isExecutiveFloorCalling_#t~ret165;havoc isExecutiveFloorCalling_#t~ret165;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~25; 218296#L3154-9 stopRequestedInDirection_#t~ret82 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret82;havoc stopRequestedInDirection_#t~ret82; 218297#L2394-4 assume 0 != stopRequestedInDirection_~tmp___0~7;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 218293#L1802-15 stopRequestedInDirection_#t~ret83 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~21 := stopRequestedInDirection_#t~ret83;havoc stopRequestedInDirection_#t~ret83;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~6 := (if stopRequestedInDirection_~tmp~21 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~18 := (if stopRequestedInDirection_~__cil_tmp8~6 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 218291#L2407-4 timeShift_#t~ret114 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret114;havoc timeShift_#t~ret114; 218288#L2790-4 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret85, continueInDirection_~dir, continueInDirection_~tmp~22;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~22;~currentHeading~0 := continueInDirection_~dir; 218290#L2451-6 assume !(1 == ~currentHeading~0); 189563#L2461-18 assume !(0 == ~currentFloorID~0); 186742#L2461-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 189466#L2467-13 assume { :end_inline_continueInDirection } true; 188546#L2799-8 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret20, __utac_acc__Specification14_spec__1_#t~ret21, __utac_acc__Specification14_spec__1_#t~ret22, __utac_acc__Specification14_spec__1_#t~ret23, __utac_acc__Specification14_spec__1_~tmp~11, __utac_acc__Specification14_spec__1_~tmp___0~4, __utac_acc__Specification14_spec__1_~tmp___1~3, __utac_acc__Specification14_spec__1_~tmp___2~1;havoc __utac_acc__Specification14_spec__1_~tmp~11;havoc __utac_acc__Specification14_spec__1_~tmp___0~4;havoc __utac_acc__Specification14_spec__1_~tmp___1~3;havoc __utac_acc__Specification14_spec__1_~tmp___2~1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret165, isExecutiveFloorCalling_~retValue_acc~25;havoc isExecutiveFloorCalling_~retValue_acc~25;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 209986#L998-197 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 190632#L1025-197 isExecutiveFloorCalling_#t~ret165 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25 := isExecutiveFloorCalling_#t~ret165;havoc isExecutiveFloorCalling_#t~ret165;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~25; 209985#L3154-11 __utac_acc__Specification14_spec__1_#t~ret20 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~1 := __utac_acc__Specification14_spec__1_#t~ret20;havoc __utac_acc__Specification14_spec__1_#t~ret20; 209979#L509-4 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~1); 209978#L509-5 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 209977#L2814-2 assume { :end_inline_timeShift } true; 209976#L171 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~28;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~28; 209975#L3211-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~28 := 4;getOrigin_#res := getOrigin_~retValue_acc~28; 209969#L3236-1 bobCall_#t~ret1 := getOrigin_#res;assume { :end_inline_getOrigin } true;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 209967#L1269-1 assume 0 == initPersonOnFloor_~floor; 209968#L1270-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 209926#L1377-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 209927#L1061-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 209918#L1073-5 assume { :end_inline_callOnFloor } true; 209919#L1413-1 assume { :end_inline_initPersonOnFloor } true; 206823#L103 assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret7, cleanup_#t~ret8, cleanup_~i~0, cleanup_~tmp~6, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~0;havoc cleanup_~i~0;havoc cleanup_~tmp~6;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~0;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_~tmp~27, timeShift_~tmp___0~12, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~12;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret91, stopRequestedAtCurrentFloor_#t~ret92, stopRequestedAtCurrentFloor_#t~ret93, stopRequestedAtCurrentFloor_#t~ret94, stopRequestedAtCurrentFloor_~retValue_acc~22, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~10;havoc stopRequestedAtCurrentFloor_~retValue_acc~22;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~10;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret165, isExecutiveFloorCalling_~retValue_acc~25;havoc isExecutiveFloorCalling_~retValue_acc~25;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 206822#L998-198 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 200734#L1025-198 isExecutiveFloorCalling_#t~ret165 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25 := isExecutiveFloorCalling_#t~ret165;havoc isExecutiveFloorCalling_#t~ret165;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~25; 206812#L3154-12 stopRequestedAtCurrentFloor_#t~ret91 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~25 := stopRequestedAtCurrentFloor_#t~ret91;havoc stopRequestedAtCurrentFloor_#t~ret91; 206813#L2539-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~25;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 205829#L1802-18 stopRequestedAtCurrentFloor_#t~ret92 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~10 := stopRequestedAtCurrentFloor_#t~ret92;havoc stopRequestedAtCurrentFloor_#t~ret92; 205830#L2543-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10);stopRequestedAtCurrentFloor_~retValue_acc~22 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~22; 210747#L2556-3 timeShift_#t~ret107 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret107;havoc timeShift_#t~ret107; 210748#L2691-6 assume !(0 != timeShift_~tmp___9~2); 213360#L2782-9 assume !(1 == ~doorState~0); 217381#L2782-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~21, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~6;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~21;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~6;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret165, isExecutiveFloorCalling_~retValue_acc~25;havoc isExecutiveFloorCalling_~retValue_acc~25;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 217380#L998-201 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 217379#L1025-201 isExecutiveFloorCalling_#t~ret165 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25 := isExecutiveFloorCalling_#t~ret165;havoc isExecutiveFloorCalling_#t~ret165;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~25; 217378#L3154-13 stopRequestedInDirection_#t~ret82 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret82;havoc stopRequestedInDirection_#t~ret82; 213355#L2394-6 assume 0 != stopRequestedInDirection_~tmp___0~7;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 213356#L1802-21 stopRequestedInDirection_#t~ret83 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~21 := stopRequestedInDirection_#t~ret83;havoc stopRequestedInDirection_#t~ret83;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~6 := (if stopRequestedInDirection_~tmp~21 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~18 := (if stopRequestedInDirection_~__cil_tmp8~6 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 217376#L2407-6 timeShift_#t~ret114 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret114;havoc timeShift_#t~ret114; 217057#L2790-6 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret85, continueInDirection_~dir, continueInDirection_~tmp~22;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~22;~currentHeading~0 := continueInDirection_~dir; 217058#L2451-9 assume !(1 == ~currentHeading~0); 189547#L2461-27 assume !(0 == ~currentFloorID~0); 186586#L2461-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 189461#L2467-19 assume { :end_inline_continueInDirection } true; 185683#L2799-11 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret20, __utac_acc__Specification14_spec__1_#t~ret21, __utac_acc__Specification14_spec__1_#t~ret22, __utac_acc__Specification14_spec__1_#t~ret23, __utac_acc__Specification14_spec__1_~tmp~11, __utac_acc__Specification14_spec__1_~tmp___0~4, __utac_acc__Specification14_spec__1_~tmp___1~3, __utac_acc__Specification14_spec__1_~tmp___2~1;havoc __utac_acc__Specification14_spec__1_~tmp~11;havoc __utac_acc__Specification14_spec__1_~tmp___0~4;havoc __utac_acc__Specification14_spec__1_~tmp___1~3;havoc __utac_acc__Specification14_spec__1_~tmp___2~1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret165, isExecutiveFloorCalling_~retValue_acc~25;havoc isExecutiveFloorCalling_~retValue_acc~25;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 185684#L998-263 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 185820#L1025-263 isExecutiveFloorCalling_#t~ret165 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25 := isExecutiveFloorCalling_#t~ret165;havoc isExecutiveFloorCalling_#t~ret165;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~25; 185821#L3154-15 __utac_acc__Specification14_spec__1_#t~ret20 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~1 := __utac_acc__Specification14_spec__1_#t~ret20;havoc __utac_acc__Specification14_spec__1_#t~ret20; 221855#L509-6 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~1); 185689#L509-7 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 185690#L2814-3 assume { :end_inline_timeShift } true;cleanup_~i~0 := 0; 189689#L188-3 [2018-11-18 15:13:35,817 INFO L796 eck$LassoCheckResult]: Loop: 189689#L188-3 assume true; 189690#L188-1 assume !false; 189741#L189 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 189742#L192 assume cleanup_~i~0 < cleanup_~__cil_tmp4~0;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~8;havoc isBlocked_~retValue_acc~8;isBlocked_~retValue_acc~8 := 0;isBlocked_#res := isBlocked_~retValue_acc~8; 180471#L1649 cleanup_#t~ret7 := isBlocked_#res;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0 := cleanup_#t~ret7;havoc cleanup_#t~ret7; 180472#L196 assume 1 != cleanup_~tmp___0~0; 188718#L196-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res;havoc isIdle_#t~ret66, isIdle_~retValue_acc~15, isIdle_~tmp~18;havoc isIdle_~retValue_acc~15;havoc isIdle_~tmp~18;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret61, anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_#t~ret64, anyStopRequested_#t~ret65, anyStopRequested_~retValue_acc~14, anyStopRequested_~tmp~17, anyStopRequested_~tmp___0~5, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~2, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~14;havoc anyStopRequested_~tmp~17;havoc anyStopRequested_~tmp___0~5;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~2;havoc anyStopRequested_~tmp___3~0;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 188719#L998-264 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 185780#L1025-264 anyStopRequested_#t~ret61 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret61;havoc anyStopRequested_#t~ret61; 185781#L1910 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~14 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~14; 189168#L1974 isIdle_#t~ret66 := anyStopRequested_#res;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~18 := isIdle_#t~ret66;havoc isIdle_#t~ret66;isIdle_~retValue_acc~15 := (if 0 == isIdle_~tmp~18 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~15; 189169#L1987 cleanup_#t~ret8 := isIdle_#res;assume { :end_inline_isIdle } true;cleanup_~tmp~6 := cleanup_#t~ret8;havoc cleanup_#t~ret8; 206944#L208 assume !(0 != cleanup_~tmp~6);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_~tmp~27, timeShift_~tmp___0~12, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~12;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret91, stopRequestedAtCurrentFloor_#t~ret92, stopRequestedAtCurrentFloor_#t~ret93, stopRequestedAtCurrentFloor_#t~ret94, stopRequestedAtCurrentFloor_~retValue_acc~22, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~10;havoc stopRequestedAtCurrentFloor_~retValue_acc~22;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~10;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret165, isExecutiveFloorCalling_~retValue_acc~25;havoc isExecutiveFloorCalling_~retValue_acc~25;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 206945#L998-269 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 190353#L1025-269 isExecutiveFloorCalling_#t~ret165 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25 := isExecutiveFloorCalling_#t~ret165;havoc isExecutiveFloorCalling_#t~ret165;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~25; 206942#L3154-16 stopRequestedAtCurrentFloor_#t~ret91 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~25 := stopRequestedAtCurrentFloor_#t~ret91;havoc stopRequestedAtCurrentFloor_#t~ret91; 205766#L2539-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~25;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 205768#L1802-24 stopRequestedAtCurrentFloor_#t~ret92 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~10 := stopRequestedAtCurrentFloor_#t~ret92;havoc stopRequestedAtCurrentFloor_#t~ret92; 205761#L2543-4 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10);stopRequestedAtCurrentFloor_~retValue_acc~22 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~22; 181229#L2556-4 timeShift_#t~ret107 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret107;havoc timeShift_#t~ret107; 211790#L2691-8 assume !(0 != timeShift_~tmp___9~2); 211791#L2782-12 assume !(1 == ~doorState~0); 223526#L2782-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~21, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~6;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~21;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~6;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret165, isExecutiveFloorCalling_~retValue_acc~25;havoc isExecutiveFloorCalling_~retValue_acc~25;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 223525#L998-272 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 223524#L1025-272 isExecutiveFloorCalling_#t~ret165 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25 := isExecutiveFloorCalling_#t~ret165;havoc isExecutiveFloorCalling_#t~ret165;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~25; 223523#L3154-17 stopRequestedInDirection_#t~ret82 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret82;havoc stopRequestedInDirection_#t~ret82; 223521#L2394-8 assume 0 != stopRequestedInDirection_~tmp___0~7;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 181751#L1802-27 stopRequestedInDirection_#t~ret83 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~21 := stopRequestedInDirection_#t~ret83;havoc stopRequestedInDirection_#t~ret83;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~6 := (if stopRequestedInDirection_~tmp~21 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~18 := (if stopRequestedInDirection_~__cil_tmp8~6 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 181752#L2407-8 timeShift_#t~ret114 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret114;havoc timeShift_#t~ret114; 184211#L2790-8 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret85, continueInDirection_~dir, continueInDirection_~tmp~22;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~22;~currentHeading~0 := continueInDirection_~dir; 188154#L2451-12 assume !(1 == ~currentHeading~0); 189534#L2461-36 assume !(0 == ~currentFloorID~0); 186537#L2461-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 189535#L2467-25 assume { :end_inline_continueInDirection } true; 221857#L2799-14 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret20, __utac_acc__Specification14_spec__1_#t~ret21, __utac_acc__Specification14_spec__1_#t~ret22, __utac_acc__Specification14_spec__1_#t~ret23, __utac_acc__Specification14_spec__1_~tmp~11, __utac_acc__Specification14_spec__1_~tmp___0~4, __utac_acc__Specification14_spec__1_~tmp___1~3, __utac_acc__Specification14_spec__1_~tmp___2~1;havoc __utac_acc__Specification14_spec__1_~tmp~11;havoc __utac_acc__Specification14_spec__1_~tmp___0~4;havoc __utac_acc__Specification14_spec__1_~tmp___1~3;havoc __utac_acc__Specification14_spec__1_~tmp___2~1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret165, isExecutiveFloorCalling_~retValue_acc~25;havoc isExecutiveFloorCalling_~retValue_acc~25;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 187992#L998-334 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 187993#L1025-334 isExecutiveFloorCalling_#t~ret165 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25 := isExecutiveFloorCalling_#t~ret165;havoc isExecutiveFloorCalling_#t~ret165;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~25; 185387#L3154-19 __utac_acc__Specification14_spec__1_#t~ret20 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~1 := __utac_acc__Specification14_spec__1_#t~ret20;havoc __utac_acc__Specification14_spec__1_#t~ret20; 185388#L509-8 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~1); 185672#L509-9 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 185673#L2814-4 assume { :end_inline_timeShift } true;cleanup_~i~0 := 1 + cleanup_~i~0; 189689#L188-3 [2018-11-18 15:13:35,820 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 15:13:35,821 INFO L82 PathProgramCache]: Analyzing trace with hash -1347500530, now seen corresponding path program 1 times [2018-11-18 15:13:35,821 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 15:13:35,821 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 15:13:35,821 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 15:13:35,822 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 15:13:35,822 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 15:13:35,837 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 15:13:36,575 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 15:13:36,575 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 15:13:36,576 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-18 15:13:36,576 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-18 15:13:36,576 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 15:13:36,576 INFO L82 PathProgramCache]: Analyzing trace with hash -494593352, now seen corresponding path program 1 times [2018-11-18 15:13:36,576 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 15:13:36,576 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 15:13:36,577 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 15:13:36,577 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 15:13:36,577 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 15:13:36,583 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 15:13:36,628 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 15:13:36,628 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 15:13:36,628 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2018-11-18 15:13:36,629 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-18 15:13:36,629 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2018-11-18 15:13:36,629 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=43, Unknown=0, NotChecked=0, Total=56 [2018-11-18 15:13:36,629 INFO L87 Difference]: Start difference. First operand 44913 states and 83681 transitions. cyclomatic complexity: 38770 Second operand 8 states. [2018-11-18 15:13:53,507 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 15:13:53,508 INFO L93 Difference]: Finished difference Result 397947 states and 741216 transitions. [2018-11-18 15:13:53,508 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 32 states. [2018-11-18 15:13:53,508 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 397947 states and 741216 transitions. [2018-11-18 15:13:57,815 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 114332 [2018-11-18 15:13:58,616 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 397947 states to 397947 states and 741216 transitions. [2018-11-18 15:13:58,616 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 397947 [2018-11-18 15:13:58,789 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 397947 [2018-11-18 15:13:58,789 INFO L73 IsDeterministic]: Start isDeterministic. Operand 397947 states and 741216 transitions. [2018-11-18 15:13:58,928 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-18 15:13:58,928 INFO L705 BuchiCegarLoop]: Abstraction has 397947 states and 741216 transitions. [2018-11-18 15:13:59,076 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 397947 states and 741216 transitions. [2018-11-18 15:14:00,606 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 397947 to 89647. [2018-11-18 15:14:00,606 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 89647 states. [2018-11-18 15:14:00,690 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 89647 states to 89647 states and 167000 transitions. [2018-11-18 15:14:00,690 INFO L728 BuchiCegarLoop]: Abstraction has 89647 states and 167000 transitions. [2018-11-18 15:14:00,690 INFO L608 BuchiCegarLoop]: Abstraction has 89647 states and 167000 transitions. [2018-11-18 15:14:00,690 INFO L442 BuchiCegarLoop]: ======== Iteration 4============ [2018-11-18 15:14:00,690 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 89647 states and 167000 transitions. [2018-11-18 15:14:00,841 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 20116 [2018-11-18 15:14:00,841 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-18 15:14:00,841 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-18 15:14:00,845 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 15:14:00,845 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 15:14:00,845 INFO L794 eck$LassoCheckResult]: Stem: 625366#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];call #t~string42.base, #t~string42.offset := #Ultimate.alloc(30);call #t~string43.base, #t~string43.offset := #Ultimate.alloc(9);call #t~string44.base, #t~string44.offset := #Ultimate.alloc(21);call #t~string45.base, #t~string45.offset := #Ultimate.alloc(30);call #t~string46.base, #t~string46.offset := #Ultimate.alloc(9);call #t~string47.base, #t~string47.offset := #Ultimate.alloc(21);call #t~string51.base, #t~string51.offset := #Ultimate.alloc(30);call #t~string52.base, #t~string52.offset := #Ultimate.alloc(9);call #t~string53.base, #t~string53.offset := #Ultimate.alloc(25);call #t~string54.base, #t~string54.offset := #Ultimate.alloc(30);call #t~string55.base, #t~string55.offset := #Ultimate.alloc(9);call #t~string56.base, #t~string56.offset := #Ultimate.alloc(25);call #t~string118.base, #t~string118.offset := #Ultimate.alloc(10);call #t~string120.base, #t~string120.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string120.base,#t~string120.offset := 91];#memory_int := #memory_int[#t~string120.base,1 + #t~string120.offset := 95];#memory_int := #memory_int[#t~string120.base,2 + #t~string120.offset := 93];#memory_int := #memory_int[#t~string120.base,3 + #t~string120.offset := 0];call #t~string122.base, #t~string122.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string122.base,#t~string122.offset := 91];#memory_int := #memory_int[#t~string122.base,1 + #t~string122.offset := 93];#memory_int := #memory_int[#t~string122.base,2 + #t~string122.offset := 32];#memory_int := #memory_int[#t~string122.base,3 + #t~string122.offset := 0];call #t~string124.base, #t~string124.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string124.base,#t~string124.offset := 32];#memory_int := #memory_int[#t~string124.base,1 + #t~string124.offset := 97];#memory_int := #memory_int[#t~string124.base,2 + #t~string124.offset := 116];#memory_int := #memory_int[#t~string124.base,3 + #t~string124.offset := 32];#memory_int := #memory_int[#t~string124.base,4 + #t~string124.offset := 0];call #t~string126.base, #t~string126.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string126.base,#t~string126.offset := 37];#memory_int := #memory_int[#t~string126.base,1 + #t~string126.offset := 105];#memory_int := #memory_int[#t~string126.base,2 + #t~string126.offset := 0];call #t~string128.base, #t~string128.offset := #Ultimate.alloc(10);call #t~string130.base, #t~string130.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string130.base,#t~string130.offset := 117];#memory_int := #memory_int[#t~string130.base,1 + #t~string130.offset := 112];#memory_int := #memory_int[#t~string130.base,2 + #t~string130.offset := 0];call #t~string132.base, #t~string132.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string132.base,#t~string132.offset := 100];#memory_int := #memory_int[#t~string132.base,1 + #t~string132.offset := 111];#memory_int := #memory_int[#t~string132.base,2 + #t~string132.offset := 119];#memory_int := #memory_int[#t~string132.base,3 + #t~string132.offset := 110];#memory_int := #memory_int[#t~string132.base,4 + #t~string132.offset := 0];call #t~string134.base, #t~string134.offset := #Ultimate.alloc(7);#memory_int := #memory_int[#t~string134.base,#t~string134.offset := 32];#memory_int := #memory_int[#t~string134.base,1 + #t~string134.offset := 73];#memory_int := #memory_int[#t~string134.base,2 + #t~string134.offset := 76];#memory_int := #memory_int[#t~string134.base,3 + #t~string134.offset := 95];#memory_int := #memory_int[#t~string134.base,4 + #t~string134.offset := 112];#memory_int := #memory_int[#t~string134.base,5 + #t~string134.offset := 58];#memory_int := #memory_int[#t~string134.base,6 + #t~string134.offset := 0];call #t~string136.base, #t~string136.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string136.base,#t~string136.offset := 32];#memory_int := #memory_int[#t~string136.base,1 + #t~string136.offset := 37];#memory_int := #memory_int[#t~string136.base,2 + #t~string136.offset := 105];#memory_int := #memory_int[#t~string136.base,3 + #t~string136.offset := 0];call #t~string138.base, #t~string138.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string138.base,#t~string138.offset := 32];#memory_int := #memory_int[#t~string138.base,1 + #t~string138.offset := 37];#memory_int := #memory_int[#t~string138.base,2 + #t~string138.offset := 105];#memory_int := #memory_int[#t~string138.base,3 + #t~string138.offset := 0];call #t~string140.base, #t~string140.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string140.base,#t~string140.offset := 32];#memory_int := #memory_int[#t~string140.base,1 + #t~string140.offset := 37];#memory_int := #memory_int[#t~string140.base,2 + #t~string140.offset := 105];#memory_int := #memory_int[#t~string140.base,3 + #t~string140.offset := 0];call #t~string142.base, #t~string142.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string142.base,#t~string142.offset := 32];#memory_int := #memory_int[#t~string142.base,1 + #t~string142.offset := 37];#memory_int := #memory_int[#t~string142.base,2 + #t~string142.offset := 105];#memory_int := #memory_int[#t~string142.base,3 + #t~string142.offset := 0];call #t~string144.base, #t~string144.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string144.base,#t~string144.offset := 32];#memory_int := #memory_int[#t~string144.base,1 + #t~string144.offset := 37];#memory_int := #memory_int[#t~string144.base,2 + #t~string144.offset := 105];#memory_int := #memory_int[#t~string144.base,3 + #t~string144.offset := 0];call #t~string146.base, #t~string146.offset := #Ultimate.alloc(6);#memory_int := #memory_int[#t~string146.base,#t~string146.offset := 32];#memory_int := #memory_int[#t~string146.base,1 + #t~string146.offset := 70];#memory_int := #memory_int[#t~string146.base,2 + #t~string146.offset := 95];#memory_int := #memory_int[#t~string146.base,3 + #t~string146.offset := 112];#memory_int := #memory_int[#t~string146.base,4 + #t~string146.offset := 58];#memory_int := #memory_int[#t~string146.base,5 + #t~string146.offset := 0];call #t~string149.base, #t~string149.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string149.base,#t~string149.offset := 32];#memory_int := #memory_int[#t~string149.base,1 + #t~string149.offset := 37];#memory_int := #memory_int[#t~string149.base,2 + #t~string149.offset := 105];#memory_int := #memory_int[#t~string149.base,3 + #t~string149.offset := 0];call #t~string152.base, #t~string152.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string152.base,#t~string152.offset := 32];#memory_int := #memory_int[#t~string152.base,1 + #t~string152.offset := 37];#memory_int := #memory_int[#t~string152.base,2 + #t~string152.offset := 105];#memory_int := #memory_int[#t~string152.base,3 + #t~string152.offset := 0];call #t~string155.base, #t~string155.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string155.base,#t~string155.offset := 32];#memory_int := #memory_int[#t~string155.base,1 + #t~string155.offset := 37];#memory_int := #memory_int[#t~string155.base,2 + #t~string155.offset := 105];#memory_int := #memory_int[#t~string155.base,3 + #t~string155.offset := 0];call #t~string158.base, #t~string158.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string158.base,#t~string158.offset := 32];#memory_int := #memory_int[#t~string158.base,1 + #t~string158.offset := 37];#memory_int := #memory_int[#t~string158.base,2 + #t~string158.offset := 105];#memory_int := #memory_int[#t~string158.base,3 + #t~string158.offset := 0];call #t~string161.base, #t~string161.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string161.base,#t~string161.offset := 32];#memory_int := #memory_int[#t~string161.base,1 + #t~string161.offset := 37];#memory_int := #memory_int[#t~string161.base,2 + #t~string161.offset := 105];#memory_int := #memory_int[#t~string161.base,3 + #t~string161.offset := 0];call #t~string163.base, #t~string163.offset := #Ultimate.alloc(2);#memory_int := #memory_int[#t~string163.base,#t~string163.offset := 10];#memory_int := #memory_int[#t~string163.base,1 + #t~string163.offset := 0];~cleanupTimeShifts~0 := 12;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 625367#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res;havoc main_#t~ret13, main_~retValue_acc~1, main_~tmp~8;havoc main_~retValue_acc~1;havoc main_~tmp~8;assume { :begin_inline_select_helpers } true; 630252#L3308 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 630253#L3301 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res;havoc valid_product_~retValue_acc~31;havoc valid_product_~retValue_acc~31;valid_product_~retValue_acc~31 := 1;valid_product_#res := valid_product_~retValue_acc~31; 630764#L3316 main_#t~ret13 := valid_product_#res;assume { :end_inline_valid_product } true;main_~tmp~8 := main_#t~ret13;havoc main_#t~ret13; 631234#L385 assume 0 != main_~tmp~8;assume { :begin_inline_setup } true; 632189#L358 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret6, bigMacCall_~tmp~5;havoc bigMacCall_~tmp~5;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~28;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~28; 624689#L3211 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~28 := 4;getOrigin_#res := getOrigin_~retValue_acc~28; 623188#L3236 bigMacCall_#t~ret6 := getOrigin_#res;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5 := bigMacCall_#t~ret6;havoc bigMacCall_#t~ret6;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~5;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 623189#L1269 assume 0 == initPersonOnFloor_~floor; 632027#L1270 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 622684#L1377-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 631175#L1061 assume !(0 == callOnFloor_~floorID); 632241#L1064 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 632611#L1073-2 assume { :end_inline_callOnFloor } true; 632246#L1413 assume { :end_inline_initPersonOnFloor } true; 632247#L158 assume { :end_inline_bigMacCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_~tmp~27, timeShift_~tmp___0~12, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~12;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret91, stopRequestedAtCurrentFloor_#t~ret92, stopRequestedAtCurrentFloor_#t~ret93, stopRequestedAtCurrentFloor_#t~ret94, stopRequestedAtCurrentFloor_~retValue_acc~22, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~10;havoc stopRequestedAtCurrentFloor_~retValue_acc~22;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~10;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret165, isExecutiveFloorCalling_~retValue_acc~25;havoc isExecutiveFloorCalling_~retValue_acc~25;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 627185#L998 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 627186#L1025 isExecutiveFloorCalling_#t~ret165 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25 := isExecutiveFloorCalling_#t~ret165;havoc isExecutiveFloorCalling_#t~ret165;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~25; 628460#L3154 stopRequestedAtCurrentFloor_#t~ret91 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~25 := stopRequestedAtCurrentFloor_#t~ret91;havoc stopRequestedAtCurrentFloor_#t~ret91; 628461#L2539 assume 0 != stopRequestedAtCurrentFloor_~tmp~25;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 624678#L1802 stopRequestedAtCurrentFloor_#t~ret92 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~10 := stopRequestedAtCurrentFloor_#t~ret92;havoc stopRequestedAtCurrentFloor_#t~ret92; 624679#L2543 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10);stopRequestedAtCurrentFloor_~retValue_acc~22 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~22; 635937#L2556 timeShift_#t~ret107 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret107;havoc timeShift_#t~ret107; 635938#L2691 assume !(0 != timeShift_~tmp___9~2); 638546#L2782 assume !(1 == ~doorState~0); 635931#L2782-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~21, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~6;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~21;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~6;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret165, isExecutiveFloorCalling_~retValue_acc~25;havoc isExecutiveFloorCalling_~retValue_acc~25;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 635932#L998-3 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 635927#L1025-3 isExecutiveFloorCalling_#t~ret165 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25 := isExecutiveFloorCalling_#t~ret165;havoc isExecutiveFloorCalling_#t~ret165;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~25; 635928#L3154-1 stopRequestedInDirection_#t~ret82 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret82;havoc stopRequestedInDirection_#t~ret82; 635922#L2394 assume 0 != stopRequestedInDirection_~tmp___0~7;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 635923#L1802-3 stopRequestedInDirection_#t~ret83 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~21 := stopRequestedInDirection_#t~ret83;havoc stopRequestedInDirection_#t~ret83;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~6 := (if stopRequestedInDirection_~tmp~21 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~18 := (if stopRequestedInDirection_~__cil_tmp8~6 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 638728#L2407 timeShift_#t~ret114 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret114;havoc timeShift_#t~ret114; 638724#L2790 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret85, continueInDirection_~dir, continueInDirection_~tmp~22;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~22;~currentHeading~0 := continueInDirection_~dir; 638725#L2451 assume !(1 == ~currentHeading~0); 629302#L2461 assume !(0 == ~currentFloorID~0); 629303#L2461-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 639392#L2467-1 assume { :end_inline_continueInDirection } true; 660092#L2799-2 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret20, __utac_acc__Specification14_spec__1_#t~ret21, __utac_acc__Specification14_spec__1_#t~ret22, __utac_acc__Specification14_spec__1_#t~ret23, __utac_acc__Specification14_spec__1_~tmp~11, __utac_acc__Specification14_spec__1_~tmp___0~4, __utac_acc__Specification14_spec__1_~tmp___1~3, __utac_acc__Specification14_spec__1_~tmp___2~1;havoc __utac_acc__Specification14_spec__1_~tmp~11;havoc __utac_acc__Specification14_spec__1_~tmp___0~4;havoc __utac_acc__Specification14_spec__1_~tmp___1~3;havoc __utac_acc__Specification14_spec__1_~tmp___2~1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret165, isExecutiveFloorCalling_~retValue_acc~25;havoc isExecutiveFloorCalling_~retValue_acc~25;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 627055#L998-65 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 627056#L1025-65 isExecutiveFloorCalling_#t~ret165 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25 := isExecutiveFloorCalling_#t~ret165;havoc isExecutiveFloorCalling_#t~ret165;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~25; 628476#L3154-3 __utac_acc__Specification14_spec__1_#t~ret20 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~1 := __utac_acc__Specification14_spec__1_#t~ret20;havoc __utac_acc__Specification14_spec__1_#t~ret20; 628477#L509 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~1); 628712#L509-1 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 628713#L2814 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_~tmp~27, timeShift_~tmp___0~12, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~12;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret91, stopRequestedAtCurrentFloor_#t~ret92, stopRequestedAtCurrentFloor_#t~ret93, stopRequestedAtCurrentFloor_#t~ret94, stopRequestedAtCurrentFloor_~retValue_acc~22, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~10;havoc stopRequestedAtCurrentFloor_~retValue_acc~22;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~10;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret165, isExecutiveFloorCalling_~retValue_acc~25;havoc isExecutiveFloorCalling_~retValue_acc~25;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 627022#L998-66 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 627023#L1025-66 isExecutiveFloorCalling_#t~ret165 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25 := isExecutiveFloorCalling_#t~ret165;havoc isExecutiveFloorCalling_#t~ret165;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~25; 660090#L3154-4 stopRequestedAtCurrentFloor_#t~ret91 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~25 := stopRequestedAtCurrentFloor_#t~ret91;havoc stopRequestedAtCurrentFloor_#t~ret91; 660088#L2539-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~25;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 647872#L1802-6 stopRequestedAtCurrentFloor_#t~ret92 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~10 := stopRequestedAtCurrentFloor_#t~ret92;havoc stopRequestedAtCurrentFloor_#t~ret92; 647873#L2543-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10);stopRequestedAtCurrentFloor_~retValue_acc~22 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~22; 660080#L2556-1 timeShift_#t~ret107 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret107;havoc timeShift_#t~ret107; 660078#L2691-2 assume !(0 != timeShift_~tmp___9~2); 660077#L2782-3 assume !(1 == ~doorState~0); 660075#L2782-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~21, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~6;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~21;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~6;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret165, isExecutiveFloorCalling_~retValue_acc~25;havoc isExecutiveFloorCalling_~retValue_acc~25;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 660073#L998-69 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 631036#L1025-69 isExecutiveFloorCalling_#t~ret165 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25 := isExecutiveFloorCalling_#t~ret165;havoc isExecutiveFloorCalling_#t~ret165;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~25; 628433#L3154-5 stopRequestedInDirection_#t~ret82 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret82;havoc stopRequestedInDirection_#t~ret82; 627892#L2394-2 assume 0 != stopRequestedInDirection_~tmp___0~7;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 627893#L1802-9 stopRequestedInDirection_#t~ret83 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~21 := stopRequestedInDirection_#t~ret83;havoc stopRequestedInDirection_#t~ret83;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~6 := (if stopRequestedInDirection_~tmp~21 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~18 := (if stopRequestedInDirection_~__cil_tmp8~6 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 660050#L2407-2 timeShift_#t~ret114 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret114;havoc timeShift_#t~ret114; 660051#L2790-2 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret85, continueInDirection_~dir, continueInDirection_~tmp~22;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~22;~currentHeading~0 := continueInDirection_~dir; 629789#L2451-3 assume !(1 == ~currentHeading~0); 629790#L2461-9 assume !(0 == ~currentFloorID~0); 629711#L2461-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 632539#L2467-7 assume { :end_inline_continueInDirection } true; 649555#L2799-5 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret20, __utac_acc__Specification14_spec__1_#t~ret21, __utac_acc__Specification14_spec__1_#t~ret22, __utac_acc__Specification14_spec__1_#t~ret23, __utac_acc__Specification14_spec__1_~tmp~11, __utac_acc__Specification14_spec__1_~tmp___0~4, __utac_acc__Specification14_spec__1_~tmp___1~3, __utac_acc__Specification14_spec__1_~tmp___2~1;havoc __utac_acc__Specification14_spec__1_~tmp~11;havoc __utac_acc__Specification14_spec__1_~tmp___0~4;havoc __utac_acc__Specification14_spec__1_~tmp___1~3;havoc __utac_acc__Specification14_spec__1_~tmp___2~1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret165, isExecutiveFloorCalling_~retValue_acc~25;havoc isExecutiveFloorCalling_~retValue_acc~25;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 649556#L998-131 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 642253#L1025-131 isExecutiveFloorCalling_#t~ret165 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25 := isExecutiveFloorCalling_#t~ret165;havoc isExecutiveFloorCalling_#t~ret165;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~25; 649552#L3154-7 __utac_acc__Specification14_spec__1_#t~ret20 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~1 := __utac_acc__Specification14_spec__1_#t~ret20;havoc __utac_acc__Specification14_spec__1_#t~ret20; 649547#L509-2 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~1); 649545#L509-3 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 649540#L2814-1 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_~tmp~27, timeShift_~tmp___0~12, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~12;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret91, stopRequestedAtCurrentFloor_#t~ret92, stopRequestedAtCurrentFloor_#t~ret93, stopRequestedAtCurrentFloor_#t~ret94, stopRequestedAtCurrentFloor_~retValue_acc~22, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~10;havoc stopRequestedAtCurrentFloor_~retValue_acc~22;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~10;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret165, isExecutiveFloorCalling_~retValue_acc~25;havoc isExecutiveFloorCalling_~retValue_acc~25;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 649541#L998-132 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 631067#L1025-132 isExecutiveFloorCalling_#t~ret165 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25 := isExecutiveFloorCalling_#t~ret165;havoc isExecutiveFloorCalling_#t~ret165;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~25; 628446#L3154-8 stopRequestedAtCurrentFloor_#t~ret91 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~25 := stopRequestedAtCurrentFloor_#t~ret91;havoc stopRequestedAtCurrentFloor_#t~ret91; 624256#L2539-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~25;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 624258#L1802-12 stopRequestedAtCurrentFloor_#t~ret92 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~10 := stopRequestedAtCurrentFloor_#t~ret92;havoc stopRequestedAtCurrentFloor_#t~ret92; 647750#L2543-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10);stopRequestedAtCurrentFloor_~retValue_acc~22 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~22; 624201#L2556-2 timeShift_#t~ret107 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret107;havoc timeShift_#t~ret107; 665584#L2691-4 assume !(0 != timeShift_~tmp___9~2); 665583#L2782-6 assume !(1 == ~doorState~0); 665582#L2782-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~21, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~6;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~21;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~6;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret165, isExecutiveFloorCalling_~retValue_acc~25;havoc isExecutiveFloorCalling_~retValue_acc~25;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 627101#L998-135 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 627102#L1025-135 isExecutiveFloorCalling_#t~ret165 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25 := isExecutiveFloorCalling_#t~ret165;havoc isExecutiveFloorCalling_#t~ret165;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~25; 628412#L3154-9 stopRequestedInDirection_#t~ret82 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret82;havoc stopRequestedInDirection_#t~ret82; 627895#L2394-4 assume 0 != stopRequestedInDirection_~tmp___0~7;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 624753#L1802-15 stopRequestedInDirection_#t~ret83 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~21 := stopRequestedInDirection_#t~ret83;havoc stopRequestedInDirection_#t~ret83;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~6 := (if stopRequestedInDirection_~tmp~21 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~18 := (if stopRequestedInDirection_~__cil_tmp8~6 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 624754#L2407-4 timeShift_#t~ret114 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret114;havoc timeShift_#t~ret114; 627191#L2790-4 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret85, continueInDirection_~dir, continueInDirection_~tmp~22;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~22;~currentHeading~0 := continueInDirection_~dir; 630989#L2451-6 assume !(1 == ~currentHeading~0); 665285#L2461-18 assume !(0 == ~currentFloorID~0); 665278#L2461-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 665276#L2467-13 assume { :end_inline_continueInDirection } true; 665275#L2799-8 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret20, __utac_acc__Specification14_spec__1_#t~ret21, __utac_acc__Specification14_spec__1_#t~ret22, __utac_acc__Specification14_spec__1_#t~ret23, __utac_acc__Specification14_spec__1_~tmp~11, __utac_acc__Specification14_spec__1_~tmp___0~4, __utac_acc__Specification14_spec__1_~tmp___1~3, __utac_acc__Specification14_spec__1_~tmp___2~1;havoc __utac_acc__Specification14_spec__1_~tmp~11;havoc __utac_acc__Specification14_spec__1_~tmp___0~4;havoc __utac_acc__Specification14_spec__1_~tmp___1~3;havoc __utac_acc__Specification14_spec__1_~tmp___2~1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret165, isExecutiveFloorCalling_~retValue_acc~25;havoc isExecutiveFloorCalling_~retValue_acc~25;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 626847#L998-197 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 626848#L1025-197 isExecutiveFloorCalling_#t~ret165 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25 := isExecutiveFloorCalling_#t~ret165;havoc isExecutiveFloorCalling_#t~ret165;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~25; 628408#L3154-11 __utac_acc__Specification14_spec__1_#t~ret20 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~1 := __utac_acc__Specification14_spec__1_#t~ret20;havoc __utac_acc__Specification14_spec__1_#t~ret20; 628409#L509-4 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~1); 678410#L509-5 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 678409#L2814-2 assume { :end_inline_timeShift } true; 678408#L171 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~28;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~28; 678407#L3211-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~28 := 4;getOrigin_#res := getOrigin_~retValue_acc~28; 678401#L3236-1 bobCall_#t~ret1 := getOrigin_#res;assume { :end_inline_getOrigin } true;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 678400#L1269-1 assume 0 == initPersonOnFloor_~floor; 678372#L1270-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 660997#L1377-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 660998#L1061-2 assume !(0 == callOnFloor_~floorID); 678363#L1064-2 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 682051#L1073-5 assume { :end_inline_callOnFloor } true; 682050#L1413-1 assume { :end_inline_initPersonOnFloor } true; 678356#L103 assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret7, cleanup_#t~ret8, cleanup_~i~0, cleanup_~tmp~6, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~0;havoc cleanup_~i~0;havoc cleanup_~tmp~6;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~0;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_~tmp~27, timeShift_~tmp___0~12, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~12;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret91, stopRequestedAtCurrentFloor_#t~ret92, stopRequestedAtCurrentFloor_#t~ret93, stopRequestedAtCurrentFloor_#t~ret94, stopRequestedAtCurrentFloor_~retValue_acc~22, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~10;havoc stopRequestedAtCurrentFloor_~retValue_acc~22;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~10;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret165, isExecutiveFloorCalling_~retValue_acc~25;havoc isExecutiveFloorCalling_~retValue_acc~25;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 678357#L998-198 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 633648#L1025-198 isExecutiveFloorCalling_#t~ret165 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25 := isExecutiveFloorCalling_#t~ret165;havoc isExecutiveFloorCalling_#t~ret165;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~25; 678354#L3154-12 stopRequestedAtCurrentFloor_#t~ret91 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~25 := stopRequestedAtCurrentFloor_#t~ret91;havoc stopRequestedAtCurrentFloor_#t~ret91; 678349#L2539-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~25;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 678351#L1802-18 stopRequestedAtCurrentFloor_#t~ret92 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~10 := stopRequestedAtCurrentFloor_#t~ret92;havoc stopRequestedAtCurrentFloor_#t~ret92; 678344#L2543-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10);stopRequestedAtCurrentFloor_~retValue_acc~22 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~22; 678346#L2556-3 timeShift_#t~ret107 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret107;havoc timeShift_#t~ret107; 682324#L2691-6 assume !(0 != timeShift_~tmp___9~2); 682322#L2782-9 assume !(1 == ~doorState~0); 631383#L2782-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~21, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~6;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~21;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~6;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret165, isExecutiveFloorCalling_~retValue_acc~25;havoc isExecutiveFloorCalling_~retValue_acc~25;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 631384#L998-201 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 629131#L1025-201 isExecutiveFloorCalling_#t~ret165 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25 := isExecutiveFloorCalling_#t~ret165;havoc isExecutiveFloorCalling_#t~ret165;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~25; 629132#L3154-13 stopRequestedInDirection_#t~ret82 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret82;havoc stopRequestedInDirection_#t~ret82; 627870#L2394-6 assume 0 != stopRequestedInDirection_~tmp___0~7;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 627871#L1802-21 stopRequestedInDirection_#t~ret83 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~21 := stopRequestedInDirection_#t~ret83;havoc stopRequestedInDirection_#t~ret83;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~6 := (if stopRequestedInDirection_~tmp~21 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~18 := (if stopRequestedInDirection_~__cil_tmp8~6 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 677768#L2407-6 timeShift_#t~ret114 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret114;havoc timeShift_#t~ret114; 677763#L2790-6 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret85, continueInDirection_~dir, continueInDirection_~tmp~22;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~22;~currentHeading~0 := continueInDirection_~dir; 677764#L2451-9 assume !(1 == ~currentHeading~0); 632513#L2461-27 assume !(0 == ~currentFloorID~0); 629543#L2461-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 632423#L2467-19 assume { :end_inline_continueInDirection } true; 632408#L2799-11 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret20, __utac_acc__Specification14_spec__1_#t~ret21, __utac_acc__Specification14_spec__1_#t~ret22, __utac_acc__Specification14_spec__1_#t~ret23, __utac_acc__Specification14_spec__1_~tmp~11, __utac_acc__Specification14_spec__1_~tmp___0~4, __utac_acc__Specification14_spec__1_~tmp___1~3, __utac_acc__Specification14_spec__1_~tmp___2~1;havoc __utac_acc__Specification14_spec__1_~tmp~11;havoc __utac_acc__Specification14_spec__1_~tmp___0~4;havoc __utac_acc__Specification14_spec__1_~tmp___1~3;havoc __utac_acc__Specification14_spec__1_~tmp___2~1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret165, isExecutiveFloorCalling_~retValue_acc~25;havoc isExecutiveFloorCalling_~retValue_acc~25;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 625596#L998-263 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 625597#L1025-263 isExecutiveFloorCalling_#t~ret165 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25 := isExecutiveFloorCalling_#t~ret165;havoc isExecutiveFloorCalling_#t~ret165;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~25; 628377#L3154-15 __utac_acc__Specification14_spec__1_#t~ret20 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~1 := __utac_acc__Specification14_spec__1_#t~ret20;havoc __utac_acc__Specification14_spec__1_#t~ret20; 628378#L509-6 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~1); 628698#L509-7 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 628699#L2814-3 assume { :end_inline_timeShift } true;cleanup_~i~0 := 0; 677753#L188-3 [2018-11-18 15:14:00,846 INFO L796 eck$LassoCheckResult]: Loop: 677753#L188-3 assume true; 677754#L188-1 assume !false; 671425#L189 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 671426#L192 assume cleanup_~i~0 < cleanup_~__cil_tmp4~0;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~8;havoc isBlocked_~retValue_acc~8;isBlocked_~retValue_acc~8 := 0;isBlocked_#res := isBlocked_~retValue_acc~8; 671417#L1649 cleanup_#t~ret7 := isBlocked_#res;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0 := cleanup_#t~ret7;havoc cleanup_#t~ret7; 671418#L196 assume 1 != cleanup_~tmp___0~0; 671413#L196-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res;havoc isIdle_#t~ret66, isIdle_~retValue_acc~15, isIdle_~tmp~18;havoc isIdle_~retValue_acc~15;havoc isIdle_~tmp~18;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret61, anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_#t~ret64, anyStopRequested_#t~ret65, anyStopRequested_~retValue_acc~14, anyStopRequested_~tmp~17, anyStopRequested_~tmp___0~5, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~2, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~14;havoc anyStopRequested_~tmp~17;havoc anyStopRequested_~tmp___0~5;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~2;havoc anyStopRequested_~tmp___3~0;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 671414#L998-264 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 628787#L1025-264 anyStopRequested_#t~ret61 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret61;havoc anyStopRequested_#t~ret61; 628788#L1910 assume !(0 != anyStopRequested_~tmp___3~0); 702646#L1914 assume 0 != ~floorButtons_0~0;anyStopRequested_~retValue_acc~14 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~14; 632138#L1974 isIdle_#t~ret66 := anyStopRequested_#res;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~18 := isIdle_#t~ret66;havoc isIdle_#t~ret66;isIdle_~retValue_acc~15 := (if 0 == isIdle_~tmp~18 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~15; 624495#L1987 cleanup_#t~ret8 := isIdle_#res;assume { :end_inline_isIdle } true;cleanup_~tmp~6 := cleanup_#t~ret8;havoc cleanup_#t~ret8; 624496#L208 assume !(0 != cleanup_~tmp~6);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_~tmp~27, timeShift_~tmp___0~12, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~12;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret91, stopRequestedAtCurrentFloor_#t~ret92, stopRequestedAtCurrentFloor_#t~ret93, stopRequestedAtCurrentFloor_#t~ret94, stopRequestedAtCurrentFloor_~retValue_acc~22, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~10;havoc stopRequestedAtCurrentFloor_~retValue_acc~22;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~10;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret165, isExecutiveFloorCalling_~retValue_acc~25;havoc isExecutiveFloorCalling_~retValue_acc~25;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 626427#L998-269 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 626428#L1025-269 isExecutiveFloorCalling_#t~ret165 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25 := isExecutiveFloorCalling_#t~ret165;havoc isExecutiveFloorCalling_#t~ret165;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~25; 628372#L3154-16 stopRequestedAtCurrentFloor_#t~ret91 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~25 := stopRequestedAtCurrentFloor_#t~ret91;havoc stopRequestedAtCurrentFloor_#t~ret91; 624264#L2539-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~25;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 624266#L1802-24 stopRequestedAtCurrentFloor_#t~ret92 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~10 := stopRequestedAtCurrentFloor_#t~ret92;havoc stopRequestedAtCurrentFloor_#t~ret92; 706663#L2543-4 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10);stopRequestedAtCurrentFloor_~retValue_acc~22 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~22; 624203#L2556-4 timeShift_#t~ret107 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret107;havoc timeShift_#t~ret107; 708324#L2691-8 assume !(0 != timeShift_~tmp___9~2); 708323#L2782-12 assume !(1 == ~doorState~0); 631392#L2782-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~21, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~6;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~21;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~6;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret165, isExecutiveFloorCalling_~retValue_acc~25;havoc isExecutiveFloorCalling_~retValue_acc~25;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 631393#L998-272 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 628772#L1025-272 isExecutiveFloorCalling_#t~ret165 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25 := isExecutiveFloorCalling_#t~ret165;havoc isExecutiveFloorCalling_#t~ret165;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~25; 628395#L3154-17 stopRequestedInDirection_#t~ret82 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret82;havoc stopRequestedInDirection_#t~ret82; 628396#L2394-8 assume 0 != stopRequestedInDirection_~tmp___0~7;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 624735#L1802-27 stopRequestedInDirection_#t~ret83 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~21 := stopRequestedInDirection_#t~ret83;havoc stopRequestedInDirection_#t~ret83;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~6 := (if stopRequestedInDirection_~tmp~21 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~18 := (if stopRequestedInDirection_~__cil_tmp8~6 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 624736#L2407-8 timeShift_#t~ret114 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret114;havoc timeShift_#t~ret114; 627195#L2790-8 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret85, continueInDirection_~dir, continueInDirection_~tmp~22;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~22;~currentHeading~0 := continueInDirection_~dir; 629765#L2451-12 assume !(1 == ~currentHeading~0); 629766#L2461-36 assume !(0 == ~currentFloorID~0); 629499#L2461-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 632499#L2467-25 assume { :end_inline_continueInDirection } true; 628700#L2799-14 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret20, __utac_acc__Specification14_spec__1_#t~ret21, __utac_acc__Specification14_spec__1_#t~ret22, __utac_acc__Specification14_spec__1_#t~ret23, __utac_acc__Specification14_spec__1_~tmp~11, __utac_acc__Specification14_spec__1_~tmp___0~4, __utac_acc__Specification14_spec__1_~tmp___1~3, __utac_acc__Specification14_spec__1_~tmp___2~1;havoc __utac_acc__Specification14_spec__1_~tmp~11;havoc __utac_acc__Specification14_spec__1_~tmp___0~4;havoc __utac_acc__Specification14_spec__1_~tmp___1~3;havoc __utac_acc__Specification14_spec__1_~tmp___2~1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret165, isExecutiveFloorCalling_~retValue_acc~25;havoc isExecutiveFloorCalling_~retValue_acc~25;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 628701#L998-334 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 628597#L1025-334 isExecutiveFloorCalling_#t~ret165 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25 := isExecutiveFloorCalling_#t~ret165;havoc isExecutiveFloorCalling_#t~ret165;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~25; 628598#L3154-19 __utac_acc__Specification14_spec__1_#t~ret20 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~1 := __utac_acc__Specification14_spec__1_#t~ret20;havoc __utac_acc__Specification14_spec__1_#t~ret20; 687010#L509-8 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~1); 687009#L509-9 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 702656#L2814-4 assume { :end_inline_timeShift } true;cleanup_~i~0 := 1 + cleanup_~i~0; 677753#L188-3 [2018-11-18 15:14:00,850 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 15:14:00,850 INFO L82 PathProgramCache]: Analyzing trace with hash 617547585, now seen corresponding path program 1 times [2018-11-18 15:14:00,850 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 15:14:00,850 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 15:14:00,851 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 15:14:00,851 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 15:14:00,851 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 15:14:00,864 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 15:14:01,609 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 15:14:01,610 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 15:14:01,610 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-18 15:14:01,610 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-18 15:14:01,610 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 15:14:01,610 INFO L82 PathProgramCache]: Analyzing trace with hash -1312909149, now seen corresponding path program 1 times [2018-11-18 15:14:01,610 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 15:14:01,610 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 15:14:01,611 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 15:14:01,611 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 15:14:01,611 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 15:14:01,616 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 15:14:01,675 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 15:14:01,676 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 15:14:01,676 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2018-11-18 15:14:01,676 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-18 15:14:01,676 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2018-11-18 15:14:01,676 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=43, Unknown=0, NotChecked=0, Total=56 [2018-11-18 15:14:01,676 INFO L87 Difference]: Start difference. First operand 89647 states and 167000 transitions. cyclomatic complexity: 77355 Second operand 8 states. [2018-11-18 15:14:22,658 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 15:14:22,658 INFO L93 Difference]: Finished difference Result 555202 states and 1030907 transitions. [2018-11-18 15:14:22,659 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 41 states. [2018-11-18 15:14:22,659 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 555202 states and 1030907 transitions. [2018-11-18 15:14:24,114 INFO L131 ngComponentsAnalysis]: Automaton has 6 accepting balls. 153400 [2018-11-18 15:14:30,259 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 555202 states to 555202 states and 1030907 transitions. [2018-11-18 15:14:30,260 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 555202 [2018-11-18 15:14:30,497 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 555202 [2018-11-18 15:14:30,497 INFO L73 IsDeterministic]: Start isDeterministic. Operand 555202 states and 1030907 transitions. [2018-11-18 15:14:30,673 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-18 15:14:30,673 INFO L705 BuchiCegarLoop]: Abstraction has 555202 states and 1030907 transitions. [2018-11-18 15:14:30,866 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 555202 states and 1030907 transitions. [2018-11-18 15:14:32,333 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 555202 to 88941. [2018-11-18 15:14:32,333 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 88941 states. [2018-11-18 15:14:32,417 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 88941 states to 88941 states and 165671 transitions. [2018-11-18 15:14:32,417 INFO L728 BuchiCegarLoop]: Abstraction has 88941 states and 165671 transitions. [2018-11-18 15:14:32,417 INFO L608 BuchiCegarLoop]: Abstraction has 88941 states and 165671 transitions. [2018-11-18 15:14:32,417 INFO L442 BuchiCegarLoop]: ======== Iteration 5============ [2018-11-18 15:14:32,417 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 88941 states and 165671 transitions. [2018-11-18 15:14:32,566 INFO L131 ngComponentsAnalysis]: Automaton has 6 accepting balls. 20012 [2018-11-18 15:14:32,566 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-18 15:14:32,566 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-18 15:14:32,569 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 15:14:32,569 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 15:14:32,569 INFO L794 eck$LassoCheckResult]: Stem: 1270250#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];call #t~string42.base, #t~string42.offset := #Ultimate.alloc(30);call #t~string43.base, #t~string43.offset := #Ultimate.alloc(9);call #t~string44.base, #t~string44.offset := #Ultimate.alloc(21);call #t~string45.base, #t~string45.offset := #Ultimate.alloc(30);call #t~string46.base, #t~string46.offset := #Ultimate.alloc(9);call #t~string47.base, #t~string47.offset := #Ultimate.alloc(21);call #t~string51.base, #t~string51.offset := #Ultimate.alloc(30);call #t~string52.base, #t~string52.offset := #Ultimate.alloc(9);call #t~string53.base, #t~string53.offset := #Ultimate.alloc(25);call #t~string54.base, #t~string54.offset := #Ultimate.alloc(30);call #t~string55.base, #t~string55.offset := #Ultimate.alloc(9);call #t~string56.base, #t~string56.offset := #Ultimate.alloc(25);call #t~string118.base, #t~string118.offset := #Ultimate.alloc(10);call #t~string120.base, #t~string120.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string120.base,#t~string120.offset := 91];#memory_int := #memory_int[#t~string120.base,1 + #t~string120.offset := 95];#memory_int := #memory_int[#t~string120.base,2 + #t~string120.offset := 93];#memory_int := #memory_int[#t~string120.base,3 + #t~string120.offset := 0];call #t~string122.base, #t~string122.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string122.base,#t~string122.offset := 91];#memory_int := #memory_int[#t~string122.base,1 + #t~string122.offset := 93];#memory_int := #memory_int[#t~string122.base,2 + #t~string122.offset := 32];#memory_int := #memory_int[#t~string122.base,3 + #t~string122.offset := 0];call #t~string124.base, #t~string124.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string124.base,#t~string124.offset := 32];#memory_int := #memory_int[#t~string124.base,1 + #t~string124.offset := 97];#memory_int := #memory_int[#t~string124.base,2 + #t~string124.offset := 116];#memory_int := #memory_int[#t~string124.base,3 + #t~string124.offset := 32];#memory_int := #memory_int[#t~string124.base,4 + #t~string124.offset := 0];call #t~string126.base, #t~string126.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string126.base,#t~string126.offset := 37];#memory_int := #memory_int[#t~string126.base,1 + #t~string126.offset := 105];#memory_int := #memory_int[#t~string126.base,2 + #t~string126.offset := 0];call #t~string128.base, #t~string128.offset := #Ultimate.alloc(10);call #t~string130.base, #t~string130.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string130.base,#t~string130.offset := 117];#memory_int := #memory_int[#t~string130.base,1 + #t~string130.offset := 112];#memory_int := #memory_int[#t~string130.base,2 + #t~string130.offset := 0];call #t~string132.base, #t~string132.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string132.base,#t~string132.offset := 100];#memory_int := #memory_int[#t~string132.base,1 + #t~string132.offset := 111];#memory_int := #memory_int[#t~string132.base,2 + #t~string132.offset := 119];#memory_int := #memory_int[#t~string132.base,3 + #t~string132.offset := 110];#memory_int := #memory_int[#t~string132.base,4 + #t~string132.offset := 0];call #t~string134.base, #t~string134.offset := #Ultimate.alloc(7);#memory_int := #memory_int[#t~string134.base,#t~string134.offset := 32];#memory_int := #memory_int[#t~string134.base,1 + #t~string134.offset := 73];#memory_int := #memory_int[#t~string134.base,2 + #t~string134.offset := 76];#memory_int := #memory_int[#t~string134.base,3 + #t~string134.offset := 95];#memory_int := #memory_int[#t~string134.base,4 + #t~string134.offset := 112];#memory_int := #memory_int[#t~string134.base,5 + #t~string134.offset := 58];#memory_int := #memory_int[#t~string134.base,6 + #t~string134.offset := 0];call #t~string136.base, #t~string136.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string136.base,#t~string136.offset := 32];#memory_int := #memory_int[#t~string136.base,1 + #t~string136.offset := 37];#memory_int := #memory_int[#t~string136.base,2 + #t~string136.offset := 105];#memory_int := #memory_int[#t~string136.base,3 + #t~string136.offset := 0];call #t~string138.base, #t~string138.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string138.base,#t~string138.offset := 32];#memory_int := #memory_int[#t~string138.base,1 + #t~string138.offset := 37];#memory_int := #memory_int[#t~string138.base,2 + #t~string138.offset := 105];#memory_int := #memory_int[#t~string138.base,3 + #t~string138.offset := 0];call #t~string140.base, #t~string140.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string140.base,#t~string140.offset := 32];#memory_int := #memory_int[#t~string140.base,1 + #t~string140.offset := 37];#memory_int := #memory_int[#t~string140.base,2 + #t~string140.offset := 105];#memory_int := #memory_int[#t~string140.base,3 + #t~string140.offset := 0];call #t~string142.base, #t~string142.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string142.base,#t~string142.offset := 32];#memory_int := #memory_int[#t~string142.base,1 + #t~string142.offset := 37];#memory_int := #memory_int[#t~string142.base,2 + #t~string142.offset := 105];#memory_int := #memory_int[#t~string142.base,3 + #t~string142.offset := 0];call #t~string144.base, #t~string144.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string144.base,#t~string144.offset := 32];#memory_int := #memory_int[#t~string144.base,1 + #t~string144.offset := 37];#memory_int := #memory_int[#t~string144.base,2 + #t~string144.offset := 105];#memory_int := #memory_int[#t~string144.base,3 + #t~string144.offset := 0];call #t~string146.base, #t~string146.offset := #Ultimate.alloc(6);#memory_int := #memory_int[#t~string146.base,#t~string146.offset := 32];#memory_int := #memory_int[#t~string146.base,1 + #t~string146.offset := 70];#memory_int := #memory_int[#t~string146.base,2 + #t~string146.offset := 95];#memory_int := #memory_int[#t~string146.base,3 + #t~string146.offset := 112];#memory_int := #memory_int[#t~string146.base,4 + #t~string146.offset := 58];#memory_int := #memory_int[#t~string146.base,5 + #t~string146.offset := 0];call #t~string149.base, #t~string149.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string149.base,#t~string149.offset := 32];#memory_int := #memory_int[#t~string149.base,1 + #t~string149.offset := 37];#memory_int := #memory_int[#t~string149.base,2 + #t~string149.offset := 105];#memory_int := #memory_int[#t~string149.base,3 + #t~string149.offset := 0];call #t~string152.base, #t~string152.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string152.base,#t~string152.offset := 32];#memory_int := #memory_int[#t~string152.base,1 + #t~string152.offset := 37];#memory_int := #memory_int[#t~string152.base,2 + #t~string152.offset := 105];#memory_int := #memory_int[#t~string152.base,3 + #t~string152.offset := 0];call #t~string155.base, #t~string155.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string155.base,#t~string155.offset := 32];#memory_int := #memory_int[#t~string155.base,1 + #t~string155.offset := 37];#memory_int := #memory_int[#t~string155.base,2 + #t~string155.offset := 105];#memory_int := #memory_int[#t~string155.base,3 + #t~string155.offset := 0];call #t~string158.base, #t~string158.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string158.base,#t~string158.offset := 32];#memory_int := #memory_int[#t~string158.base,1 + #t~string158.offset := 37];#memory_int := #memory_int[#t~string158.base,2 + #t~string158.offset := 105];#memory_int := #memory_int[#t~string158.base,3 + #t~string158.offset := 0];call #t~string161.base, #t~string161.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string161.base,#t~string161.offset := 32];#memory_int := #memory_int[#t~string161.base,1 + #t~string161.offset := 37];#memory_int := #memory_int[#t~string161.base,2 + #t~string161.offset := 105];#memory_int := #memory_int[#t~string161.base,3 + #t~string161.offset := 0];call #t~string163.base, #t~string163.offset := #Ultimate.alloc(2);#memory_int := #memory_int[#t~string163.base,#t~string163.offset := 10];#memory_int := #memory_int[#t~string163.base,1 + #t~string163.offset := 0];~cleanupTimeShifts~0 := 12;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 1270251#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res;havoc main_#t~ret13, main_~retValue_acc~1, main_~tmp~8;havoc main_~retValue_acc~1;havoc main_~tmp~8;assume { :begin_inline_select_helpers } true; 1274807#L3308 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1274808#L3301 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res;havoc valid_product_~retValue_acc~31;havoc valid_product_~retValue_acc~31;valid_product_~retValue_acc~31 := 1;valid_product_#res := valid_product_~retValue_acc~31; 1275303#L3316 main_#t~ret13 := valid_product_#res;assume { :end_inline_valid_product } true;main_~tmp~8 := main_#t~ret13;havoc main_#t~ret13; 1275673#L385 assume 0 != main_~tmp~8;assume { :begin_inline_setup } true; 1276557#L358 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret6, bigMacCall_~tmp~5;havoc bigMacCall_~tmp~5;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~28;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~28; 1269594#L3211 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~28 := 4;getOrigin_#res := getOrigin_~retValue_acc~28; 1268121#L3236 bigMacCall_#t~ret6 := getOrigin_#res;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5 := bigMacCall_#t~ret6;havoc bigMacCall_#t~ret6;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~5;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 1268122#L1269 assume 0 == initPersonOnFloor_~floor; 1276401#L1270 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 1267629#L1377-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 1275646#L1061 assume !(0 == callOnFloor_~floorID); 1276609#L1064 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 1276945#L1073-2 assume { :end_inline_callOnFloor } true; 1276613#L1413 assume { :end_inline_initPersonOnFloor } true; 1276614#L158 assume { :end_inline_bigMacCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_~tmp~27, timeShift_~tmp___0~12, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~12;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret91, stopRequestedAtCurrentFloor_#t~ret92, stopRequestedAtCurrentFloor_#t~ret93, stopRequestedAtCurrentFloor_#t~ret94, stopRequestedAtCurrentFloor_~retValue_acc~22, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~10;havoc stopRequestedAtCurrentFloor_~retValue_acc~22;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~10;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret165, isExecutiveFloorCalling_~retValue_acc~25;havoc isExecutiveFloorCalling_~retValue_acc~25;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 1272002#L998 assume !(0 == isFloorCalling_~floorID); 1271947#L1002 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 1270538#L1025 isExecutiveFloorCalling_#t~ret165 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25 := isExecutiveFloorCalling_#t~ret165;havoc isExecutiveFloorCalling_#t~ret165;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~25; 1277153#L3154 stopRequestedAtCurrentFloor_#t~ret91 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~25 := stopRequestedAtCurrentFloor_#t~ret91;havoc stopRequestedAtCurrentFloor_#t~ret91; 1277154#L2539 assume 0 != stopRequestedAtCurrentFloor_~tmp~25;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 1269583#L1802 stopRequestedAtCurrentFloor_#t~ret92 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~10 := stopRequestedAtCurrentFloor_#t~ret92;havoc stopRequestedAtCurrentFloor_#t~ret92; 1269584#L2543 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10);stopRequestedAtCurrentFloor_~retValue_acc~22 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~22; 1280931#L2556 timeShift_#t~ret107 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret107;havoc timeShift_#t~ret107; 1280929#L2691 assume !(0 != timeShift_~tmp___9~2); 1280927#L2782 assume !(1 == ~doorState~0); 1280740#L2782-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~21, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~6;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~21;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~6;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret165, isExecutiveFloorCalling_~retValue_acc~25;havoc isExecutiveFloorCalling_~retValue_acc~25;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 1277163#L998-3 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 1271995#L1025-3 isExecutiveFloorCalling_#t~ret165 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25 := isExecutiveFloorCalling_#t~ret165;havoc isExecutiveFloorCalling_#t~ret165;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~25; 1273127#L3154-1 stopRequestedInDirection_#t~ret82 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret82;havoc stopRequestedInDirection_#t~ret82; 1273128#L2394 assume 0 != stopRequestedInDirection_~tmp___0~7;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 1269681#L1802-3 stopRequestedInDirection_#t~ret83 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~21 := stopRequestedInDirection_#t~ret83;havoc stopRequestedInDirection_#t~ret83;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~6 := (if stopRequestedInDirection_~tmp~21 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~18 := (if stopRequestedInDirection_~__cil_tmp8~6 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 1269682#L2407 timeShift_#t~ret114 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret114;havoc timeShift_#t~ret114; 1311479#L2790 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret85, continueInDirection_~dir, continueInDirection_~tmp~22;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~22;~currentHeading~0 := continueInDirection_~dir; 1311476#L2451 assume !(1 == ~currentHeading~0); 1311473#L2461 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1274322#L2461-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1311467#L2467-1 assume { :end_inline_continueInDirection } true; 1275959#L2799-2 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret20, __utac_acc__Specification14_spec__1_#t~ret21, __utac_acc__Specification14_spec__1_#t~ret22, __utac_acc__Specification14_spec__1_#t~ret23, __utac_acc__Specification14_spec__1_~tmp~11, __utac_acc__Specification14_spec__1_~tmp___0~4, __utac_acc__Specification14_spec__1_~tmp___1~3, __utac_acc__Specification14_spec__1_~tmp___2~1;havoc __utac_acc__Specification14_spec__1_~tmp~11;havoc __utac_acc__Specification14_spec__1_~tmp___0~4;havoc __utac_acc__Specification14_spec__1_~tmp___1~3;havoc __utac_acc__Specification14_spec__1_~tmp___2~1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret165, isExecutiveFloorCalling_~retValue_acc~25;havoc isExecutiveFloorCalling_~retValue_acc~25;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 1306477#L998-65 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 1279078#L1025-65 isExecutiveFloorCalling_#t~ret165 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25 := isExecutiveFloorCalling_#t~ret165;havoc isExecutiveFloorCalling_#t~ret165;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~25; 1306475#L3154-3 __utac_acc__Specification14_spec__1_#t~ret20 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~1 := __utac_acc__Specification14_spec__1_#t~ret20;havoc __utac_acc__Specification14_spec__1_#t~ret20; 1306463#L509 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~1); 1306459#L509-1 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 1306455#L2814 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_~tmp~27, timeShift_~tmp___0~12, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~12;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret91, stopRequestedAtCurrentFloor_#t~ret92, stopRequestedAtCurrentFloor_#t~ret93, stopRequestedAtCurrentFloor_#t~ret94, stopRequestedAtCurrentFloor_~retValue_acc~22, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~10;havoc stopRequestedAtCurrentFloor_~retValue_acc~22;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~10;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret165, isExecutiveFloorCalling_~retValue_acc~25;havoc isExecutiveFloorCalling_~retValue_acc~25;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 1271858#L998-66 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 1271859#L1025-66 isExecutiveFloorCalling_#t~ret165 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25 := isExecutiveFloorCalling_#t~ret165;havoc isExecutiveFloorCalling_#t~ret165;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~25; 1306454#L3154-4 stopRequestedAtCurrentFloor_#t~ret91 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~25 := stopRequestedAtCurrentFloor_#t~ret91;havoc stopRequestedAtCurrentFloor_#t~ret91; 1269229#L2539-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~25);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret88, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret89, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret90, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~21, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~24, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~9, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~3, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~21;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~24;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~9;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~3;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~3 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4 := (if stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~3 < 0 && 0 != stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~3 % 3 then 1 + stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~3 / 3 else stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~3 / 3); 1269230#L2513-3 assume ~weight~0 > stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 1269670#L1802-8 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret88 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~24 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret88;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret88;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~24;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~11;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~11; 1269671#L1819-6 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~11 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~11; 1267695#L1840-6 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret89 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~9 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret89;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret89;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~21 := (if 1 == stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~9 then 1 else 0);stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~21; 1268776#L2524-3 stopRequestedAtCurrentFloor_#t~ret94 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;stopRequestedAtCurrentFloor_~retValue_acc~22 := stopRequestedAtCurrentFloor_#t~ret94;havoc stopRequestedAtCurrentFloor_#t~ret94;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~22; 1269710#L2556-1 timeShift_#t~ret107 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret107;havoc timeShift_#t~ret107; 1269301#L2691-2 assume !(0 != timeShift_~tmp___9~2); 1269302#L2782-3 assume !(1 == ~doorState~0); 1275810#L2782-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~21, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~6;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~21;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~6;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret165, isExecutiveFloorCalling_~retValue_acc~25;havoc isExecutiveFloorCalling_~retValue_acc~25;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 1271869#L998-69 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 1271870#L1025-69 isExecutiveFloorCalling_#t~ret165 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25 := isExecutiveFloorCalling_#t~ret165;havoc isExecutiveFloorCalling_#t~ret165;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~25; 1309150#L3154-5 stopRequestedInDirection_#t~ret82 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret82;havoc stopRequestedInDirection_#t~ret82; 1309148#L2394-2 assume 0 != stopRequestedInDirection_~tmp___0~7;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 1309147#L1802-9 stopRequestedInDirection_#t~ret83 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~21 := stopRequestedInDirection_#t~ret83;havoc stopRequestedInDirection_#t~ret83;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~6 := (if stopRequestedInDirection_~tmp~21 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~18 := (if stopRequestedInDirection_~__cil_tmp8~6 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 1309128#L2407-2 timeShift_#t~ret114 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret114;havoc timeShift_#t~ret114; 1309123#L2790-2 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret85, continueInDirection_~dir, continueInDirection_~tmp~22;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~22;~currentHeading~0 := continueInDirection_~dir; 1309116#L2451-3 assume !(1 == ~currentHeading~0); 1309110#L2461-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1309109#L2461-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1318704#L2467-7 assume { :end_inline_continueInDirection } true; 1273343#L2799-5 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret20, __utac_acc__Specification14_spec__1_#t~ret21, __utac_acc__Specification14_spec__1_#t~ret22, __utac_acc__Specification14_spec__1_#t~ret23, __utac_acc__Specification14_spec__1_~tmp~11, __utac_acc__Specification14_spec__1_~tmp___0~4, __utac_acc__Specification14_spec__1_~tmp___1~3, __utac_acc__Specification14_spec__1_~tmp___2~1;havoc __utac_acc__Specification14_spec__1_~tmp~11;havoc __utac_acc__Specification14_spec__1_~tmp___0~4;havoc __utac_acc__Specification14_spec__1_~tmp___1~3;havoc __utac_acc__Specification14_spec__1_~tmp___2~1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret165, isExecutiveFloorCalling_~retValue_acc~25;havoc isExecutiveFloorCalling_~retValue_acc~25;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 1271919#L998-131 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 1271920#L1025-131 isExecutiveFloorCalling_#t~ret165 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25 := isExecutiveFloorCalling_#t~ret165;havoc isExecutiveFloorCalling_#t~ret165;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~25; 1273102#L3154-7 __utac_acc__Specification14_spec__1_#t~ret20 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~1 := __utac_acc__Specification14_spec__1_#t~ret20;havoc __utac_acc__Specification14_spec__1_#t~ret20; 1273103#L509-2 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~1); 1273335#L509-3 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 1273336#L2814-1 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_~tmp~27, timeShift_~tmp___0~12, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~12;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret91, stopRequestedAtCurrentFloor_#t~ret92, stopRequestedAtCurrentFloor_#t~ret93, stopRequestedAtCurrentFloor_#t~ret94, stopRequestedAtCurrentFloor_~retValue_acc~22, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~10;havoc stopRequestedAtCurrentFloor_~retValue_acc~22;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~10;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret165, isExecutiveFloorCalling_~retValue_acc~25;havoc isExecutiveFloorCalling_~retValue_acc~25;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 1276870#L998-132 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 1277172#L1025-132 isExecutiveFloorCalling_#t~ret165 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25 := isExecutiveFloorCalling_#t~ret165;havoc isExecutiveFloorCalling_#t~ret165;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~25; 1301349#L3154-8 stopRequestedAtCurrentFloor_#t~ret91 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~25 := stopRequestedAtCurrentFloor_#t~ret91;havoc stopRequestedAtCurrentFloor_#t~ret91; 1269177#L2539-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~25);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret88, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret89, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret90, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~21, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~24, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~9, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~3, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~21;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~24;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~9;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~3;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~3 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4 := (if stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~3 < 0 && 0 != stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~3 % 3 then 1 + stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~3 / 3 else stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~3 / 3); 1269178#L2513-5 assume ~weight~0 > stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 1269511#L1802-14 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret88 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~24 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret88;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret88;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~24;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~11;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~11; 1269663#L1819-10 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~11 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~11; 1267665#L1840-10 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret89 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~9 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret89;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret89;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~21 := (if 1 == stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~9 then 1 else 0);stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~21; 1268732#L2524-5 stopRequestedAtCurrentFloor_#t~ret94 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;stopRequestedAtCurrentFloor_~retValue_acc~22 := stopRequestedAtCurrentFloor_#t~ret94;havoc stopRequestedAtCurrentFloor_#t~ret94;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~22; 1269711#L2556-2 timeShift_#t~ret107 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret107;havoc timeShift_#t~ret107; 1269304#L2691-4 assume !(0 != timeShift_~tmp___9~2); 1269305#L2782-6 assume !(1 == ~doorState~0); 1301390#L2782-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~21, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~6;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~21;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~6;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret165, isExecutiveFloorCalling_~retValue_acc~25;havoc isExecutiveFloorCalling_~retValue_acc~25;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 1301389#L998-135 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 1279396#L1025-135 isExecutiveFloorCalling_#t~ret165 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25 := isExecutiveFloorCalling_#t~ret165;havoc isExecutiveFloorCalling_#t~ret165;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~25; 1301388#L3154-9 stopRequestedInDirection_#t~ret82 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret82;havoc stopRequestedInDirection_#t~ret82; 1301386#L2394-4 assume 0 != stopRequestedInDirection_~tmp___0~7;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 1301385#L1802-15 stopRequestedInDirection_#t~ret83 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~21 := stopRequestedInDirection_#t~ret83;havoc stopRequestedInDirection_#t~ret83;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~6 := (if stopRequestedInDirection_~tmp~21 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~18 := (if stopRequestedInDirection_~__cil_tmp8~6 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 1301269#L2407-4 timeShift_#t~ret114 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret114;havoc timeShift_#t~ret114; 1301258#L2790-4 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret85, continueInDirection_~dir, continueInDirection_~tmp~22;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~22;~currentHeading~0 := continueInDirection_~dir; 1301238#L2451-6 assume !(1 == ~currentHeading~0); 1301232#L2461-18 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1301231#L2461-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1300340#L2467-13 assume { :end_inline_continueInDirection } true; 1298898#L2799-8 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret20, __utac_acc__Specification14_spec__1_#t~ret21, __utac_acc__Specification14_spec__1_#t~ret22, __utac_acc__Specification14_spec__1_#t~ret23, __utac_acc__Specification14_spec__1_~tmp~11, __utac_acc__Specification14_spec__1_~tmp___0~4, __utac_acc__Specification14_spec__1_~tmp___1~3, __utac_acc__Specification14_spec__1_~tmp___2~1;havoc __utac_acc__Specification14_spec__1_~tmp~11;havoc __utac_acc__Specification14_spec__1_~tmp___0~4;havoc __utac_acc__Specification14_spec__1_~tmp___1~3;havoc __utac_acc__Specification14_spec__1_~tmp___2~1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret165, isExecutiveFloorCalling_~retValue_acc~25;havoc isExecutiveFloorCalling_~retValue_acc~25;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 1298897#L998-197 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 1279383#L1025-197 isExecutiveFloorCalling_#t~ret165 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25 := isExecutiveFloorCalling_#t~ret165;havoc isExecutiveFloorCalling_#t~ret165;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~25; 1298896#L3154-11 __utac_acc__Specification14_spec__1_#t~ret20 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~1 := __utac_acc__Specification14_spec__1_#t~ret20;havoc __utac_acc__Specification14_spec__1_#t~ret20; 1298882#L509-4 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~1); 1298881#L509-5 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 1298880#L2814-2 assume { :end_inline_timeShift } true; 1298879#L171 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~28;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~28; 1298878#L3211-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~28 := 4;getOrigin_#res := getOrigin_~retValue_acc~28; 1298872#L3236-1 bobCall_#t~ret1 := getOrigin_#res;assume { :end_inline_getOrigin } true;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 1298871#L1269-1 assume 0 == initPersonOnFloor_~floor; 1298843#L1270-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 1283059#L1377-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 1283060#L1061-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 1298804#L1073-5 assume { :end_inline_callOnFloor } true; 1298801#L1413-1 assume { :end_inline_initPersonOnFloor } true; 1277240#L103 assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret7, cleanup_#t~ret8, cleanup_~i~0, cleanup_~tmp~6, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~0;havoc cleanup_~i~0;havoc cleanup_~tmp~6;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~0;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_~tmp~27, timeShift_~tmp___0~12, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~12;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret91, stopRequestedAtCurrentFloor_#t~ret92, stopRequestedAtCurrentFloor_#t~ret93, stopRequestedAtCurrentFloor_#t~ret94, stopRequestedAtCurrentFloor_~retValue_acc~22, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~10;havoc stopRequestedAtCurrentFloor_~retValue_acc~22;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~10;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret165, isExecutiveFloorCalling_~retValue_acc~25;havoc isExecutiveFloorCalling_~retValue_acc~25;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 1277241#L998-198 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 1295797#L1025-198 isExecutiveFloorCalling_#t~ret165 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25 := isExecutiveFloorCalling_#t~ret165;havoc isExecutiveFloorCalling_#t~ret165;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~25; 1295796#L3154-12 stopRequestedAtCurrentFloor_#t~ret91 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~25 := stopRequestedAtCurrentFloor_#t~ret91;havoc stopRequestedAtCurrentFloor_#t~ret91; 1295793#L2539-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~25;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 1295792#L1802-18 stopRequestedAtCurrentFloor_#t~ret92 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~10 := stopRequestedAtCurrentFloor_#t~ret92;havoc stopRequestedAtCurrentFloor_#t~ret92; 1295790#L2543-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10);stopRequestedAtCurrentFloor_~retValue_acc~22 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~22; 1295788#L2556-3 timeShift_#t~ret107 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret107;havoc timeShift_#t~ret107; 1295786#L2691-6 assume !(0 != timeShift_~tmp___9~2); 1295785#L2782-9 assume !(1 == ~doorState~0); 1295784#L2782-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~21, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~6;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~21;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~6;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret165, isExecutiveFloorCalling_~retValue_acc~25;havoc isExecutiveFloorCalling_~retValue_acc~25;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 1295783#L998-201 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 1295782#L1025-201 isExecutiveFloorCalling_#t~ret165 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25 := isExecutiveFloorCalling_#t~ret165;havoc isExecutiveFloorCalling_#t~ret165;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~25; 1295781#L3154-13 stopRequestedInDirection_#t~ret82 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret82;havoc stopRequestedInDirection_#t~ret82; 1295779#L2394-6 assume 0 != stopRequestedInDirection_~tmp___0~7;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 1295777#L1802-21 stopRequestedInDirection_#t~ret83 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~21 := stopRequestedInDirection_#t~ret83;havoc stopRequestedInDirection_#t~ret83;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~6 := (if stopRequestedInDirection_~tmp~21 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~18 := (if stopRequestedInDirection_~__cil_tmp8~6 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 1295774#L2407-6 timeShift_#t~ret114 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret114;havoc timeShift_#t~ret114; 1295764#L2790-6 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret85, continueInDirection_~dir, continueInDirection_~tmp~22;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~22;~currentHeading~0 := continueInDirection_~dir; 1295751#L2451-9 assume !(1 == ~currentHeading~0); 1295736#L2461-27 assume !(0 == ~currentFloorID~0); 1295734#L2461-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1295733#L2467-19 assume { :end_inline_continueInDirection } true; 1294195#L2799-11 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret20, __utac_acc__Specification14_spec__1_#t~ret21, __utac_acc__Specification14_spec__1_#t~ret22, __utac_acc__Specification14_spec__1_#t~ret23, __utac_acc__Specification14_spec__1_~tmp~11, __utac_acc__Specification14_spec__1_~tmp___0~4, __utac_acc__Specification14_spec__1_~tmp___1~3, __utac_acc__Specification14_spec__1_~tmp___2~1;havoc __utac_acc__Specification14_spec__1_~tmp~11;havoc __utac_acc__Specification14_spec__1_~tmp___0~4;havoc __utac_acc__Specification14_spec__1_~tmp___1~3;havoc __utac_acc__Specification14_spec__1_~tmp___2~1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret165, isExecutiveFloorCalling_~retValue_acc~25;havoc isExecutiveFloorCalling_~retValue_acc~25;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 1294196#L998-263 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 1294189#L1025-263 isExecutiveFloorCalling_#t~ret165 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25 := isExecutiveFloorCalling_#t~ret165;havoc isExecutiveFloorCalling_#t~ret165;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~25; 1294190#L3154-15 __utac_acc__Specification14_spec__1_#t~ret20 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~1 := __utac_acc__Specification14_spec__1_#t~ret20;havoc __utac_acc__Specification14_spec__1_#t~ret20; 1294185#L509-6 assume 0 != __utac_acc__Specification14_spec__1_~tmp___2~1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 1294186#L1802-23 __utac_acc__Specification14_spec__1_#t~ret21 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification14_spec__1_~tmp~11 := __utac_acc__Specification14_spec__1_#t~ret21;havoc __utac_acc__Specification14_spec__1_#t~ret21;assume { :begin_inline_isExecutiveFloor } true;isExecutiveFloor_#in~floorID := __utac_acc__Specification14_spec__1_~tmp~11;havoc isExecutiveFloor_#res;havoc isExecutiveFloor_~floorID, isExecutiveFloor_~retValue_acc~26;isExecutiveFloor_~floorID := isExecutiveFloor_#in~floorID;havoc isExecutiveFloor_~retValue_acc~26;isExecutiveFloor_~retValue_acc~26 := (if ~executiveFloor~0 == isExecutiveFloor_~floorID then 1 else 0);isExecutiveFloor_#res := isExecutiveFloor_~retValue_acc~26; 1294181#L3163-3 __utac_acc__Specification14_spec__1_#t~ret22 := isExecutiveFloor_#res;assume { :end_inline_isExecutiveFloor } true;__utac_acc__Specification14_spec__1_~tmp___0~4 := __utac_acc__Specification14_spec__1_#t~ret22;havoc __utac_acc__Specification14_spec__1_#t~ret22; 1294182#L514-6 assume 0 != __utac_acc__Specification14_spec__1_~tmp___0~4; 1294173#L509-7 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 1294174#L2814-3 assume { :end_inline_timeShift } true;cleanup_~i~0 := 0; 1294168#L188-3 [2018-11-18 15:14:32,569 INFO L796 eck$LassoCheckResult]: Loop: 1294168#L188-3 assume true; 1294169#L188-1 assume !false; 1294164#L189 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 1294165#L192 assume cleanup_~i~0 < cleanup_~__cil_tmp4~0;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~8;havoc isBlocked_~retValue_acc~8;isBlocked_~retValue_acc~8 := 0;isBlocked_#res := isBlocked_~retValue_acc~8; 1294160#L1649 cleanup_#t~ret7 := isBlocked_#res;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0 := cleanup_#t~ret7;havoc cleanup_#t~ret7; 1294161#L196 assume 1 != cleanup_~tmp___0~0; 1294156#L196-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res;havoc isIdle_#t~ret66, isIdle_~retValue_acc~15, isIdle_~tmp~18;havoc isIdle_~retValue_acc~15;havoc isIdle_~tmp~18;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret61, anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_#t~ret64, anyStopRequested_#t~ret65, anyStopRequested_~retValue_acc~14, anyStopRequested_~tmp~17, anyStopRequested_~tmp___0~5, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~2, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~14;havoc anyStopRequested_~tmp~17;havoc anyStopRequested_~tmp___0~5;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~2;havoc anyStopRequested_~tmp___3~0;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 1294157#L998-264 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 1294152#L1025-264 anyStopRequested_#t~ret61 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret61;havoc anyStopRequested_#t~ret61; 1294153#L1910 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~14 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~14; 1294148#L1974 isIdle_#t~ret66 := anyStopRequested_#res;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~18 := isIdle_#t~ret66;havoc isIdle_#t~ret66;isIdle_~retValue_acc~15 := (if 0 == isIdle_~tmp~18 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~15; 1294149#L1987 cleanup_#t~ret8 := isIdle_#res;assume { :end_inline_isIdle } true;cleanup_~tmp~6 := cleanup_#t~ret8;havoc cleanup_#t~ret8; 1294142#L208 assume !(0 != cleanup_~tmp~6);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_~tmp~27, timeShift_~tmp___0~12, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~12;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret91, stopRequestedAtCurrentFloor_#t~ret92, stopRequestedAtCurrentFloor_#t~ret93, stopRequestedAtCurrentFloor_#t~ret94, stopRequestedAtCurrentFloor_~retValue_acc~22, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~10;havoc stopRequestedAtCurrentFloor_~retValue_acc~22;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~10;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret165, isExecutiveFloorCalling_~retValue_acc~25;havoc isExecutiveFloorCalling_~retValue_acc~25;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 1294143#L998-269 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 1333320#L1025-269 isExecutiveFloorCalling_#t~ret165 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25 := isExecutiveFloorCalling_#t~ret165;havoc isExecutiveFloorCalling_#t~ret165;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~25; 1333321#L3154-16 stopRequestedAtCurrentFloor_#t~ret91 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~25 := stopRequestedAtCurrentFloor_#t~ret91;havoc stopRequestedAtCurrentFloor_#t~ret91; 1333315#L2539-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~25;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 1333317#L1802-24 stopRequestedAtCurrentFloor_#t~ret92 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~10 := stopRequestedAtCurrentFloor_#t~ret92;havoc stopRequestedAtCurrentFloor_#t~ret92; 1333312#L2543-4 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10);stopRequestedAtCurrentFloor_~retValue_acc~22 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~22; 1269129#L2556-4 timeShift_#t~ret107 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret107;havoc timeShift_#t~ret107; 1333300#L2691-8 assume !(0 != timeShift_~tmp___9~2); 1333302#L2782-12 assume !(1 == ~doorState~0); 1335599#L2782-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~21, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~6;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~21;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~6;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret165, isExecutiveFloorCalling_~retValue_acc~25;havoc isExecutiveFloorCalling_~retValue_acc~25;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 1335600#L998-272 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 1335595#L1025-272 isExecutiveFloorCalling_#t~ret165 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25 := isExecutiveFloorCalling_#t~ret165;havoc isExecutiveFloorCalling_#t~ret165;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~25; 1335596#L3154-17 stopRequestedInDirection_#t~ret82 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret82;havoc stopRequestedInDirection_#t~ret82; 1335590#L2394-8 assume 0 != stopRequestedInDirection_~tmp___0~7;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 1335591#L1802-27 stopRequestedInDirection_#t~ret83 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~21 := stopRequestedInDirection_#t~ret83;havoc stopRequestedInDirection_#t~ret83;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~6 := (if stopRequestedInDirection_~tmp~21 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~18 := (if stopRequestedInDirection_~__cil_tmp8~6 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 1335555#L2407-8 timeShift_#t~ret114 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret114;havoc timeShift_#t~ret114; 1335556#L2790-8 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret85, continueInDirection_~dir, continueInDirection_~tmp~22;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~22;~currentHeading~0 := continueInDirection_~dir; 1336807#L2451-12 assume !(1 == ~currentHeading~0); 1336804#L2461-36 assume !(0 == ~currentFloorID~0); 1336801#L2461-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1334137#L2467-25 assume { :end_inline_continueInDirection } true; 1327596#L2799-14 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret20, __utac_acc__Specification14_spec__1_#t~ret21, __utac_acc__Specification14_spec__1_#t~ret22, __utac_acc__Specification14_spec__1_#t~ret23, __utac_acc__Specification14_spec__1_~tmp~11, __utac_acc__Specification14_spec__1_~tmp___0~4, __utac_acc__Specification14_spec__1_~tmp___1~3, __utac_acc__Specification14_spec__1_~tmp___2~1;havoc __utac_acc__Specification14_spec__1_~tmp~11;havoc __utac_acc__Specification14_spec__1_~tmp___0~4;havoc __utac_acc__Specification14_spec__1_~tmp___1~3;havoc __utac_acc__Specification14_spec__1_~tmp___2~1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret165, isExecutiveFloorCalling_~retValue_acc~25;havoc isExecutiveFloorCalling_~retValue_acc~25;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 1327597#L998-334 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 1294211#L1025-334 isExecutiveFloorCalling_#t~ret165 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~25 := isExecutiveFloorCalling_#t~ret165;havoc isExecutiveFloorCalling_#t~ret165;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~25; 1294212#L3154-19 __utac_acc__Specification14_spec__1_#t~ret20 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~1 := __utac_acc__Specification14_spec__1_#t~ret20;havoc __utac_acc__Specification14_spec__1_#t~ret20; 1294207#L509-8 assume 0 != __utac_acc__Specification14_spec__1_~tmp___2~1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 1294208#L1802-29 __utac_acc__Specification14_spec__1_#t~ret21 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification14_spec__1_~tmp~11 := __utac_acc__Specification14_spec__1_#t~ret21;havoc __utac_acc__Specification14_spec__1_#t~ret21;assume { :begin_inline_isExecutiveFloor } true;isExecutiveFloor_#in~floorID := __utac_acc__Specification14_spec__1_~tmp~11;havoc isExecutiveFloor_#res;havoc isExecutiveFloor_~floorID, isExecutiveFloor_~retValue_acc~26;isExecutiveFloor_~floorID := isExecutiveFloor_#in~floorID;havoc isExecutiveFloor_~retValue_acc~26;isExecutiveFloor_~retValue_acc~26 := (if ~executiveFloor~0 == isExecutiveFloor_~floorID then 1 else 0);isExecutiveFloor_#res := isExecutiveFloor_~retValue_acc~26; 1336850#L3163-4 __utac_acc__Specification14_spec__1_#t~ret22 := isExecutiveFloor_#res;assume { :end_inline_isExecutiveFloor } true;__utac_acc__Specification14_spec__1_~tmp___0~4 := __utac_acc__Specification14_spec__1_#t~ret22;havoc __utac_acc__Specification14_spec__1_#t~ret22; 1294202#L514-8 assume 0 != __utac_acc__Specification14_spec__1_~tmp___0~4; 1294201#L509-9 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 1336843#L2814-4 assume { :end_inline_timeShift } true;cleanup_~i~0 := 1 + cleanup_~i~0; 1294168#L188-3 [2018-11-18 15:14:32,575 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 15:14:32,575 INFO L82 PathProgramCache]: Analyzing trace with hash -1068433846, now seen corresponding path program 1 times [2018-11-18 15:14:32,575 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 15:14:32,575 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 15:14:32,576 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 15:14:32,576 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 15:14:32,576 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 15:14:32,587 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 15:14:33,347 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 15:14:33,347 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 15:14:33,348 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-18 15:14:33,348 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-18 15:14:33,348 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 15:14:33,348 INFO L82 PathProgramCache]: Analyzing trace with hash 961797449, now seen corresponding path program 1 times [2018-11-18 15:14:33,348 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 15:14:33,348 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 15:14:33,349 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 15:14:33,349 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 15:14:33,349 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 15:14:33,356 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2018-11-18 15:14:33,363 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2018-11-18 15:14:33,754 WARN L180 SmtUtils]: Spent 360.00 ms on a formula simplification. DAG size of input: 191 DAG size of output: 171 [2018-11-18 15:14:34,169 WARN L180 SmtUtils]: Spent 378.00 ms on a formula simplification. DAG size of input: 151 DAG size of output: 121 [2018-11-18 15:14:34,176 INFO L216 LassoAnalysis]: Preferences: [2018-11-18 15:14:34,177 INFO L124 ssoRankerPreferences]: Compute integeral hull: false [2018-11-18 15:14:34,177 INFO L125 ssoRankerPreferences]: Enable LassoPartitioneer: true [2018-11-18 15:14:34,177 INFO L126 ssoRankerPreferences]: Term annotations enabled: false [2018-11-18 15:14:34,177 INFO L127 ssoRankerPreferences]: Use exernal solver: true [2018-11-18 15:14:34,177 INFO L128 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 15:14:34,177 INFO L129 ssoRankerPreferences]: Dump SMT script to file: false [2018-11-18 15:14:34,177 INFO L130 ssoRankerPreferences]: Path of dumped script: [2018-11-18 15:14:34,177 INFO L131 ssoRankerPreferences]: Filename of dumped script: elevator_spec14_product23_true-unreach-call_true-termination.cil.c_Iteration5_Loop [2018-11-18 15:14:34,177 INFO L132 ssoRankerPreferences]: MapElimAlgo: Frank [2018-11-18 15:14:34,177 INFO L282 LassoAnalysis]: Starting lasso preprocessing... [2018-11-18 15:14:34,195 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:14:34,199 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:14:34,204 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:14:34,205 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:14:34,211 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:14:34,212 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:14:34,215 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:14:34,216 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:14:34,219 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:14:34,220 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:14:34,222 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:14:34,223 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:14:34,224 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:14:34,225 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:14:34,226 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:14:34,226 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:14:34,228 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:14:34,239 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:14:34,241 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:14:34,242 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:14:34,245 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:14:34,247 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:14:34,248 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:14:34,249 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:14:34,251 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:14:34,253 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:14:34,254 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:14:34,256 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:14:34,258 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:14:34,260 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:14:34,262 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:14:34,263 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:14:34,265 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:14:34,270 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:14:34,271 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:14:34,272 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:14:34,273 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:14:34,274 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:14:34,275 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:14:34,276 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:14:34,277 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:14:34,280 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:14:34,283 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:14:34,285 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:14:34,286 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:14:34,295 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:14:34,296 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:14:34,297 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:14:34,298 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:14:34,301 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:14:34,307 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:14:34,309 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:14:34,310 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:14:34,311 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:14:34,312 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:14:34,313 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:14:34,313 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:14:34,317 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:14:34,317 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:14:34,323 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:14:34,324 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:14:34,325 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:14:34,326 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:14:34,680 INFO L300 LassoAnalysis]: Preprocessing complete. [2018-11-18 15:14:34,681 INFO L412 LassoAnalysis]: Checking for nontermination... No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_8fdaa819-2e7e-4395-8b13-972f21c147e2/bin-2019/uautomizer/z3 Starting monitored process 2 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 2 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 15:14:34,694 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 15:14:34,695 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 15:14:34,701 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 15:14:34,701 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp~27=0} Honda state: {ULTIMATE.start_timeShift_~tmp~27=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_8fdaa819-2e7e-4395-8b13-972f21c147e2/bin-2019/uautomizer/z3 Starting monitored process 3 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 3 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 15:14:34,723 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 15:14:34,723 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 15:14:34,726 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 15:14:34,726 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_anyStopRequested_~tmp___1~4=0} Honda state: {ULTIMATE.start_anyStopRequested_~tmp___1~4=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_8fdaa819-2e7e-4395-8b13-972f21c147e2/bin-2019/uautomizer/z3 Starting monitored process 4 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 4 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 15:14:34,749 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 15:14:34,749 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 15:14:34,751 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 15:14:34,751 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret113=0} Honda state: {ULTIMATE.start_timeShift_#t~ret113=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_8fdaa819-2e7e-4395-8b13-972f21c147e2/bin-2019/uautomizer/z3 Starting monitored process 5 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 5 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 15:14:34,768 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 15:14:34,768 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 15:14:34,772 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 15:14:34,772 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification14_spec__1_~tmp___0~4=1, ULTIMATE.start_isExecutiveFloor_#res=1, ULTIMATE.start_isExecutiveFloor_~retValue_acc~26=1} Honda state: {ULTIMATE.start___utac_acc__Specification14_spec__1_~tmp___0~4=1, ULTIMATE.start_isExecutiveFloor_#res=1, ULTIMATE.start_isExecutiveFloor_~retValue_acc~26=1} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_8fdaa819-2e7e-4395-8b13-972f21c147e2/bin-2019/uautomizer/z3 Starting monitored process 6 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 6 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 15:14:34,798 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 15:14:34,798 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 15:14:34,801 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 15:14:34,801 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedAtCurrentFloor_#t~ret93=0} Honda state: {ULTIMATE.start_stopRequestedAtCurrentFloor_#t~ret93=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_8fdaa819-2e7e-4395-8b13-972f21c147e2/bin-2019/uautomizer/z3 Starting monitored process 7 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 7 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 15:14:35,149 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 15:14:35,149 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 15:14:35,163 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 15:14:35,163 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_#res=1, ULTIMATE.start_stopRequestedInDirection_~retValue_acc~18=1, ULTIMATE.start_timeShift_~tmp___8~2=1} Honda state: {ULTIMATE.start_stopRequestedInDirection_#res=1, ULTIMATE.start_stopRequestedInDirection_~retValue_acc~18=1, ULTIMATE.start_timeShift_~tmp___8~2=1} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_8fdaa819-2e7e-4395-8b13-972f21c147e2/bin-2019/uautomizer/z3 Starting monitored process 8 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 8 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 15:14:35,188 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 15:14:35,188 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 15:14:35,191 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 15:14:35,191 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret107=0} Honda state: {ULTIMATE.start_timeShift_#t~ret107=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_8fdaa819-2e7e-4395-8b13-972f21c147e2/bin-2019/uautomizer/z3 Starting monitored process 9 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 9 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 15:14:35,216 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 15:14:35,216 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 15:14:35,222 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 15:14:35,222 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___9~2=0, ULTIMATE.start_stopRequestedAtCurrentFloor_~retValue_acc~22=0, ULTIMATE.start_stopRequestedAtCurrentFloor_#res=0} Honda state: {ULTIMATE.start_timeShift_~tmp___9~2=0, ULTIMATE.start_stopRequestedAtCurrentFloor_~retValue_acc~22=0, ULTIMATE.start_stopRequestedAtCurrentFloor_#res=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_8fdaa819-2e7e-4395-8b13-972f21c147e2/bin-2019/uautomizer/z3 Starting monitored process 10 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 10 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 15:14:35,240 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 15:14:35,240 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 15:14:35,242 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 15:14:35,242 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_anyStopRequested_#t~ret62=0} Honda state: {ULTIMATE.start_anyStopRequested_#t~ret62=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_8fdaa819-2e7e-4395-8b13-972f21c147e2/bin-2019/uautomizer/z3 Starting monitored process 11 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 11 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 15:14:35,258 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 15:14:35,258 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 15:14:35,260 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 15:14:35,260 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_isFloorCalling_~floorID=0} Honda state: {ULTIMATE.start_isFloorCalling_~floorID=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_8fdaa819-2e7e-4395-8b13-972f21c147e2/bin-2019/uautomizer/z3 Starting monitored process 12 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 12 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 15:14:35,276 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 15:14:35,276 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 15:14:35,280 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 15:14:35,280 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret114=0} Honda state: {ULTIMATE.start_timeShift_#t~ret114=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_8fdaa819-2e7e-4395-8b13-972f21c147e2/bin-2019/uautomizer/z3 Starting monitored process 13 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 13 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 15:14:35,296 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 15:14:35,296 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 15:14:35,302 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 15:14:35,302 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_anyStopRequested_#t~ret64=0} Honda state: {ULTIMATE.start_anyStopRequested_#t~ret64=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_8fdaa819-2e7e-4395-8b13-972f21c147e2/bin-2019/uautomizer/z3 Starting monitored process 14 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 14 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 15:14:35,317 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 15:14:35,318 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 15:14:35,319 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 15:14:35,319 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___0~12=0} Honda state: {ULTIMATE.start_timeShift_~tmp___0~12=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_8fdaa819-2e7e-4395-8b13-972f21c147e2/bin-2019/uautomizer/z3 Starting monitored process 15 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 15 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 15:14:35,335 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 15:14:35,335 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 15:14:35,337 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 15:14:35,337 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification14_spec__1_#t~ret23=0} Honda state: {ULTIMATE.start___utac_acc__Specification14_spec__1_#t~ret23=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_8fdaa819-2e7e-4395-8b13-972f21c147e2/bin-2019/uautomizer/z3 Starting monitored process 16 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 16 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 15:14:35,354 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 15:14:35,354 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 15:14:35,357 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 15:14:35,357 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___1~7=0} Honda state: {ULTIMATE.start_timeShift_~tmp___1~7=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_8fdaa819-2e7e-4395-8b13-972f21c147e2/bin-2019/uautomizer/z3 Starting monitored process 17 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 17 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 15:14:35,375 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 15:14:35,375 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 15:14:35,377 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 15:14:35,377 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_anyStopRequested_~tmp___2~2=0} Honda state: {ULTIMATE.start_anyStopRequested_~tmp___2~2=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_8fdaa819-2e7e-4395-8b13-972f21c147e2/bin-2019/uautomizer/z3 Starting monitored process 18 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 18 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 15:14:35,392 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 15:14:35,392 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 15:14:35,395 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 15:14:35,395 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_#in~respectFloorCalls=1, ULTIMATE.start_stopRequestedInDirection_~respectFloorCalls=1} Honda state: {ULTIMATE.start_stopRequestedInDirection_#in~respectFloorCalls=1, ULTIMATE.start_stopRequestedInDirection_~respectFloorCalls=1} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_8fdaa819-2e7e-4395-8b13-972f21c147e2/bin-2019/uautomizer/z3 Starting monitored process 19 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 19 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 15:14:35,411 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 15:14:35,411 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 15:14:35,413 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 15:14:35,413 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret116=0} Honda state: {ULTIMATE.start_timeShift_#t~ret116=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_8fdaa819-2e7e-4395-8b13-972f21c147e2/bin-2019/uautomizer/z3 Starting monitored process 20 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 20 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 15:14:35,428 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 15:14:35,428 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 15:14:35,430 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 15:14:35,430 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedAtCurrentFloor_#t~ret94=0} Honda state: {ULTIMATE.start_stopRequestedAtCurrentFloor_#t~ret94=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_8fdaa819-2e7e-4395-8b13-972f21c147e2/bin-2019/uautomizer/z3 Starting monitored process 21 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 21 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 15:14:35,446 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 15:14:35,446 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 15:14:35,449 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 15:14:35,449 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_~__cil_tmp8~6=0, ULTIMATE.start_stopRequestedInDirection_~__cil_tmp7~5=0} Honda state: {ULTIMATE.start_stopRequestedInDirection_~__cil_tmp8~6=0, ULTIMATE.start_stopRequestedInDirection_~__cil_tmp7~5=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_8fdaa819-2e7e-4395-8b13-972f21c147e2/bin-2019/uautomizer/z3 Starting monitored process 22 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 22 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 15:14:35,465 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 15:14:35,465 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 15:14:35,467 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 15:14:35,467 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret115=0} Honda state: {ULTIMATE.start_timeShift_#t~ret115=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_8fdaa819-2e7e-4395-8b13-972f21c147e2/bin-2019/uautomizer/z3 Starting monitored process 23 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 23 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 15:14:35,483 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 15:14:35,483 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 15:14:35,485 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 15:14:35,485 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret112=0} Honda state: {ULTIMATE.start_timeShift_#t~ret112=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_8fdaa819-2e7e-4395-8b13-972f21c147e2/bin-2019/uautomizer/z3 Starting monitored process 24 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 24 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 15:14:35,501 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 15:14:35,501 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 15:14:35,506 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 15:14:35,506 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_#t~ret84=0} Honda state: {ULTIMATE.start_stopRequestedInDirection_#t~ret84=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_8fdaa819-2e7e-4395-8b13-972f21c147e2/bin-2019/uautomizer/z3 Starting monitored process 25 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 25 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 15:14:35,523 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 15:14:35,523 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 15:14:35,525 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 15:14:35,525 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___7~2=0} Honda state: {ULTIMATE.start_timeShift_~tmp___7~2=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_8fdaa819-2e7e-4395-8b13-972f21c147e2/bin-2019/uautomizer/z3 Starting monitored process 26 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 26 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 15:14:35,541 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 15:14:35,541 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 15:14:35,543 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 15:14:35,544 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_continueInDirection_~tmp~22=0} Honda state: {ULTIMATE.start_continueInDirection_~tmp~22=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_8fdaa819-2e7e-4395-8b13-972f21c147e2/bin-2019/uautomizer/z3 Starting monitored process 27 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 27 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 15:14:35,562 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 15:14:35,562 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 15:14:35,564 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 15:14:35,564 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___4~2=0} Honda state: {ULTIMATE.start_timeShift_~tmp___4~2=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_8fdaa819-2e7e-4395-8b13-972f21c147e2/bin-2019/uautomizer/z3 Starting monitored process 28 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 28 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 15:14:35,579 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 15:14:35,579 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 15:14:35,581 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 15:14:35,581 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_continueInDirection_#t~ret85=0} Honda state: {ULTIMATE.start_continueInDirection_#t~ret85=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_8fdaa819-2e7e-4395-8b13-972f21c147e2/bin-2019/uautomizer/z3 Starting monitored process 29 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 29 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 15:14:35,597 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 15:14:35,598 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 15:14:35,600 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 15:14:35,600 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification14_spec__1_~tmp___1~3=0} Honda state: {ULTIMATE.start___utac_acc__Specification14_spec__1_~tmp___1~3=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_8fdaa819-2e7e-4395-8b13-972f21c147e2/bin-2019/uautomizer/z3 Starting monitored process 30 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 30 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 15:14:35,615 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 15:14:35,615 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 15:14:35,617 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 15:14:35,617 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___2~5=0} Honda state: {ULTIMATE.start_timeShift_~tmp___2~5=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_8fdaa819-2e7e-4395-8b13-972f21c147e2/bin-2019/uautomizer/z3 Starting monitored process 31 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 31 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 15:14:35,633 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 15:14:35,633 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 15:14:35,635 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 15:14:35,635 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret108=0} Honda state: {ULTIMATE.start_timeShift_#t~ret108=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_8fdaa819-2e7e-4395-8b13-972f21c147e2/bin-2019/uautomizer/z3 Starting monitored process 32 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 32 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 15:14:35,654 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 15:14:35,655 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 15:14:35,657 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 15:14:35,657 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_anyStopRequested_~tmp___0~5=0} Honda state: {ULTIMATE.start_anyStopRequested_~tmp___0~5=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_8fdaa819-2e7e-4395-8b13-972f21c147e2/bin-2019/uautomizer/z3 Starting monitored process 33 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 33 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 15:14:35,672 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 15:14:35,672 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 15:14:35,674 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 15:14:35,674 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___6~2=0} Honda state: {ULTIMATE.start_timeShift_~tmp___6~2=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_8fdaa819-2e7e-4395-8b13-972f21c147e2/bin-2019/uautomizer/z3 Starting monitored process 34 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 34 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 15:14:35,688 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 15:14:35,689 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 15:14:35,691 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 15:14:35,691 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_cleanup_#t~ret7=0} Honda state: {ULTIMATE.start_cleanup_#t~ret7=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_8fdaa819-2e7e-4395-8b13-972f21c147e2/bin-2019/uautomizer/z3 Starting monitored process 35 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 35 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 15:14:35,706 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 15:14:35,706 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 15:14:35,709 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 15:14:35,709 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___3~3=0} Honda state: {ULTIMATE.start_timeShift_~tmp___3~3=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_8fdaa819-2e7e-4395-8b13-972f21c147e2/bin-2019/uautomizer/z3 Starting monitored process 36 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 36 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 15:14:35,734 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 15:14:35,734 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 15:14:35,738 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 15:14:35,738 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification14_spec__1_#t~ret20=0} Honda state: {ULTIMATE.start___utac_acc__Specification14_spec__1_#t~ret20=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_8fdaa819-2e7e-4395-8b13-972f21c147e2/bin-2019/uautomizer/z3 Starting monitored process 37 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 37 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 15:14:35,754 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 15:14:35,754 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 15:14:35,756 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 15:14:35,756 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedAtCurrentFloor_#t~ret91=0} Honda state: {ULTIMATE.start_stopRequestedAtCurrentFloor_#t~ret91=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_8fdaa819-2e7e-4395-8b13-972f21c147e2/bin-2019/uautomizer/z3 Starting monitored process 38 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2018-11-18 15:14:35,772 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 15:14:35,772 INFO L163 nArgumentSynthesizer]: Using integer mode. Waiting until toolchain timeout for monitored process 38 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 15:14:35,774 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 15:14:35,774 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret111=0} Honda state: {ULTIMATE.start_timeShift_#t~ret111=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_8fdaa819-2e7e-4395-8b13-972f21c147e2/bin-2019/uautomizer/z3 Starting monitored process 39 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 39 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 15:14:35,789 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 15:14:35,790 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 15:14:35,792 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 15:14:35,792 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_#t~ret83=0} Honda state: {ULTIMATE.start_stopRequestedInDirection_#t~ret83=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_8fdaa819-2e7e-4395-8b13-972f21c147e2/bin-2019/uautomizer/z3 Starting monitored process 40 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 40 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 15:14:35,817 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 15:14:35,817 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 15:14:35,822 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 15:14:35,822 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret109=0} Honda state: {ULTIMATE.start_timeShift_#t~ret109=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_8fdaa819-2e7e-4395-8b13-972f21c147e2/bin-2019/uautomizer/z3 Starting monitored process 41 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 41 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 15:14:35,838 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 15:14:35,838 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 15:14:35,840 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 15:14:35,840 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_anyStopRequested_#t~ret61=0} Honda state: {ULTIMATE.start_anyStopRequested_#t~ret61=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_8fdaa819-2e7e-4395-8b13-972f21c147e2/bin-2019/uautomizer/z3 Starting monitored process 42 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 42 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 15:14:35,856 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 15:14:35,856 INFO L163 nArgumentSynthesizer]: Using integer mode. No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_8fdaa819-2e7e-4395-8b13-972f21c147e2/bin-2019/uautomizer/z3 Starting monitored process 43 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 43 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 15:14:36,095 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 3 Nilpotent components: true [2018-11-18 15:14:36,095 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 15:14:36,542 INFO L452 LassoAnalysis]: Proving nontermination failed: No geometric nontermination argument exists. [2018-11-18 15:14:36,543 INFO L216 LassoAnalysis]: Preferences: [2018-11-18 15:14:36,543 INFO L124 ssoRankerPreferences]: Compute integeral hull: false [2018-11-18 15:14:36,543 INFO L125 ssoRankerPreferences]: Enable LassoPartitioneer: true [2018-11-18 15:14:36,543 INFO L126 ssoRankerPreferences]: Term annotations enabled: false [2018-11-18 15:14:36,544 INFO L127 ssoRankerPreferences]: Use exernal solver: false [2018-11-18 15:14:36,544 INFO L128 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 15:14:36,544 INFO L129 ssoRankerPreferences]: Dump SMT script to file: false [2018-11-18 15:14:36,544 INFO L130 ssoRankerPreferences]: Path of dumped script: [2018-11-18 15:14:36,544 INFO L131 ssoRankerPreferences]: Filename of dumped script: elevator_spec14_product23_true-unreach-call_true-termination.cil.c_Iteration5_Loop [2018-11-18 15:14:36,544 INFO L132 ssoRankerPreferences]: MapElimAlgo: Frank [2018-11-18 15:14:36,544 INFO L282 LassoAnalysis]: Starting lasso preprocessing... [2018-11-18 15:14:36,547 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:14:36,570 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:14:36,580 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:14:36,582 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:14:36,584 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:14:36,585 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:14:36,590 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:14:36,591 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:14:36,594 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:14:36,595 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:14:36,596 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:14:36,597 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:14:36,601 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:14:36,602 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:14:36,603 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:14:36,606 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:14:36,607 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:14:36,608 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:14:36,612 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:14:36,614 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:14:36,616 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:14:36,617 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:14:36,618 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:14:36,619 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:14:36,620 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:14:36,622 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:14:36,622 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:14:36,624 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:14:36,626 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:14:36,627 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:14:36,627 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:14:36,628 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:14:36,629 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:14:36,630 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:14:36,633 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:14:36,634 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:14:36,635 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:14:36,636 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:14:36,637 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:14:36,638 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:14:36,639 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:14:36,639 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:14:36,643 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:14:36,644 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:14:36,646 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:14:36,647 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:14:36,649 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:14:36,649 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:14:36,650 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:14:36,653 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:14:36,653 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:14:36,655 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:14:36,655 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:14:36,656 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:14:36,657 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:14:36,661 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:14:36,662 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:14:36,666 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:14:36,689 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:14:36,702 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:14:36,704 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:14:36,706 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:14:36,720 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 15:14:37,072 INFO L300 LassoAnalysis]: Preprocessing complete. [2018-11-18 15:14:37,076 INFO L497 LassoAnalysis]: Using template 'affine'. [2018-11-18 15:14:37,077 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 15:14:37,078 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 15:14:37,078 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 15:14:37,079 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 15:14:37,079 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 15:14:37,079 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 15:14:37,080 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 15:14:37,080 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 15:14:37,082 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 15:14:37,082 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 15:14:37,083 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 15:14:37,083 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 15:14:37,083 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 15:14:37,083 INFO L206 nArgumentSynthesizer]: 2 loop disjuncts [2018-11-18 15:14:37,083 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 15:14:37,085 INFO L402 nArgumentSynthesizer]: We have 4 Motzkin's Theorem applications. [2018-11-18 15:14:37,085 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 15:14:37,093 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 15:14:37,094 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 15:14:37,094 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 15:14:37,094 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 15:14:37,094 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 15:14:37,095 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 15:14:37,095 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 15:14:37,095 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 15:14:37,095 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 15:14:37,095 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 15:14:37,096 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 15:14:37,096 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 15:14:37,096 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 15:14:37,096 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 15:14:37,096 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 15:14:37,096 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 15:14:37,097 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 15:14:37,097 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 15:14:37,097 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 15:14:37,097 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 15:14:37,102 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 15:14:37,102 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 15:14:37,102 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 15:14:37,102 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 15:14:37,102 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 15:14:37,103 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 15:14:37,103 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 15:14:37,103 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 15:14:37,104 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 15:14:37,104 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 15:14:37,104 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 15:14:37,104 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 15:14:37,104 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 15:14:37,104 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 15:14:37,105 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 15:14:37,105 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 15:14:37,107 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 15:14:37,107 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 15:14:37,107 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 15:14:37,107 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 15:14:37,108 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 15:14:37,108 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 15:14:37,108 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 15:14:37,108 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 15:14:37,108 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 15:14:37,108 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 15:14:37,109 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 15:14:37,109 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 15:14:37,109 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 15:14:37,109 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 15:14:37,109 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 15:14:37,109 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 15:14:37,110 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 15:14:37,110 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 15:14:37,111 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 15:14:37,111 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 15:14:37,111 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 15:14:37,111 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 15:14:37,111 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 15:14:37,111 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 15:14:37,112 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 15:14:37,112 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 15:14:37,112 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 15:14:37,112 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 15:14:37,113 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 15:14:37,113 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 15:14:37,113 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 15:14:37,113 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 15:14:37,113 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 15:14:37,113 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 15:14:37,113 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 15:14:37,114 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 15:14:37,114 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 15:14:37,114 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 15:14:37,114 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 15:14:37,115 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 15:14:37,115 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 15:14:37,115 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 15:14:37,115 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 15:14:37,115 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 15:14:37,115 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 15:14:37,116 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 15:14:37,116 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 15:14:37,116 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 15:14:37,116 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 15:14:37,116 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 15:14:37,117 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 15:14:37,117 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 15:14:37,117 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 15:14:37,117 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 15:14:37,119 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 15:14:37,120 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 15:14:37,120 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 15:14:37,120 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 15:14:37,120 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 15:14:37,120 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 15:14:37,120 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 15:14:37,121 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 15:14:37,121 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 15:14:37,121 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 15:14:37,122 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 15:14:37,122 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 15:14:37,122 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 15:14:37,122 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 15:14:37,122 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 15:14:37,122 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 15:14:37,122 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 15:14:37,123 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 15:14:37,123 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 15:14:37,123 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 15:14:37,124 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 15:14:37,124 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 15:14:37,124 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 15:14:37,124 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 15:14:37,124 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 15:14:37,124 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 15:14:37,124 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 15:14:37,125 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 15:14:37,125 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 15:14:37,125 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 15:14:37,125 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 15:14:37,126 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 15:14:37,126 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 15:14:37,126 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 15:14:37,126 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 15:14:37,126 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 15:14:37,126 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 15:14:37,127 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 15:14:37,127 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 15:14:37,127 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 15:14:37,127 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 15:14:37,127 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 15:14:37,127 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 15:14:37,128 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 15:14:37,128 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 15:14:37,128 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 15:14:37,128 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 15:14:37,129 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 15:14:37,129 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 15:14:37,129 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 15:14:37,129 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 15:14:37,129 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 15:14:37,130 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 15:14:37,130 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 15:14:37,132 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 15:14:37,132 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 15:14:37,133 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 15:14:37,133 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 15:14:37,133 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 15:14:37,133 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 15:14:37,133 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 15:14:37,133 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 15:14:37,133 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 15:14:37,134 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 15:14:37,134 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 15:14:37,135 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 15:14:37,135 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 15:14:37,135 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 15:14:37,135 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 15:14:37,135 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 15:14:37,138 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 15:14:37,139 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 15:14:37,139 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 15:14:37,140 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 15:14:37,140 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 15:14:37,140 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 15:14:37,140 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 15:14:37,140 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 15:14:37,140 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 15:14:37,140 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 15:14:37,141 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 15:14:37,141 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 15:14:37,141 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 15:14:37,142 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 15:14:37,142 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 15:14:37,142 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 15:14:37,142 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 15:14:37,142 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 15:14:37,142 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 15:14:37,142 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 15:14:37,143 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 15:14:37,143 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 15:14:37,143 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 15:14:37,143 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 15:14:37,143 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 15:14:37,144 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 15:14:37,145 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 15:14:37,145 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 15:14:37,145 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 15:14:37,145 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 15:14:37,146 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 15:14:37,146 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 15:14:37,146 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 15:14:37,146 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 15:14:37,146 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 15:14:37,147 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 15:14:37,147 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 15:14:37,147 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 15:14:37,148 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 15:14:37,149 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 15:14:37,149 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 15:14:37,149 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 15:14:37,149 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 15:14:37,149 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 15:14:37,149 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 15:14:37,150 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 15:14:37,150 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 15:14:37,150 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 15:14:37,150 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 15:14:37,151 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 15:14:37,151 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 15:14:37,151 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 15:14:37,151 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 15:14:37,151 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 15:14:37,151 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 15:14:37,151 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 15:14:37,152 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 15:14:37,152 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 15:14:37,152 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 15:14:37,152 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 15:14:37,153 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 15:14:37,153 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 15:14:37,153 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 15:14:37,153 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 15:14:37,153 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 15:14:37,153 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 15:14:37,155 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 15:14:37,155 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 15:14:37,155 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 15:14:37,155 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 15:14:37,155 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 15:14:37,156 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 15:14:37,156 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 15:14:37,156 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 15:14:37,156 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 15:14:37,157 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 15:14:37,157 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 15:14:37,157 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 15:14:37,157 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 15:14:37,157 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 15:14:37,157 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 15:14:37,157 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 15:14:37,157 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 15:14:37,158 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 15:14:37,158 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 15:14:37,158 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 15:14:37,159 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 15:14:37,159 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 15:14:37,159 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 15:14:37,159 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 15:14:37,159 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 15:14:37,159 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 15:14:37,160 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 15:14:37,160 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 15:14:37,160 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 15:14:37,160 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 15:14:37,160 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 15:14:37,160 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 15:14:37,160 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 15:14:37,161 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 15:14:37,161 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 15:14:37,161 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 15:14:37,162 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 15:14:37,166 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 15:14:37,166 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 15:14:37,166 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 15:14:37,166 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 15:14:37,166 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 15:14:37,167 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 15:14:37,167 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 15:14:37,167 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 15:14:37,168 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 15:14:37,168 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 15:14:37,168 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 15:14:37,168 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 15:14:37,168 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 15:14:37,168 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 15:14:37,168 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 15:14:37,168 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 15:14:37,169 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 15:14:37,169 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 15:14:37,169 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 15:14:37,171 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 15:14:37,171 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 15:14:37,171 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 15:14:37,171 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 15:14:37,171 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 15:14:37,172 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 15:14:37,172 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 15:14:37,173 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 15:14:37,173 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 15:14:37,173 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 15:14:37,173 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 15:14:37,173 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 15:14:37,173 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 15:14:37,174 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 15:14:37,174 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 15:14:37,174 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 15:14:37,174 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 15:14:37,175 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 15:14:37,175 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 15:14:37,175 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 15:14:37,175 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 15:14:37,175 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 15:14:37,175 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 15:14:37,175 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 15:14:37,176 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 15:14:37,176 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 15:14:37,176 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 15:14:37,176 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 15:14:37,176 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 15:14:37,177 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 15:14:37,177 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 15:14:37,177 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 15:14:37,177 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 15:14:37,177 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 15:14:37,180 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 15:14:37,181 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 15:14:37,181 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 15:14:37,181 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 15:14:37,181 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 15:14:37,181 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 15:14:37,181 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 15:14:37,181 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 15:14:37,182 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 15:14:37,182 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 15:14:37,182 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 15:14:37,182 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 15:14:37,183 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 15:14:37,183 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 15:14:37,183 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 15:14:37,183 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 15:14:37,183 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 15:14:37,183 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 15:14:37,184 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 15:14:37,184 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 15:14:37,184 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 15:14:37,184 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 15:14:37,184 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 15:14:37,184 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 15:14:37,185 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 15:14:37,185 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 15:14:37,185 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 15:14:37,185 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 15:14:37,188 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 15:14:37,188 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 15:14:37,188 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 15:14:37,188 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 15:14:37,188 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 15:14:37,189 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 15:14:37,189 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 15:14:37,189 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 15:14:37,189 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 15:14:37,190 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 15:14:37,190 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 15:14:37,190 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 15:14:37,190 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 15:14:37,190 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 15:14:37,191 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 15:14:37,191 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 15:14:37,193 INFO L421 nArgumentSynthesizer]: Found a termination argument, trying to simplify. [2018-11-18 15:14:37,197 INFO L443 ModelExtractionUtils]: Simplification made 4 calls to the SMT solver. [2018-11-18 15:14:37,197 INFO L444 ModelExtractionUtils]: 1 out of 5 variables were initially zero. Simplification set additionally 1 variables to zero. [2018-11-18 15:14:37,199 INFO L437 nArgumentSynthesizer]: Simplifying supporting invariants... [2018-11-18 15:14:37,199 INFO L440 nArgumentSynthesizer]: Removed 0 redundant supporting invariants from a total of 0. [2018-11-18 15:14:37,199 INFO L518 LassoAnalysis]: Proved termination. [2018-11-18 15:14:37,200 INFO L520 LassoAnalysis]: Termination argument consisting of: Ranking function f(~cleanupTimeShifts~0, ULTIMATE.start_cleanup_~i~0) = 1*~cleanupTimeShifts~0 - 1*ULTIMATE.start_cleanup_~i~0 Supporting invariants [] [2018-11-18 15:14:37,202 INFO L297 tatePredicateManager]: 0 out of 0 supporting invariants were superfluous and have been removed [2018-11-18 15:14:37,231 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 15:14:37,339 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 15:14:37,348 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-18 15:14:37,406 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 15:14:37,408 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-18 15:14:37,511 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 15:14:37,515 INFO L152 lantAutomatonBouncer]: Defining deterministic Buchi interpolant automaton with honda bouncer for stem and without honda bouncer for loop.1 stem predicates 3 loop predicates [2018-11-18 15:14:37,516 INFO L72 iDifferenceNCSBLazy3]: Start buchiDifferenceNCSBLazy3. First operand 88941 states and 165671 transitions. cyclomatic complexity: 76736 Second operand 5 states. [2018-11-18 15:14:38,136 INFO L76 iDifferenceNCSBLazy3]: Finished buchiDifferenceNCSBLazy3. First operand 88941 states and 165671 transitions. cyclomatic complexity: 76736. Second operand 5 states. Result 109013 states and 202973 transitions. Complement of second has 8 states. [2018-11-18 15:14:38,136 INFO L142 InterpolantAutomaton]: Switched to read-only mode: Buchi interpolant automaton has 5 states 1 stem states 3 non-accepting loop states 1 accepting loop states [2018-11-18 15:14:38,137 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2018-11-18 15:14:38,150 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 16307 transitions. [2018-11-18 15:14:38,151 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 5 states and 16307 transitions. Stem has 149 letters. Loop has 44 letters. [2018-11-18 15:14:38,153 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2018-11-18 15:14:38,153 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 5 states and 16307 transitions. Stem has 193 letters. Loop has 44 letters. [2018-11-18 15:14:38,154 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2018-11-18 15:14:38,154 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 5 states and 16307 transitions. Stem has 149 letters. Loop has 88 letters. [2018-11-18 15:14:38,155 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2018-11-18 15:14:38,156 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 109013 states and 202973 transitions. [2018-11-18 15:14:38,440 INFO L131 ngComponentsAnalysis]: Automaton has 0 accepting balls. 0 [2018-11-18 15:14:38,440 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 109013 states to 0 states and 0 transitions. [2018-11-18 15:14:38,440 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 0 [2018-11-18 15:14:38,440 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 0 [2018-11-18 15:14:38,440 INFO L73 IsDeterministic]: Start isDeterministic. Operand 0 states and 0 transitions. [2018-11-18 15:14:38,441 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-18 15:14:38,441 INFO L705 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2018-11-18 15:14:38,441 INFO L728 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2018-11-18 15:14:38,441 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-18 15:14:38,441 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-18 15:14:38,441 INFO L87 Difference]: Start difference. First operand 0 states and 0 transitions. Second operand 3 states. [2018-11-18 15:14:38,441 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 15:14:38,441 INFO L93 Difference]: Finished difference Result 0 states and 0 transitions. [2018-11-18 15:14:38,441 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2018-11-18 15:14:38,441 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 0 states and 0 transitions. [2018-11-18 15:14:38,442 INFO L131 ngComponentsAnalysis]: Automaton has 0 accepting balls. 0 [2018-11-18 15:14:38,442 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 0 states to 0 states and 0 transitions. [2018-11-18 15:14:38,442 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 0 [2018-11-18 15:14:38,442 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 0 [2018-11-18 15:14:38,442 INFO L73 IsDeterministic]: Start isDeterministic. Operand 0 states and 0 transitions. [2018-11-18 15:14:38,442 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-18 15:14:38,442 INFO L705 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2018-11-18 15:14:38,442 INFO L728 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2018-11-18 15:14:38,442 INFO L608 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2018-11-18 15:14:38,442 INFO L442 BuchiCegarLoop]: ======== Iteration 6============ [2018-11-18 15:14:38,442 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 0 states and 0 transitions. [2018-11-18 15:14:38,442 INFO L131 ngComponentsAnalysis]: Automaton has 0 accepting balls. 0 [2018-11-18 15:14:38,442 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is true [2018-11-18 15:14:38,448 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer CFG 18.11 03:14:38 BoogieIcfgContainer [2018-11-18 15:14:38,448 INFO L132 PluginConnector]: ------------------------ END BuchiAutomizer---------------------------- [2018-11-18 15:14:38,448 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2018-11-18 15:14:38,448 INFO L271 PluginConnector]: Initializing Witness Printer... [2018-11-18 15:14:38,448 INFO L276 PluginConnector]: Witness Printer initialized [2018-11-18 15:14:38,449 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 18.11 03:13:10" (3/4) ... [2018-11-18 15:14:38,451 INFO L147 WitnessPrinter]: No result that supports witness generation found [2018-11-18 15:14:38,451 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2018-11-18 15:14:38,452 INFO L168 Benchmark]: Toolchain (without parser) took 98007.00 ms. Allocated memory was 1.0 GB in the beginning and 6.6 GB in the end (delta: 5.5 GB). Free memory was 956.6 MB in the beginning and 3.6 GB in the end (delta: -2.6 GB). Peak memory consumption was 2.9 GB. Max. memory is 11.5 GB. [2018-11-18 15:14:38,453 INFO L168 Benchmark]: CDTParser took 0.15 ms. Allocated memory is still 1.0 GB. Free memory is still 982.9 MB. There was no memory consumed. Max. memory is 11.5 GB. [2018-11-18 15:14:38,453 INFO L168 Benchmark]: CACSL2BoogieTranslator took 530.18 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 139.5 MB). Free memory was 956.6 MB in the beginning and 1.1 GB in the end (delta: -153.3 MB). Peak memory consumption was 57.7 MB. Max. memory is 11.5 GB. [2018-11-18 15:14:38,453 INFO L168 Benchmark]: Boogie Procedure Inliner took 208.35 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.0 GB in the end (delta: 91.3 MB). Peak memory consumption was 91.3 MB. Max. memory is 11.5 GB. [2018-11-18 15:14:38,454 INFO L168 Benchmark]: Boogie Preprocessor took 307.75 ms. Allocated memory is still 1.2 GB. Free memory was 1.0 GB in the beginning and 933.8 MB in the end (delta: 84.8 MB). Peak memory consumption was 84.8 MB. Max. memory is 11.5 GB. [2018-11-18 15:14:38,454 INFO L168 Benchmark]: RCFGBuilder took 8814.92 ms. Allocated memory was 1.2 GB in the beginning and 1.9 GB in the end (delta: 705.2 MB). Free memory was 933.8 MB in the beginning and 1.7 GB in the end (delta: -773.4 MB). Peak memory consumption was 550.6 MB. Max. memory is 11.5 GB. [2018-11-18 15:14:38,454 INFO L168 Benchmark]: BuchiAutomizer took 88139.46 ms. Allocated memory was 1.9 GB in the beginning and 6.6 GB in the end (delta: 4.7 GB). Free memory was 1.7 GB in the beginning and 3.6 GB in the end (delta: -1.9 GB). Peak memory consumption was 2.8 GB. Max. memory is 11.5 GB. [2018-11-18 15:14:38,455 INFO L168 Benchmark]: Witness Printer took 3.54 ms. Allocated memory is still 6.6 GB. Free memory is still 3.6 GB. There was no memory consumed. Max. memory is 11.5 GB. [2018-11-18 15:14:38,457 INFO L336 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.15 ms. Allocated memory is still 1.0 GB. Free memory is still 982.9 MB. There was no memory consumed. Max. memory is 11.5 GB. * CACSL2BoogieTranslator took 530.18 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 139.5 MB). Free memory was 956.6 MB in the beginning and 1.1 GB in the end (delta: -153.3 MB). Peak memory consumption was 57.7 MB. Max. memory is 11.5 GB. * Boogie Procedure Inliner took 208.35 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.0 GB in the end (delta: 91.3 MB). Peak memory consumption was 91.3 MB. Max. memory is 11.5 GB. * Boogie Preprocessor took 307.75 ms. Allocated memory is still 1.2 GB. Free memory was 1.0 GB in the beginning and 933.8 MB in the end (delta: 84.8 MB). Peak memory consumption was 84.8 MB. Max. memory is 11.5 GB. * RCFGBuilder took 8814.92 ms. Allocated memory was 1.2 GB in the beginning and 1.9 GB in the end (delta: 705.2 MB). Free memory was 933.8 MB in the beginning and 1.7 GB in the end (delta: -773.4 MB). Peak memory consumption was 550.6 MB. Max. memory is 11.5 GB. * BuchiAutomizer took 88139.46 ms. Allocated memory was 1.9 GB in the beginning and 6.6 GB in the end (delta: 4.7 GB). Free memory was 1.7 GB in the beginning and 3.6 GB in the end (delta: -1.9 GB). Peak memory consumption was 2.8 GB. Max. memory is 11.5 GB. * Witness Printer took 3.54 ms. Allocated memory is still 6.6 GB. Free memory is still 3.6 GB. There was no memory consumed. Max. memory is 11.5 GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: Constructed decomposition of program Your program was decomposed into 6 terminating modules (5 trivial, 1 deterministic, 0 nondeterministic). One deterministic module has affine ranking function cleanupTimeShifts + -1 * i and consists of 5 locations. 5 modules have a trivial ranking function, the largest among these consists of 8 locations. - StatisticsResult: Timing statistics BüchiAutomizer plugin needed 88.1s and 6 iterations. TraceHistogramMax:1. Analysis of lassos took 8.2s. Construction of modules took 44.0s. Büchi inclusion checks took 15.6s. Highest rank in rank-based complementation 3. Minimization of det autom 6. Minimization of nondet autom 0. Automata minimization 4.5s AutomataMinimizationTime, 4 MinimizatonAttempts, 869273 StatesRemovedByMinimization, 4 NontrivialMinimizations. Non-live state removal took 13.9s Buchi closure took 0.5s. Biggest automaton had 89647 states and ocurred in iteration 3. Nontrivial modules had stage [1, 0, 0, 0, 0]. InterpolantCoveringCapabilityFinite: 0/0 InterpolantCoveringCapabilityBuchi: 0/0 HoareTripleCheckerStatistics: 140920 SDtfs, 775201 SDslu, 791233 SDs, 0 SdLazy, 61849 SolverSat, 8605 SolverUnsat, 0 SolverUnknown, 0 SolverNotchecked, 44.0s Time LassoAnalysisResults: nont0 unkn0 SFLI0 SFLT0 conc0 concLT0 SILN0 SILU0 SILI4 SILT1 lasso0 LassoPreprocessingBenchmarks: Lassos: inital176 mio100 ax100 hnf100 lsp21 ukn100 mio100 lsp100 div100 bol100 ite100 ukn100 eq224 hnf86 smp100 dnf150 smp100 tf101 neg98 sie103 LassoTerminationAnalysisBenchmarks: ConstraintsSatisfiability: unsat Degree: 0 Time: 11ms VariablesStem: 0 VariablesLoop: 9 DisjunctsStem: 1 DisjunctsLoop: 2 SupportingInvariants: 0 MotzkinApplications: 4 LassoTerminationAnalysisBenchmarks: LassoNonterminationAnalysisSatFixpoint: 40 LassoNonterminationAnalysisSatUnbounded: 0 LassoNonterminationAnalysisUnsat: 1 LassoNonterminationAnalysisUnknown: 0 LassoNonterminationAnalysisTime: 1.2s - TerminationAnalysisResult: Termination proven Buchi Automizer proved that your program is terminating RESULT: Ultimate proved your program to be correct! Received shutdown request...