./Ultimate.py --spec ../../sv-benchmarks/c/Termination.prp --file ../../sv-benchmarks/c/product-lines/elevator_spec14_product27_true-unreach-call_true-termination.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for termination Using default analysis Version 5842f4b8 Calling Ultimate with: java -Dosgi.configuration.area=/tmp/vcloud-vcloud-master/worker/working_dir_ce920c4a-54ba-49d1-94ac-e4efc00bba70/bin-2019/uautomizer/data/config -Xmx12G -Xms1G -jar /tmp/vcloud-vcloud-master/worker/working_dir_ce920c4a-54ba-49d1-94ac-e4efc00bba70/bin-2019/uautomizer/plugins/org.eclipse.equinox.launcher_1.3.100.v20150511-1540.jar -data @noDefault -ultimatedata /tmp/vcloud-vcloud-master/worker/working_dir_ce920c4a-54ba-49d1-94ac-e4efc00bba70/bin-2019/uautomizer/data -tc /tmp/vcloud-vcloud-master/worker/working_dir_ce920c4a-54ba-49d1-94ac-e4efc00bba70/bin-2019/uautomizer/config/AutomizerTermination.xml -i ../../sv-benchmarks/c/product-lines/elevator_spec14_product27_true-unreach-call_true-termination.cil.c -s /tmp/vcloud-vcloud-master/worker/working_dir_ce920c4a-54ba-49d1-94ac-e4efc00bba70/bin-2019/uautomizer/config/svcomp-Termination-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud-vcloud-master/worker/working_dir_ce920c4a-54ba-49d1-94ac-e4efc00bba70/bin-2019/uautomizer --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(F end) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 20365c9692f242bd46105acd67423fd99416f441 ...................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................... Execution finished normally Writing output log to file Ultimate.log Result: TRUE --- Real Ultimate output --- This is Ultimate 0.1.23-5842f4b [2018-11-18 11:10:08,123 INFO L170 SettingsManager]: Resetting all preferences to default values... [2018-11-18 11:10:08,124 INFO L174 SettingsManager]: Resetting UltimateCore preferences to default values [2018-11-18 11:10:08,131 INFO L177 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2018-11-18 11:10:08,132 INFO L174 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2018-11-18 11:10:08,132 INFO L174 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2018-11-18 11:10:08,133 INFO L174 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2018-11-18 11:10:08,134 INFO L174 SettingsManager]: Resetting LassoRanker preferences to default values [2018-11-18 11:10:08,135 INFO L174 SettingsManager]: Resetting Reaching Definitions preferences to default values [2018-11-18 11:10:08,136 INFO L174 SettingsManager]: Resetting SyntaxChecker preferences to default values [2018-11-18 11:10:08,136 INFO L177 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2018-11-18 11:10:08,137 INFO L174 SettingsManager]: Resetting LTL2Aut preferences to default values [2018-11-18 11:10:08,137 INFO L174 SettingsManager]: Resetting PEA to Boogie preferences to default values [2018-11-18 11:10:08,138 INFO L174 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2018-11-18 11:10:08,139 INFO L174 SettingsManager]: Resetting ChcToBoogie preferences to default values [2018-11-18 11:10:08,139 INFO L174 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2018-11-18 11:10:08,140 INFO L174 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2018-11-18 11:10:08,141 INFO L174 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2018-11-18 11:10:08,142 INFO L174 SettingsManager]: Resetting CodeCheck preferences to default values [2018-11-18 11:10:08,143 INFO L174 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2018-11-18 11:10:08,144 INFO L174 SettingsManager]: Resetting RCFGBuilder preferences to default values [2018-11-18 11:10:08,145 INFO L174 SettingsManager]: Resetting TraceAbstraction preferences to default values [2018-11-18 11:10:08,146 INFO L177 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2018-11-18 11:10:08,147 INFO L177 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2018-11-18 11:10:08,147 INFO L174 SettingsManager]: Resetting TreeAutomizer preferences to default values [2018-11-18 11:10:08,147 INFO L174 SettingsManager]: Resetting IcfgTransformer preferences to default values [2018-11-18 11:10:08,148 INFO L174 SettingsManager]: Resetting Boogie Printer preferences to default values [2018-11-18 11:10:08,149 INFO L174 SettingsManager]: Resetting ReqPrinter preferences to default values [2018-11-18 11:10:08,149 INFO L174 SettingsManager]: Resetting Witness Printer preferences to default values [2018-11-18 11:10:08,150 INFO L177 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2018-11-18 11:10:08,150 INFO L174 SettingsManager]: Resetting CDTParser preferences to default values [2018-11-18 11:10:08,150 INFO L177 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2018-11-18 11:10:08,151 INFO L177 SettingsManager]: ReqParser provides no preferences, ignoring... [2018-11-18 11:10:08,151 INFO L174 SettingsManager]: Resetting SmtParser preferences to default values [2018-11-18 11:10:08,151 INFO L174 SettingsManager]: Resetting Witness Parser preferences to default values [2018-11-18 11:10:08,152 INFO L181 SettingsManager]: Finished resetting all preferences to default values... [2018-11-18 11:10:08,152 INFO L98 SettingsManager]: Beginning loading settings from /tmp/vcloud-vcloud-master/worker/working_dir_ce920c4a-54ba-49d1-94ac-e4efc00bba70/bin-2019/uautomizer/config/svcomp-Termination-32bit-Automizer_Default.epf [2018-11-18 11:10:08,163 INFO L110 SettingsManager]: Loading preferences was successful [2018-11-18 11:10:08,163 INFO L112 SettingsManager]: Preferences different from defaults after loading the file: [2018-11-18 11:10:08,164 INFO L131 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2018-11-18 11:10:08,164 INFO L133 SettingsManager]: * Create parallel compositions if possible=false [2018-11-18 11:10:08,164 INFO L133 SettingsManager]: * Use SBE=true [2018-11-18 11:10:08,165 INFO L131 SettingsManager]: Preferences of BuchiAutomizer differ from their defaults: [2018-11-18 11:10:08,165 INFO L133 SettingsManager]: * NCSB implementation=INTSET_LAZY3 [2018-11-18 11:10:08,165 INFO L133 SettingsManager]: * Use old map elimination=false [2018-11-18 11:10:08,165 INFO L133 SettingsManager]: * Use external solver (rank synthesis)=false [2018-11-18 11:10:08,165 INFO L133 SettingsManager]: * Use only trivial implications for array writes=true [2018-11-18 11:10:08,165 INFO L133 SettingsManager]: * Rank analysis=LINEAR_WITH_GUESSES [2018-11-18 11:10:08,165 INFO L131 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2018-11-18 11:10:08,166 INFO L133 SettingsManager]: * sizeof long=4 [2018-11-18 11:10:08,166 INFO L133 SettingsManager]: * Check unreachability of error function in SV-COMP mode=false [2018-11-18 11:10:08,166 INFO L133 SettingsManager]: * Overapproximate operations on floating types=true [2018-11-18 11:10:08,166 INFO L133 SettingsManager]: * sizeof POINTER=4 [2018-11-18 11:10:08,166 INFO L133 SettingsManager]: * Check division by zero=IGNORE [2018-11-18 11:10:08,166 INFO L133 SettingsManager]: * Pointer to allocated memory at dereference=ASSUME [2018-11-18 11:10:08,166 INFO L133 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=ASSUME [2018-11-18 11:10:08,166 INFO L133 SettingsManager]: * Check array bounds for arrays that are off heap=ASSUME [2018-11-18 11:10:08,167 INFO L133 SettingsManager]: * sizeof long double=12 [2018-11-18 11:10:08,167 INFO L133 SettingsManager]: * Check if freed pointer was valid=false [2018-11-18 11:10:08,167 INFO L133 SettingsManager]: * Assume nondeterminstic values are in range=false [2018-11-18 11:10:08,167 INFO L133 SettingsManager]: * Use constant arrays=true [2018-11-18 11:10:08,167 INFO L133 SettingsManager]: * Pointer base address is valid at dereference=ASSUME [2018-11-18 11:10:08,167 INFO L131 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2018-11-18 11:10:08,167 INFO L133 SettingsManager]: * Size of a code block=SequenceOfStatements [2018-11-18 11:10:08,168 INFO L133 SettingsManager]: * To the following directory=/home/matthias/ultimate/dump [2018-11-18 11:10:08,168 INFO L131 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2018-11-18 11:10:08,168 INFO L133 SettingsManager]: * Trace refinement strategy=CAMEL [2018-11-18 11:10:08,168 INFO L133 SettingsManager]: * Dump automata to the following directory=/home/matthias/ultimate/dump/auto [2018-11-18 11:10:08,169 INFO L131 SettingsManager]: Preferences of IcfgTransformer differ from their defaults: [2018-11-18 11:10:08,169 INFO L133 SettingsManager]: * TransformationType=MODULO_NEIGHBOR Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud-vcloud-master/worker/working_dir_ce920c4a-54ba-49d1-94ac-e4efc00bba70/bin-2019/uautomizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(F end) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 20365c9692f242bd46105acd67423fd99416f441 [2018-11-18 11:10:08,189 INFO L81 nceAwareModelManager]: Repository-Root is: /tmp [2018-11-18 11:10:08,197 INFO L258 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2018-11-18 11:10:08,199 INFO L214 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2018-11-18 11:10:08,200 INFO L271 PluginConnector]: Initializing CDTParser... [2018-11-18 11:10:08,201 INFO L276 PluginConnector]: CDTParser initialized [2018-11-18 11:10:08,201 INFO L418 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud-vcloud-master/worker/working_dir_ce920c4a-54ba-49d1-94ac-e4efc00bba70/bin-2019/uautomizer/../../sv-benchmarks/c/product-lines/elevator_spec14_product27_true-unreach-call_true-termination.cil.c [2018-11-18 11:10:08,237 INFO L221 CDTParser]: Created temporary CDT project at /tmp/vcloud-vcloud-master/worker/working_dir_ce920c4a-54ba-49d1-94ac-e4efc00bba70/bin-2019/uautomizer/data/03974eef3/9f32d3d8887c4142b37e1a11fe8e012d/FLAGe89e711af [2018-11-18 11:10:08,729 INFO L307 CDTParser]: Found 1 translation units. [2018-11-18 11:10:08,729 INFO L161 CDTParser]: Scanning /tmp/vcloud-vcloud-master/worker/working_dir_ce920c4a-54ba-49d1-94ac-e4efc00bba70/sv-benchmarks/c/product-lines/elevator_spec14_product27_true-unreach-call_true-termination.cil.c [2018-11-18 11:10:08,743 INFO L355 CDTParser]: About to delete temporary CDT project at /tmp/vcloud-vcloud-master/worker/working_dir_ce920c4a-54ba-49d1-94ac-e4efc00bba70/bin-2019/uautomizer/data/03974eef3/9f32d3d8887c4142b37e1a11fe8e012d/FLAGe89e711af [2018-11-18 11:10:09,217 INFO L363 CDTParser]: Successfully deleted /tmp/vcloud-vcloud-master/worker/working_dir_ce920c4a-54ba-49d1-94ac-e4efc00bba70/bin-2019/uautomizer/data/03974eef3/9f32d3d8887c4142b37e1a11fe8e012d [2018-11-18 11:10:09,219 INFO L296 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2018-11-18 11:10:09,220 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2018-11-18 11:10:09,221 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2018-11-18 11:10:09,221 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2018-11-18 11:10:09,223 INFO L276 PluginConnector]: CACSL2BoogieTranslator initialized [2018-11-18 11:10:09,223 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 18.11 11:10:09" (1/1) ... [2018-11-18 11:10:09,225 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@209e89ff and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 11:10:09, skipping insertion in model container [2018-11-18 11:10:09,225 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 18.11 11:10:09" (1/1) ... [2018-11-18 11:10:09,231 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2018-11-18 11:10:09,273 INFO L176 MainTranslator]: Built tables and reachable declarations [2018-11-18 11:10:09,660 INFO L201 PostProcessor]: Analyzing one entry point: main [2018-11-18 11:10:09,668 INFO L191 MainTranslator]: Completed pre-run [2018-11-18 11:10:09,736 INFO L201 PostProcessor]: Analyzing one entry point: main [2018-11-18 11:10:09,764 INFO L195 MainTranslator]: Completed translation [2018-11-18 11:10:09,764 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 11:10:09 WrapperNode [2018-11-18 11:10:09,764 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2018-11-18 11:10:09,765 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2018-11-18 11:10:09,765 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2018-11-18 11:10:09,765 INFO L276 PluginConnector]: Boogie Procedure Inliner initialized [2018-11-18 11:10:09,770 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 11:10:09" (1/1) ... [2018-11-18 11:10:09,792 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 11:10:09" (1/1) ... [2018-11-18 11:10:09,968 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2018-11-18 11:10:09,969 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2018-11-18 11:10:09,969 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2018-11-18 11:10:09,969 INFO L276 PluginConnector]: Boogie Preprocessor initialized [2018-11-18 11:10:09,977 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 11:10:09" (1/1) ... [2018-11-18 11:10:09,977 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 11:10:09" (1/1) ... [2018-11-18 11:10:10,004 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 11:10:09" (1/1) ... [2018-11-18 11:10:10,004 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 11:10:09" (1/1) ... [2018-11-18 11:10:10,065 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 11:10:09" (1/1) ... [2018-11-18 11:10:10,125 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 11:10:09" (1/1) ... [2018-11-18 11:10:10,146 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 11:10:09" (1/1) ... [2018-11-18 11:10:10,183 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2018-11-18 11:10:10,184 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2018-11-18 11:10:10,184 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2018-11-18 11:10:10,184 INFO L276 PluginConnector]: RCFGBuilder initialized [2018-11-18 11:10:10,185 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 11:10:09" (1/1) ... No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_ce920c4a-54ba-49d1-94ac-e4efc00bba70/bin-2019/uautomizer/z3 Starting monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 11:10:10,235 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.alloc [2018-11-18 11:10:10,236 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2018-11-18 11:10:10,236 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2018-11-18 11:10:17,149 INFO L278 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2018-11-18 11:10:17,149 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 18.11 11:10:17 BoogieIcfgContainer [2018-11-18 11:10:17,149 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2018-11-18 11:10:17,150 INFO L113 PluginConnector]: ------------------------BuchiAutomizer---------------------------- [2018-11-18 11:10:17,150 INFO L271 PluginConnector]: Initializing BuchiAutomizer... [2018-11-18 11:10:17,152 INFO L276 PluginConnector]: BuchiAutomizer initialized [2018-11-18 11:10:17,152 INFO L102 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2018-11-18 11:10:17,153 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "CDTParser AST 18.11 11:10:09" (1/3) ... [2018-11-18 11:10:17,153 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@38035698 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 18.11 11:10:17, skipping insertion in model container [2018-11-18 11:10:17,153 INFO L102 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2018-11-18 11:10:17,154 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 11:10:09" (2/3) ... [2018-11-18 11:10:17,154 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@38035698 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 18.11 11:10:17, skipping insertion in model container [2018-11-18 11:10:17,154 INFO L102 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2018-11-18 11:10:17,154 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 18.11 11:10:17" (3/3) ... [2018-11-18 11:10:17,155 INFO L375 chiAutomizerObserver]: Analyzing ICFG elevator_spec14_product27_true-unreach-call_true-termination.cil.c [2018-11-18 11:10:17,186 INFO L133 ementStrategyFactory]: Using default assertion order modulation [2018-11-18 11:10:17,186 INFO L374 BuchiCegarLoop]: Interprodecural is true [2018-11-18 11:10:17,186 INFO L375 BuchiCegarLoop]: Hoare is false [2018-11-18 11:10:17,186 INFO L376 BuchiCegarLoop]: Compute interpolants for ForwardPredicates [2018-11-18 11:10:17,187 INFO L377 BuchiCegarLoop]: Backedges is STRAIGHT_LINE [2018-11-18 11:10:17,187 INFO L378 BuchiCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2018-11-18 11:10:17,187 INFO L379 BuchiCegarLoop]: Difference is false [2018-11-18 11:10:17,187 INFO L380 BuchiCegarLoop]: Minimize is MINIMIZE_SEVPA [2018-11-18 11:10:17,187 INFO L383 BuchiCegarLoop]: ======== Iteration 0==of CEGAR loop == BuchiCegarLoop======== [2018-11-18 11:10:17,244 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 6307 states. [2018-11-18 11:10:17,325 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1278 [2018-11-18 11:10:17,325 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-18 11:10:17,325 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-18 11:10:17,338 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 11:10:17,338 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 11:10:17,338 INFO L442 BuchiCegarLoop]: ======== Iteration 1============ [2018-11-18 11:10:17,339 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 6307 states. [2018-11-18 11:10:17,369 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1278 [2018-11-18 11:10:17,370 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-18 11:10:17,370 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-18 11:10:17,372 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 11:10:17,373 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 11:10:17,380 INFO L794 eck$LassoCheckResult]: Stem: 2512#ULTIMATE.startENTRYtrue assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];call #t~string53.base, #t~string53.offset := #Ultimate.alloc(10);call #t~string55.base, #t~string55.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string55.base,#t~string55.offset := 91];#memory_int := #memory_int[#t~string55.base,1 + #t~string55.offset := 95];#memory_int := #memory_int[#t~string55.base,2 + #t~string55.offset := 93];#memory_int := #memory_int[#t~string55.base,3 + #t~string55.offset := 0];call #t~string57.base, #t~string57.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string57.base,#t~string57.offset := 91];#memory_int := #memory_int[#t~string57.base,1 + #t~string57.offset := 93];#memory_int := #memory_int[#t~string57.base,2 + #t~string57.offset := 32];#memory_int := #memory_int[#t~string57.base,3 + #t~string57.offset := 0];call #t~string59.base, #t~string59.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string59.base,#t~string59.offset := 32];#memory_int := #memory_int[#t~string59.base,1 + #t~string59.offset := 97];#memory_int := #memory_int[#t~string59.base,2 + #t~string59.offset := 116];#memory_int := #memory_int[#t~string59.base,3 + #t~string59.offset := 32];#memory_int := #memory_int[#t~string59.base,4 + #t~string59.offset := 0];call #t~string61.base, #t~string61.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string61.base,#t~string61.offset := 37];#memory_int := #memory_int[#t~string61.base,1 + #t~string61.offset := 105];#memory_int := #memory_int[#t~string61.base,2 + #t~string61.offset := 0];call #t~string63.base, #t~string63.offset := #Ultimate.alloc(10);call #t~string65.base, #t~string65.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string65.base,#t~string65.offset := 117];#memory_int := #memory_int[#t~string65.base,1 + #t~string65.offset := 112];#memory_int := #memory_int[#t~string65.base,2 + #t~string65.offset := 0];call #t~string67.base, #t~string67.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string67.base,#t~string67.offset := 100];#memory_int := #memory_int[#t~string67.base,1 + #t~string67.offset := 111];#memory_int := #memory_int[#t~string67.base,2 + #t~string67.offset := 119];#memory_int := #memory_int[#t~string67.base,3 + #t~string67.offset := 110];#memory_int := #memory_int[#t~string67.base,4 + #t~string67.offset := 0];call #t~string69.base, #t~string69.offset := #Ultimate.alloc(7);#memory_int := #memory_int[#t~string69.base,#t~string69.offset := 32];#memory_int := #memory_int[#t~string69.base,1 + #t~string69.offset := 73];#memory_int := #memory_int[#t~string69.base,2 + #t~string69.offset := 76];#memory_int := #memory_int[#t~string69.base,3 + #t~string69.offset := 95];#memory_int := #memory_int[#t~string69.base,4 + #t~string69.offset := 112];#memory_int := #memory_int[#t~string69.base,5 + #t~string69.offset := 58];#memory_int := #memory_int[#t~string69.base,6 + #t~string69.offset := 0];call #t~string71.base, #t~string71.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string71.base,#t~string71.offset := 32];#memory_int := #memory_int[#t~string71.base,1 + #t~string71.offset := 37];#memory_int := #memory_int[#t~string71.base,2 + #t~string71.offset := 105];#memory_int := #memory_int[#t~string71.base,3 + #t~string71.offset := 0];call #t~string73.base, #t~string73.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string73.base,#t~string73.offset := 32];#memory_int := #memory_int[#t~string73.base,1 + #t~string73.offset := 37];#memory_int := #memory_int[#t~string73.base,2 + #t~string73.offset := 105];#memory_int := #memory_int[#t~string73.base,3 + #t~string73.offset := 0];call #t~string75.base, #t~string75.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string75.base,#t~string75.offset := 32];#memory_int := #memory_int[#t~string75.base,1 + #t~string75.offset := 37];#memory_int := #memory_int[#t~string75.base,2 + #t~string75.offset := 105];#memory_int := #memory_int[#t~string75.base,3 + #t~string75.offset := 0];call #t~string77.base, #t~string77.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string77.base,#t~string77.offset := 32];#memory_int := #memory_int[#t~string77.base,1 + #t~string77.offset := 37];#memory_int := #memory_int[#t~string77.base,2 + #t~string77.offset := 105];#memory_int := #memory_int[#t~string77.base,3 + #t~string77.offset := 0];call #t~string79.base, #t~string79.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string79.base,#t~string79.offset := 32];#memory_int := #memory_int[#t~string79.base,1 + #t~string79.offset := 37];#memory_int := #memory_int[#t~string79.base,2 + #t~string79.offset := 105];#memory_int := #memory_int[#t~string79.base,3 + #t~string79.offset := 0];call #t~string81.base, #t~string81.offset := #Ultimate.alloc(6);#memory_int := #memory_int[#t~string81.base,#t~string81.offset := 32];#memory_int := #memory_int[#t~string81.base,1 + #t~string81.offset := 70];#memory_int := #memory_int[#t~string81.base,2 + #t~string81.offset := 95];#memory_int := #memory_int[#t~string81.base,3 + #t~string81.offset := 112];#memory_int := #memory_int[#t~string81.base,4 + #t~string81.offset := 58];#memory_int := #memory_int[#t~string81.base,5 + #t~string81.offset := 0];call #t~string84.base, #t~string84.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string84.base,#t~string84.offset := 32];#memory_int := #memory_int[#t~string84.base,1 + #t~string84.offset := 37];#memory_int := #memory_int[#t~string84.base,2 + #t~string84.offset := 105];#memory_int := #memory_int[#t~string84.base,3 + #t~string84.offset := 0];call #t~string87.base, #t~string87.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string87.base,#t~string87.offset := 32];#memory_int := #memory_int[#t~string87.base,1 + #t~string87.offset := 37];#memory_int := #memory_int[#t~string87.base,2 + #t~string87.offset := 105];#memory_int := #memory_int[#t~string87.base,3 + #t~string87.offset := 0];call #t~string90.base, #t~string90.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string90.base,#t~string90.offset := 32];#memory_int := #memory_int[#t~string90.base,1 + #t~string90.offset := 37];#memory_int := #memory_int[#t~string90.base,2 + #t~string90.offset := 105];#memory_int := #memory_int[#t~string90.base,3 + #t~string90.offset := 0];call #t~string93.base, #t~string93.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string93.base,#t~string93.offset := 32];#memory_int := #memory_int[#t~string93.base,1 + #t~string93.offset := 37];#memory_int := #memory_int[#t~string93.base,2 + #t~string93.offset := 105];#memory_int := #memory_int[#t~string93.base,3 + #t~string93.offset := 0];call #t~string96.base, #t~string96.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string96.base,#t~string96.offset := 32];#memory_int := #memory_int[#t~string96.base,1 + #t~string96.offset := 37];#memory_int := #memory_int[#t~string96.base,2 + #t~string96.offset := 105];#memory_int := #memory_int[#t~string96.base,3 + #t~string96.offset := 0];call #t~string98.base, #t~string98.offset := #Ultimate.alloc(2);#memory_int := #memory_int[#t~string98.base,#t~string98.offset := 10];#memory_int := #memory_int[#t~string98.base,1 + #t~string98.offset := 0];call #t~string139.base, #t~string139.offset := #Ultimate.alloc(30);call #t~string140.base, #t~string140.offset := #Ultimate.alloc(9);call #t~string141.base, #t~string141.offset := #Ultimate.alloc(21);call #t~string142.base, #t~string142.offset := #Ultimate.alloc(30);call #t~string143.base, #t~string143.offset := #Ultimate.alloc(9);call #t~string144.base, #t~string144.offset := #Ultimate.alloc(21);call #t~string148.base, #t~string148.offset := #Ultimate.alloc(30);call #t~string149.base, #t~string149.offset := #Ultimate.alloc(9);call #t~string150.base, #t~string150.offset := #Ultimate.alloc(25);call #t~string151.base, #t~string151.offset := #Ultimate.alloc(30);call #t~string152.base, #t~string152.offset := #Ultimate.alloc(9);call #t~string153.base, #t~string153.offset := #Ultimate.alloc(25);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 5895#L-1true assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res;havoc main_#t~ret114, main_~retValue_acc~18, main_~tmp~21;havoc main_~retValue_acc~18;havoc main_~tmp~21;assume { :begin_inline_select_helpers } true; 3687#L2445true assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 4803#L2438true assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res;havoc valid_product_~retValue_acc~23;havoc valid_product_~retValue_acc~23;valid_product_~retValue_acc~23 := 1;valid_product_#res := valid_product_~retValue_acc~23; 4278#L2453true main_#t~ret114 := valid_product_#res;assume { :end_inline_valid_product } true;main_~tmp~21 := main_#t~ret114;havoc main_#t~ret114; 6221#L1952true assume 0 != main_~tmp~21;assume { :begin_inline_setup } true; 4178#L1925true assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret107, bigMacCall_~tmp~18;havoc bigMacCall_~tmp~18;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~25;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~25; 3263#L2551true assume 0 == getOrigin_~person;getOrigin_~retValue_acc~25 := 4;getOrigin_#res := getOrigin_~retValue_acc~25; 2524#L2576true bigMacCall_#t~ret107 := getOrigin_#res;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~18 := bigMacCall_#t~ret107;havoc bigMacCall_#t~ret107;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~18;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 4258#L2979true assume 0 == initPersonOnFloor_~floor; 4238#L2980true assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 2830#L3087-1true assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 4722#L2771true assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 4971#L2783-2true assume { :end_inline_callOnFloor } true; 4651#L3123true assume { :end_inline_initPersonOnFloor } true; 4821#L1730true assume { :end_inline_bigMacCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 516#L2708true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 2827#L2735true isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 6214#L1597true stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 3410#L981true assume 0 != stopRequestedAtCurrentFloor_~tmp~9;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 4397#L312true stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 3353#L985true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 2759#L998true timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 1115#L1134true assume !(0 != timeShift_~tmp___9~2); 4070#L1225true assume !(1 == ~doorState~0); 4071#L1225-2true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 519#L2708-3true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 2815#L2735-3true isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 6215#L1597-1true stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 3680#L864true assume 0 != stopRequestedInDirection_~tmp___0~2;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 4400#L312-1true stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 5973#L877true timeShift_#t~ret49 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 5957#L1233true assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 1650#L921true assume !(1 == ~currentHeading~0); 2126#L931true assume !(0 == ~currentFloorID~0); 2129#L931-2true assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1867#L937-1true assume { :end_inline_continueInDirection } true; 6275#L1242-2true assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret157, __utac_acc__Specification14_spec__1_#t~ret158, __utac_acc__Specification14_spec__1_#t~ret159, __utac_acc__Specification14_spec__1_#t~ret160, __utac_acc__Specification14_spec__1_~tmp~27, __utac_acc__Specification14_spec__1_~tmp___0~12, __utac_acc__Specification14_spec__1_~tmp___1~8, __utac_acc__Specification14_spec__1_~tmp___2~6;havoc __utac_acc__Specification14_spec__1_~tmp~27;havoc __utac_acc__Specification14_spec__1_~tmp___0~12;havoc __utac_acc__Specification14_spec__1_~tmp___1~8;havoc __utac_acc__Specification14_spec__1_~tmp___2~6;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 473#L2708-25true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 2907#L2735-25true isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 6217#L1597-3true __utac_acc__Specification14_spec__1_#t~ret157 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~6 := __utac_acc__Specification14_spec__1_#t~ret157;havoc __utac_acc__Specification14_spec__1_#t~ret157; 6176#L2482true assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~6); 6180#L2482-1true assume { :end_inline___utac_acc__Specification14_spec__1 } true; 5246#L1257true assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 477#L2708-26true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 2908#L2735-26true isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 6209#L1597-4true stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 3403#L981-1true assume 0 != stopRequestedAtCurrentFloor_~tmp~9;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 4380#L312-4true stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 3355#L985-1true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 2760#L998-1true timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 1119#L1134-2true assume !(0 != timeShift_~tmp___9~2); 4072#L1225-3true assume !(1 == ~doorState~0); 4066#L1225-5true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 459#L2708-29true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 2892#L2735-29true isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 6210#L1597-5true stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 3671#L864-2true assume 0 != stopRequestedInDirection_~tmp___0~2;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 4383#L312-5true stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 5977#L877-2true timeShift_#t~ret49 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 5958#L1233-2true assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 1660#L921-3true assume !(1 == ~currentHeading~0); 2123#L931-9true assume !(0 == ~currentFloorID~0); 2102#L931-11true assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1862#L937-7true assume { :end_inline_continueInDirection } true; 6279#L1242-5true assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret157, __utac_acc__Specification14_spec__1_#t~ret158, __utac_acc__Specification14_spec__1_#t~ret159, __utac_acc__Specification14_spec__1_#t~ret160, __utac_acc__Specification14_spec__1_~tmp~27, __utac_acc__Specification14_spec__1_~tmp___0~12, __utac_acc__Specification14_spec__1_~tmp___1~8, __utac_acc__Specification14_spec__1_~tmp___2~6;havoc __utac_acc__Specification14_spec__1_~tmp~27;havoc __utac_acc__Specification14_spec__1_~tmp___0~12;havoc __utac_acc__Specification14_spec__1_~tmp___1~8;havoc __utac_acc__Specification14_spec__1_~tmp___2~6;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 263#L2708-51true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 3539#L2735-51true isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 6212#L1597-7true __utac_acc__Specification14_spec__1_#t~ret157 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~6 := __utac_acc__Specification14_spec__1_#t~ret157;havoc __utac_acc__Specification14_spec__1_#t~ret157; 6185#L2482-2true assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~6); 6182#L2482-3true assume { :end_inline___utac_acc__Specification14_spec__1 } true; 5249#L1257-1true assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 268#L2708-52true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 3538#L2735-52true isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 6213#L1597-8true stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 3404#L981-2true assume 0 != stopRequestedAtCurrentFloor_~tmp~9;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 4390#L312-8true stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 3357#L985-2true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 2750#L998-2true timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 1124#L1134-4true assume !(0 != timeShift_~tmp___9~2); 4067#L1225-6true assume !(1 == ~doorState~0); 4068#L1225-8true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 240#L2708-55true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 3533#L2735-55true isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 6203#L1597-9true stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 3674#L864-4true assume 0 != stopRequestedInDirection_~tmp___0~2;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 4393#L312-9true stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 6023#L877-4true timeShift_#t~ret49 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 5952#L1233-4true assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 1731#L921-6true assume !(1 == ~currentHeading~0); 2095#L931-18true assume !(0 == ~currentFloorID~0); 2098#L931-20true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1856#L937-13true assume { :end_inline_continueInDirection } true; 6271#L1242-8true assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret157, __utac_acc__Specification14_spec__1_#t~ret158, __utac_acc__Specification14_spec__1_#t~ret159, __utac_acc__Specification14_spec__1_#t~ret160, __utac_acc__Specification14_spec__1_~tmp~27, __utac_acc__Specification14_spec__1_~tmp___0~12, __utac_acc__Specification14_spec__1_~tmp___1~8, __utac_acc__Specification14_spec__1_~tmp___2~6;havoc __utac_acc__Specification14_spec__1_~tmp~27;havoc __utac_acc__Specification14_spec__1_~tmp___0~12;havoc __utac_acc__Specification14_spec__1_~tmp___1~8;havoc __utac_acc__Specification14_spec__1_~tmp___2~6;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 400#L2708-77true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 3511#L2735-77true isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 6205#L1597-11true __utac_acc__Specification14_spec__1_#t~ret157 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~6 := __utac_acc__Specification14_spec__1_#t~ret157;havoc __utac_acc__Specification14_spec__1_#t~ret157; 6160#L2482-4true assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~6); 6166#L2482-5true assume { :end_inline___utac_acc__Specification14_spec__1 } true; 5251#L1257-2true assume { :end_inline_timeShift } true; 3731#L1742true assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret102, bobCall_~tmp~13;havoc bobCall_~tmp~13;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~25;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~25; 3269#L2551-1true assume 0 == getOrigin_~person;getOrigin_~retValue_acc~25 := 4;getOrigin_#res := getOrigin_~retValue_acc~25; 2522#L2576-1true bobCall_#t~ret102 := getOrigin_#res;assume { :end_inline_getOrigin } true;bobCall_~tmp~13 := bobCall_#t~ret102;havoc bobCall_#t~ret102;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~13;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 4260#L2979-1true assume 0 == initPersonOnFloor_~floor; 4239#L2980-2true assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 2835#L3087-3true assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 4728#L2771-2true assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 4976#L2783-5true assume { :end_inline_callOnFloor } true; 4648#L3123-1true assume { :end_inline_initPersonOnFloor } true; 2976#L1675true assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret108, cleanup_#t~ret109, cleanup_~i~1, cleanup_~tmp~19, cleanup_~tmp___0~8, cleanup_~__cil_tmp4~0;havoc cleanup_~i~1;havoc cleanup_~tmp~19;havoc cleanup_~tmp___0~8;havoc cleanup_~__cil_tmp4~0;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 405#L2708-78true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 3512#L2735-78true isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 6206#L1597-12true stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 3406#L981-3true assume 0 != stopRequestedAtCurrentFloor_~tmp~9;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 4374#L312-12true stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 3358#L985-3true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 2751#L998-3true timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 1108#L1134-6true assume !(0 != timeShift_~tmp___9~2); 4069#L1225-9true assume !(1 == ~doorState~0); 3979#L1225-11true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 374#L2708-81true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 3504#L2735-81true isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 6207#L1597-13true stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 3677#L864-6true assume 0 != stopRequestedInDirection_~tmp___0~2;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 4377#L312-13true stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 6026#L877-6true timeShift_#t~ret49 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 5955#L1233-6true assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 1740#L921-9true assume !(1 == ~currentHeading~0); 2067#L931-27true assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 2073#L931-29true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1849#L937-19true assume { :end_inline_continueInDirection } true; 6273#L1242-11true assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret157, __utac_acc__Specification14_spec__1_#t~ret158, __utac_acc__Specification14_spec__1_#t~ret159, __utac_acc__Specification14_spec__1_#t~ret160, __utac_acc__Specification14_spec__1_~tmp~27, __utac_acc__Specification14_spec__1_~tmp___0~12, __utac_acc__Specification14_spec__1_~tmp___1~8, __utac_acc__Specification14_spec__1_~tmp___2~6;havoc __utac_acc__Specification14_spec__1_~tmp~27;havoc __utac_acc__Specification14_spec__1_~tmp___0~12;havoc __utac_acc__Specification14_spec__1_~tmp___1~8;havoc __utac_acc__Specification14_spec__1_~tmp___2~6;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 325#L2708-103true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 3589#L2735-103true isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 6197#L1597-15true __utac_acc__Specification14_spec__1_#t~ret157 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~6 := __utac_acc__Specification14_spec__1_#t~ret157;havoc __utac_acc__Specification14_spec__1_#t~ret157; 6170#L2482-6true assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~6); 6169#L2482-7true assume { :end_inline___utac_acc__Specification14_spec__1 } true; 5256#L1257-3true assume { :end_inline_timeShift } true;cleanup_~i~1 := 0; 5983#L1757-3true [2018-11-18 11:10:17,381 INFO L796 eck$LassoCheckResult]: Loop: 5983#L1757-3true assume true; 5982#L1757-1true assume !false; 6022#L1758true cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 5967#L1761true assume cleanup_~i~1 < cleanup_~__cil_tmp4~0;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~0;havoc isBlocked_~retValue_acc~0;isBlocked_~retValue_acc~0 := 0;isBlocked_#res := isBlocked_~retValue_acc~0; 4957#L139true cleanup_#t~ret108 := isBlocked_#res;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~8 := cleanup_#t~ret108;havoc cleanup_#t~ret108; 5815#L1765true assume 1 != cleanup_~tmp___0~8; 5806#L1765-1true assume { :begin_inline_isIdle } true;havoc isIdle_#res;havoc isIdle_#t~ret8, isIdle_~retValue_acc~7, isIdle_~tmp~4;havoc isIdle_~retValue_acc~7;havoc isIdle_~tmp~4;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret3, anyStopRequested_#t~ret4, anyStopRequested_#t~ret5, anyStopRequested_#t~ret6, anyStopRequested_#t~ret7, anyStopRequested_~retValue_acc~6, anyStopRequested_~tmp~3, anyStopRequested_~tmp___0~0, anyStopRequested_~tmp___1~0, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~6;havoc anyStopRequested_~tmp~3;havoc anyStopRequested_~tmp___0~0;havoc anyStopRequested_~tmp___1~0;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 328#L2708-104true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 3588#L2735-104true anyStopRequested_#t~ret3 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret3;havoc anyStopRequested_#t~ret3; 179#L420true assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~6 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~6; 4612#L484true isIdle_#t~ret8 := anyStopRequested_#res;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~4 := isIdle_#t~ret8;havoc isIdle_#t~ret8;isIdle_~retValue_acc~7 := (if 0 == isIdle_~tmp~4 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~7; 4816#L497true cleanup_#t~ret109 := isIdle_#res;assume { :end_inline_isIdle } true;cleanup_~tmp~19 := cleanup_#t~ret109;havoc cleanup_#t~ret109; 6045#L1777true assume !(0 != cleanup_~tmp~19);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 316#L2708-109true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 3583#L2735-109true isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 6198#L1597-16true stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 3408#L981-4true assume 0 != stopRequestedAtCurrentFloor_~tmp~9;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 4356#L312-16true stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 3359#L985-4true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 2753#L998-4true timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 1111#L1134-8true assume !(0 != timeShift_~tmp___9~2); 3980#L1225-12true assume !(1 == ~doorState~0); 3981#L1225-14true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 304#L2708-112true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 3585#L2735-112true isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 6199#L1597-17true stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 3667#L864-8true assume 0 != stopRequestedInDirection_~tmp___0~2;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 4359#L312-17true stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 6030#L877-8true timeShift_#t~ret49 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 5946#L1233-8true assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 1720#L921-12true assume !(1 == ~currentHeading~0); 2063#L931-36true assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 2236#L931-38true assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1940#L937-25true assume { :end_inline_continueInDirection } true; 6269#L1242-14true assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret157, __utac_acc__Specification14_spec__1_#t~ret158, __utac_acc__Specification14_spec__1_#t~ret159, __utac_acc__Specification14_spec__1_#t~ret160, __utac_acc__Specification14_spec__1_~tmp~27, __utac_acc__Specification14_spec__1_~tmp___0~12, __utac_acc__Specification14_spec__1_~tmp___1~8, __utac_acc__Specification14_spec__1_~tmp___2~6;havoc __utac_acc__Specification14_spec__1_~tmp~27;havoc __utac_acc__Specification14_spec__1_~tmp___0~12;havoc __utac_acc__Specification14_spec__1_~tmp___1~8;havoc __utac_acc__Specification14_spec__1_~tmp___2~6;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 28#L2708-134true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 3491#L2735-134true isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 6202#L1597-19true __utac_acc__Specification14_spec__1_#t~ret157 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~6 := __utac_acc__Specification14_spec__1_#t~ret157;havoc __utac_acc__Specification14_spec__1_#t~ret157; 6171#L2482-8true assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~6); 6157#L2482-9true assume { :end_inline___utac_acc__Specification14_spec__1 } true; 5259#L1257-4true assume { :end_inline_timeShift } true;cleanup_~i~1 := 1 + cleanup_~i~1; 5983#L1757-3true [2018-11-18 11:10:17,389 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 11:10:17,394 INFO L82 PathProgramCache]: Analyzing trace with hash 241482772, now seen corresponding path program 1 times [2018-11-18 11:10:17,396 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 11:10:17,396 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 11:10:17,432 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 11:10:17,432 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 11:10:17,433 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 11:10:17,508 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 11:10:18,249 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 11:10:18,251 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 11:10:18,251 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-18 11:10:18,255 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-18 11:10:18,255 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 11:10:18,255 INFO L82 PathProgramCache]: Analyzing trace with hash 954966674, now seen corresponding path program 1 times [2018-11-18 11:10:18,255 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 11:10:18,256 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 11:10:18,256 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 11:10:18,257 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 11:10:18,257 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 11:10:18,267 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 11:10:18,332 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 11:10:18,332 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 11:10:18,333 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2018-11-18 11:10:18,334 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-18 11:10:18,343 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2018-11-18 11:10:18,344 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2018-11-18 11:10:18,345 INFO L87 Difference]: Start difference. First operand 6307 states. Second operand 7 states. [2018-11-18 11:10:31,779 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 11:10:31,779 INFO L93 Difference]: Finished difference Result 54103 states and 100319 transitions. [2018-11-18 11:10:31,779 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2018-11-18 11:10:31,781 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 54103 states and 100319 transitions. [2018-11-18 11:10:31,992 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 11785 [2018-11-18 11:10:32,171 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 54103 states to 53995 states and 100199 transitions. [2018-11-18 11:10:32,172 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 53995 [2018-11-18 11:10:32,208 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 53995 [2018-11-18 11:10:32,209 INFO L73 IsDeterministic]: Start isDeterministic. Operand 53995 states and 100199 transitions. [2018-11-18 11:10:32,259 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-18 11:10:32,259 INFO L705 BuchiCegarLoop]: Abstraction has 53995 states and 100199 transitions. [2018-11-18 11:10:32,301 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 53995 states and 100199 transitions. [2018-11-18 11:10:32,786 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 53995 to 18269. [2018-11-18 11:10:32,786 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 18269 states. [2018-11-18 11:10:32,803 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 18269 states to 18269 states and 33880 transitions. [2018-11-18 11:10:32,805 INFO L728 BuchiCegarLoop]: Abstraction has 18269 states and 33880 transitions. [2018-11-18 11:10:32,805 INFO L608 BuchiCegarLoop]: Abstraction has 18269 states and 33880 transitions. [2018-11-18 11:10:32,805 INFO L442 BuchiCegarLoop]: ======== Iteration 2============ [2018-11-18 11:10:32,805 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 18269 states and 33880 transitions. [2018-11-18 11:10:32,848 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 3729 [2018-11-18 11:10:32,848 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-18 11:10:32,849 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-18 11:10:32,851 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 11:10:32,852 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 11:10:32,852 INFO L794 eck$LassoCheckResult]: Stem: 63730#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];call #t~string53.base, #t~string53.offset := #Ultimate.alloc(10);call #t~string55.base, #t~string55.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string55.base,#t~string55.offset := 91];#memory_int := #memory_int[#t~string55.base,1 + #t~string55.offset := 95];#memory_int := #memory_int[#t~string55.base,2 + #t~string55.offset := 93];#memory_int := #memory_int[#t~string55.base,3 + #t~string55.offset := 0];call #t~string57.base, #t~string57.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string57.base,#t~string57.offset := 91];#memory_int := #memory_int[#t~string57.base,1 + #t~string57.offset := 93];#memory_int := #memory_int[#t~string57.base,2 + #t~string57.offset := 32];#memory_int := #memory_int[#t~string57.base,3 + #t~string57.offset := 0];call #t~string59.base, #t~string59.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string59.base,#t~string59.offset := 32];#memory_int := #memory_int[#t~string59.base,1 + #t~string59.offset := 97];#memory_int := #memory_int[#t~string59.base,2 + #t~string59.offset := 116];#memory_int := #memory_int[#t~string59.base,3 + #t~string59.offset := 32];#memory_int := #memory_int[#t~string59.base,4 + #t~string59.offset := 0];call #t~string61.base, #t~string61.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string61.base,#t~string61.offset := 37];#memory_int := #memory_int[#t~string61.base,1 + #t~string61.offset := 105];#memory_int := #memory_int[#t~string61.base,2 + #t~string61.offset := 0];call #t~string63.base, #t~string63.offset := #Ultimate.alloc(10);call #t~string65.base, #t~string65.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string65.base,#t~string65.offset := 117];#memory_int := #memory_int[#t~string65.base,1 + #t~string65.offset := 112];#memory_int := #memory_int[#t~string65.base,2 + #t~string65.offset := 0];call #t~string67.base, #t~string67.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string67.base,#t~string67.offset := 100];#memory_int := #memory_int[#t~string67.base,1 + #t~string67.offset := 111];#memory_int := #memory_int[#t~string67.base,2 + #t~string67.offset := 119];#memory_int := #memory_int[#t~string67.base,3 + #t~string67.offset := 110];#memory_int := #memory_int[#t~string67.base,4 + #t~string67.offset := 0];call #t~string69.base, #t~string69.offset := #Ultimate.alloc(7);#memory_int := #memory_int[#t~string69.base,#t~string69.offset := 32];#memory_int := #memory_int[#t~string69.base,1 + #t~string69.offset := 73];#memory_int := #memory_int[#t~string69.base,2 + #t~string69.offset := 76];#memory_int := #memory_int[#t~string69.base,3 + #t~string69.offset := 95];#memory_int := #memory_int[#t~string69.base,4 + #t~string69.offset := 112];#memory_int := #memory_int[#t~string69.base,5 + #t~string69.offset := 58];#memory_int := #memory_int[#t~string69.base,6 + #t~string69.offset := 0];call #t~string71.base, #t~string71.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string71.base,#t~string71.offset := 32];#memory_int := #memory_int[#t~string71.base,1 + #t~string71.offset := 37];#memory_int := #memory_int[#t~string71.base,2 + #t~string71.offset := 105];#memory_int := #memory_int[#t~string71.base,3 + #t~string71.offset := 0];call #t~string73.base, #t~string73.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string73.base,#t~string73.offset := 32];#memory_int := #memory_int[#t~string73.base,1 + #t~string73.offset := 37];#memory_int := #memory_int[#t~string73.base,2 + #t~string73.offset := 105];#memory_int := #memory_int[#t~string73.base,3 + #t~string73.offset := 0];call #t~string75.base, #t~string75.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string75.base,#t~string75.offset := 32];#memory_int := #memory_int[#t~string75.base,1 + #t~string75.offset := 37];#memory_int := #memory_int[#t~string75.base,2 + #t~string75.offset := 105];#memory_int := #memory_int[#t~string75.base,3 + #t~string75.offset := 0];call #t~string77.base, #t~string77.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string77.base,#t~string77.offset := 32];#memory_int := #memory_int[#t~string77.base,1 + #t~string77.offset := 37];#memory_int := #memory_int[#t~string77.base,2 + #t~string77.offset := 105];#memory_int := #memory_int[#t~string77.base,3 + #t~string77.offset := 0];call #t~string79.base, #t~string79.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string79.base,#t~string79.offset := 32];#memory_int := #memory_int[#t~string79.base,1 + #t~string79.offset := 37];#memory_int := #memory_int[#t~string79.base,2 + #t~string79.offset := 105];#memory_int := #memory_int[#t~string79.base,3 + #t~string79.offset := 0];call #t~string81.base, #t~string81.offset := #Ultimate.alloc(6);#memory_int := #memory_int[#t~string81.base,#t~string81.offset := 32];#memory_int := #memory_int[#t~string81.base,1 + #t~string81.offset := 70];#memory_int := #memory_int[#t~string81.base,2 + #t~string81.offset := 95];#memory_int := #memory_int[#t~string81.base,3 + #t~string81.offset := 112];#memory_int := #memory_int[#t~string81.base,4 + #t~string81.offset := 58];#memory_int := #memory_int[#t~string81.base,5 + #t~string81.offset := 0];call #t~string84.base, #t~string84.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string84.base,#t~string84.offset := 32];#memory_int := #memory_int[#t~string84.base,1 + #t~string84.offset := 37];#memory_int := #memory_int[#t~string84.base,2 + #t~string84.offset := 105];#memory_int := #memory_int[#t~string84.base,3 + #t~string84.offset := 0];call #t~string87.base, #t~string87.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string87.base,#t~string87.offset := 32];#memory_int := #memory_int[#t~string87.base,1 + #t~string87.offset := 37];#memory_int := #memory_int[#t~string87.base,2 + #t~string87.offset := 105];#memory_int := #memory_int[#t~string87.base,3 + #t~string87.offset := 0];call #t~string90.base, #t~string90.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string90.base,#t~string90.offset := 32];#memory_int := #memory_int[#t~string90.base,1 + #t~string90.offset := 37];#memory_int := #memory_int[#t~string90.base,2 + #t~string90.offset := 105];#memory_int := #memory_int[#t~string90.base,3 + #t~string90.offset := 0];call #t~string93.base, #t~string93.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string93.base,#t~string93.offset := 32];#memory_int := #memory_int[#t~string93.base,1 + #t~string93.offset := 37];#memory_int := #memory_int[#t~string93.base,2 + #t~string93.offset := 105];#memory_int := #memory_int[#t~string93.base,3 + #t~string93.offset := 0];call #t~string96.base, #t~string96.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string96.base,#t~string96.offset := 32];#memory_int := #memory_int[#t~string96.base,1 + #t~string96.offset := 37];#memory_int := #memory_int[#t~string96.base,2 + #t~string96.offset := 105];#memory_int := #memory_int[#t~string96.base,3 + #t~string96.offset := 0];call #t~string98.base, #t~string98.offset := #Ultimate.alloc(2);#memory_int := #memory_int[#t~string98.base,#t~string98.offset := 10];#memory_int := #memory_int[#t~string98.base,1 + #t~string98.offset := 0];call #t~string139.base, #t~string139.offset := #Ultimate.alloc(30);call #t~string140.base, #t~string140.offset := #Ultimate.alloc(9);call #t~string141.base, #t~string141.offset := #Ultimate.alloc(21);call #t~string142.base, #t~string142.offset := #Ultimate.alloc(30);call #t~string143.base, #t~string143.offset := #Ultimate.alloc(9);call #t~string144.base, #t~string144.offset := #Ultimate.alloc(21);call #t~string148.base, #t~string148.offset := #Ultimate.alloc(30);call #t~string149.base, #t~string149.offset := #Ultimate.alloc(9);call #t~string150.base, #t~string150.offset := #Ultimate.alloc(25);call #t~string151.base, #t~string151.offset := #Ultimate.alloc(30);call #t~string152.base, #t~string152.offset := #Ultimate.alloc(9);call #t~string153.base, #t~string153.offset := #Ultimate.alloc(25);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 63731#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res;havoc main_#t~ret114, main_~retValue_acc~18, main_~tmp~21;havoc main_~retValue_acc~18;havoc main_~tmp~21;assume { :begin_inline_select_helpers } true; 64858#L2445 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 64859#L2438 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res;havoc valid_product_~retValue_acc~23;havoc valid_product_~retValue_acc~23;valid_product_~retValue_acc~23 := 1;valid_product_#res := valid_product_~retValue_acc~23; 65474#L2453 main_#t~ret114 := valid_product_#res;assume { :end_inline_valid_product } true;main_~tmp~21 := main_#t~ret114;havoc main_#t~ret114; 65475#L1952 assume 0 != main_~tmp~21;assume { :begin_inline_setup } true; 65406#L1925 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret107, bigMacCall_~tmp~18;havoc bigMacCall_~tmp~18;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~25;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~25; 64455#L2551 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~25 := 4;getOrigin_#res := getOrigin_~retValue_acc~25; 63744#L2576 bigMacCall_#t~ret107 := getOrigin_#res;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~18 := bigMacCall_#t~ret107;havoc bigMacCall_#t~ret107;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~18;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 63745#L2979 assume 0 == initPersonOnFloor_~floor; 65458#L2980 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 61147#L3087-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 64164#L2771 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 65673#L2783-2 assume { :end_inline_callOnFloor } true; 65864#L3123 assume { :end_inline_initPersonOnFloor } true; 65865#L1730 assume { :end_inline_bigMacCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 61466#L2708 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 61467#L2735 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 64160#L1597 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 64551#L981 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 64552#L312 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 64497#L985 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 64498#L998 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 72654#L1134 assume !(0 != timeShift_~tmp___9~2); 72655#L1225 assume !(1 == ~doorState~0); 78290#L1225-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 78289#L2708-3 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 78288#L2735-3 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 78287#L1597-1 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 78285#L864 assume 0 != stopRequestedInDirection_~tmp___0~2;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 78286#L312-1 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 78294#L877 timeShift_#t~ret49 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 78292#L1233 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 78291#L921 assume !(1 == ~currentHeading~0); 63402#L931 assume !(0 == ~currentFloorID~0); 62898#L931-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 63225#L937-1 assume { :end_inline_continueInDirection } true; 63219#L1242-2 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret157, __utac_acc__Specification14_spec__1_#t~ret158, __utac_acc__Specification14_spec__1_#t~ret159, __utac_acc__Specification14_spec__1_#t~ret160, __utac_acc__Specification14_spec__1_~tmp~27, __utac_acc__Specification14_spec__1_~tmp___0~12, __utac_acc__Specification14_spec__1_~tmp___1~8, __utac_acc__Specification14_spec__1_~tmp___2~6;havoc __utac_acc__Specification14_spec__1_~tmp~27;havoc __utac_acc__Specification14_spec__1_~tmp___0~12;havoc __utac_acc__Specification14_spec__1_~tmp___1~8;havoc __utac_acc__Specification14_spec__1_~tmp___2~6;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 61414#L2708-25 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 61415#L2735-25 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 64245#L1597-3 __utac_acc__Specification14_spec__1_#t~ret157 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~6 := __utac_acc__Specification14_spec__1_#t~ret157;havoc __utac_acc__Specification14_spec__1_#t~ret157; 67048#L2482 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~6); 72017#L2482-1 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 67585#L1257 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 67536#L2708-26 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 67061#L2735-26 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 67495#L1597-4 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 67385#L981-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 67384#L312-4 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 67383#L985-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 64501#L998-1 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 74904#L1134-2 assume !(0 != timeShift_~tmp___9~2); 74905#L1225-3 assume !(1 == ~doorState~0); 78460#L1225-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 78459#L2708-29 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 78458#L2735-29 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 78457#L1597-5 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 78455#L864-2 assume 0 != stopRequestedInDirection_~tmp___0~2;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 65577#L312-5 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 65578#L877-2 timeShift_#t~ret49 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 66899#L1233-2 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 62962#L921-3 assume !(1 == ~currentHeading~0); 62963#L931-9 assume !(0 == ~currentFloorID~0); 62736#L931-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 63220#L937-7 assume { :end_inline_continueInDirection } true; 63204#L1242-5 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret157, __utac_acc__Specification14_spec__1_#t~ret158, __utac_acc__Specification14_spec__1_#t~ret159, __utac_acc__Specification14_spec__1_#t~ret160, __utac_acc__Specification14_spec__1_~tmp~27, __utac_acc__Specification14_spec__1_~tmp___0~12, __utac_acc__Specification14_spec__1_~tmp___1~8, __utac_acc__Specification14_spec__1_~tmp___2~6;havoc __utac_acc__Specification14_spec__1_~tmp~27;havoc __utac_acc__Specification14_spec__1_~tmp___0~12;havoc __utac_acc__Specification14_spec__1_~tmp___1~8;havoc __utac_acc__Specification14_spec__1_~tmp___2~6;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 61090#L2708-51 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 61091#L2735-51 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 64629#L1597-7 __utac_acc__Specification14_spec__1_#t~ret157 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~6 := __utac_acc__Specification14_spec__1_#t~ret157;havoc __utac_acc__Specification14_spec__1_#t~ret157; 67022#L2482-2 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~6); 66289#L2482-3 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 66425#L1257-1 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 61098#L2708-52 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 61099#L2735-52 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 64628#L1597-8 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 64540#L981-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 64541#L312-8 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 67499#L985-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 64504#L998-2 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 77940#L1134-4 assume !(0 != timeShift_~tmp___9~2); 77941#L1225-6 assume !(1 == ~doorState~0); 78519#L1225-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 78518#L2708-55 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 78517#L2735-55 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 78516#L1597-9 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 78514#L864-4 assume 0 != stopRequestedInDirection_~tmp___0~2;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 78515#L312-9 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 66921#L877-4 timeShift_#t~ret49 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 66892#L1233-4 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 66893#L921-6 assume !(1 == ~currentHeading~0); 63400#L931-18 assume !(0 == ~currentFloorID~0); 62732#L931-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 63210#L937-13 assume { :end_inline_continueInDirection } true; 63193#L1242-8 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret157, __utac_acc__Specification14_spec__1_#t~ret158, __utac_acc__Specification14_spec__1_#t~ret159, __utac_acc__Specification14_spec__1_#t~ret160, __utac_acc__Specification14_spec__1_~tmp~27, __utac_acc__Specification14_spec__1_~tmp___0~12, __utac_acc__Specification14_spec__1_~tmp___1~8, __utac_acc__Specification14_spec__1_~tmp___2~6;havoc __utac_acc__Specification14_spec__1_~tmp~27;havoc __utac_acc__Specification14_spec__1_~tmp___0~12;havoc __utac_acc__Specification14_spec__1_~tmp___1~8;havoc __utac_acc__Specification14_spec__1_~tmp___2~6;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 61313#L2708-77 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 61314#L2735-77 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 64606#L1597-11 __utac_acc__Specification14_spec__1_#t~ret157 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~6 := __utac_acc__Specification14_spec__1_#t~ret157;havoc __utac_acc__Specification14_spec__1_#t~ret157; 67015#L2482-4 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~6); 66254#L2482-5 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 66427#L1257-2 assume { :end_inline_timeShift } true; 64946#L1742 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret102, bobCall_~tmp~13;havoc bobCall_~tmp~13;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~25;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~25; 64456#L2551-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~25 := 4;getOrigin_#res := getOrigin_~retValue_acc~25; 63741#L2576-1 bobCall_#t~ret102 := getOrigin_#res;assume { :end_inline_getOrigin } true;bobCall_~tmp~13 := bobCall_#t~ret102;havoc bobCall_#t~ret102;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~13;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 63742#L2979-1 assume 0 == initPersonOnFloor_~floor; 65459#L2980-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 61153#L3087-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 64169#L2771-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 65679#L2783-5 assume { :end_inline_callOnFloor } true; 65862#L3123-1 assume { :end_inline_initPersonOnFloor } true; 65863#L1675 assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret108, cleanup_#t~ret109, cleanup_~i~1, cleanup_~tmp~19, cleanup_~tmp___0~8, cleanup_~__cil_tmp4~0;havoc cleanup_~i~1;havoc cleanup_~tmp~19;havoc cleanup_~tmp___0~8;havoc cleanup_~__cil_tmp4~0;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 67973#L2708-78 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 67144#L2735-78 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 67968#L1597-12 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 67367#L981-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 67366#L312-12 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 67365#L985-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 64506#L998-3 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 76371#L1134-6 assume !(0 != timeShift_~tmp___9~2); 76372#L1225-9 assume !(1 == ~doorState~0); 78364#L1225-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 78363#L2708-81 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 78362#L2735-81 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 78361#L1597-13 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 64830#L864-6 assume 0 != stopRequestedInDirection_~tmp___0~2;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 64831#L312-13 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 78359#L877-6 timeShift_#t~ret49 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 66896#L1233-6 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 63087#L921-9 assume !(1 == ~currentHeading~0); 63089#L931-27 assume !(0 == ~currentFloorID~0); 62704#L931-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 63198#L937-19 assume { :end_inline_continueInDirection } true; 63199#L1242-11 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret157, __utac_acc__Specification14_spec__1_#t~ret158, __utac_acc__Specification14_spec__1_#t~ret159, __utac_acc__Specification14_spec__1_#t~ret160, __utac_acc__Specification14_spec__1_~tmp~27, __utac_acc__Specification14_spec__1_~tmp___0~12, __utac_acc__Specification14_spec__1_~tmp___1~8, __utac_acc__Specification14_spec__1_~tmp___2~6;havoc __utac_acc__Specification14_spec__1_~tmp~27;havoc __utac_acc__Specification14_spec__1_~tmp___0~12;havoc __utac_acc__Specification14_spec__1_~tmp___1~8;havoc __utac_acc__Specification14_spec__1_~tmp___2~6;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 61192#L2708-103 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 61193#L2735-103 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 64647#L1597-15 __utac_acc__Specification14_spec__1_#t~ret157 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~6 := __utac_acc__Specification14_spec__1_#t~ret157;havoc __utac_acc__Specification14_spec__1_#t~ret157; 67018#L2482-6 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~6); 66233#L2482-7 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 66432#L1257-3 assume { :end_inline_timeShift } true;cleanup_~i~1 := 0; 66433#L1757-3 [2018-11-18 11:10:32,852 INFO L796 eck$LassoCheckResult]: Loop: 66433#L1757-3 assume true; 66915#L1757-1 assume !false; 66916#L1758 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 66908#L1761 assume cleanup_~i~1 < cleanup_~__cil_tmp4~0;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~0;havoc isBlocked_~retValue_acc~0;isBlocked_~retValue_acc~0 := 0;isBlocked_#res := isBlocked_~retValue_acc~0; 66020#L139 cleanup_#t~ret108 := isBlocked_#res;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~8 := cleanup_#t~ret108;havoc cleanup_#t~ret108; 66021#L1765 assume 1 != cleanup_~tmp___0~8; 66787#L1765-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res;havoc isIdle_#t~ret8, isIdle_~retValue_acc~7, isIdle_~tmp~4;havoc isIdle_~retValue_acc~7;havoc isIdle_~tmp~4;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret3, anyStopRequested_#t~ret4, anyStopRequested_#t~ret5, anyStopRequested_#t~ret6, anyStopRequested_#t~ret7, anyStopRequested_~retValue_acc~6, anyStopRequested_~tmp~3, anyStopRequested_~tmp___0~0, anyStopRequested_~tmp___1~0, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~6;havoc anyStopRequested_~tmp~3;havoc anyStopRequested_~tmp___0~0;havoc anyStopRequested_~tmp___1~0;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 61197#L2708-104 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 61198#L2735-104 anyStopRequested_#t~ret3 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret3;havoc anyStopRequested_#t~ret3; 60934#L420 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~6 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~6; 60697#L484 isIdle_#t~ret8 := anyStopRequested_#res;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~4 := isIdle_#t~ret8;havoc isIdle_#t~ret8;isIdle_~retValue_acc~7 := (if 0 == isIdle_~tmp~4 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~7; 65847#L497 cleanup_#t~ret109 := isIdle_#res;assume { :end_inline_isIdle } true;cleanup_~tmp~19 := cleanup_#t~ret109;havoc cleanup_#t~ret109; 65909#L1777 assume !(0 != cleanup_~tmp~19);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 68912#L2708-109 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 67079#L2735-109 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 68872#L1597-16 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 67339#L981-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 67338#L312-16 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 67239#L985-4 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 64508#L998-4 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 77209#L1134-8 assume !(0 != timeShift_~tmp___9~2); 77210#L1225-12 assume !(1 == ~doorState~0); 78615#L1225-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 78614#L2708-112 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 78613#L2735-112 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 78612#L1597-17 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 64800#L864-8 assume 0 != stopRequestedInDirection_~tmp___0~2;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 64801#L312-17 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 78611#L877-8 timeShift_#t~ret49 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 78610#L1233-8 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 63046#L921-12 assume !(1 == ~currentHeading~0); 63047#L931-36 assume !(0 == ~currentFloorID~0); 62685#L931-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 63304#L937-25 assume { :end_inline_continueInDirection } true; 63297#L1242-14 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret157, __utac_acc__Specification14_spec__1_#t~ret158, __utac_acc__Specification14_spec__1_#t~ret159, __utac_acc__Specification14_spec__1_#t~ret160, __utac_acc__Specification14_spec__1_~tmp~27, __utac_acc__Specification14_spec__1_~tmp___0~12, __utac_acc__Specification14_spec__1_~tmp___1~8, __utac_acc__Specification14_spec__1_~tmp___2~6;havoc __utac_acc__Specification14_spec__1_~tmp~27;havoc __utac_acc__Specification14_spec__1_~tmp___0~12;havoc __utac_acc__Specification14_spec__1_~tmp___1~8;havoc __utac_acc__Specification14_spec__1_~tmp___2~6;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 60529#L2708-134 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 60530#L2735-134 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 64597#L1597-19 __utac_acc__Specification14_spec__1_#t~ret157 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~6 := __utac_acc__Specification14_spec__1_#t~ret157;havoc __utac_acc__Specification14_spec__1_#t~ret157; 67019#L2482-8 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~6); 66244#L2482-9 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 66437#L1257-4 assume { :end_inline_timeShift } true;cleanup_~i~1 := 1 + cleanup_~i~1; 66433#L1757-3 [2018-11-18 11:10:32,862 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 11:10:32,862 INFO L82 PathProgramCache]: Analyzing trace with hash -151544238, now seen corresponding path program 1 times [2018-11-18 11:10:32,863 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 11:10:32,863 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 11:10:32,865 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 11:10:32,865 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 11:10:32,865 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 11:10:32,890 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 11:10:33,686 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 11:10:33,686 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 11:10:33,687 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-18 11:10:33,687 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-18 11:10:33,687 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 11:10:33,687 INFO L82 PathProgramCache]: Analyzing trace with hash 561939664, now seen corresponding path program 1 times [2018-11-18 11:10:33,687 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 11:10:33,687 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 11:10:33,688 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 11:10:33,688 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 11:10:33,688 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 11:10:33,694 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 11:10:33,719 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 11:10:33,720 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 11:10:33,720 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-18 11:10:33,720 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-18 11:10:33,720 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-18 11:10:33,720 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-18 11:10:33,721 INFO L87 Difference]: Start difference. First operand 18269 states and 33880 transitions. cyclomatic complexity: 15613 Second operand 3 states. [2018-11-18 11:10:34,917 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 11:10:34,918 INFO L93 Difference]: Finished difference Result 32822 states and 60818 transitions. [2018-11-18 11:10:34,918 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-18 11:10:34,919 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 32822 states and 60818 transitions. [2018-11-18 11:10:35,000 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 7430 [2018-11-18 11:10:35,083 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 32822 states to 32822 states and 60818 transitions. [2018-11-18 11:10:35,083 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 32822 [2018-11-18 11:10:35,114 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 32822 [2018-11-18 11:10:35,114 INFO L73 IsDeterministic]: Start isDeterministic. Operand 32822 states and 60818 transitions. [2018-11-18 11:10:35,138 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-18 11:10:35,138 INFO L705 BuchiCegarLoop]: Abstraction has 32822 states and 60818 transitions. [2018-11-18 11:10:35,156 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 32822 states and 60818 transitions. [2018-11-18 11:10:35,356 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 32822 to 32790. [2018-11-18 11:10:35,356 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 32790 states. [2018-11-18 11:10:35,389 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 32790 states to 32790 states and 60770 transitions. [2018-11-18 11:10:35,389 INFO L728 BuchiCegarLoop]: Abstraction has 32790 states and 60770 transitions. [2018-11-18 11:10:35,389 INFO L608 BuchiCegarLoop]: Abstraction has 32790 states and 60770 transitions. [2018-11-18 11:10:35,389 INFO L442 BuchiCegarLoop]: ======== Iteration 3============ [2018-11-18 11:10:35,390 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 32790 states and 60770 transitions. [2018-11-18 11:10:35,445 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 7422 [2018-11-18 11:10:35,445 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-18 11:10:35,445 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-18 11:10:35,448 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 11:10:35,448 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 11:10:35,450 INFO L794 eck$LassoCheckResult]: Stem: 114863#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];call #t~string53.base, #t~string53.offset := #Ultimate.alloc(10);call #t~string55.base, #t~string55.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string55.base,#t~string55.offset := 91];#memory_int := #memory_int[#t~string55.base,1 + #t~string55.offset := 95];#memory_int := #memory_int[#t~string55.base,2 + #t~string55.offset := 93];#memory_int := #memory_int[#t~string55.base,3 + #t~string55.offset := 0];call #t~string57.base, #t~string57.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string57.base,#t~string57.offset := 91];#memory_int := #memory_int[#t~string57.base,1 + #t~string57.offset := 93];#memory_int := #memory_int[#t~string57.base,2 + #t~string57.offset := 32];#memory_int := #memory_int[#t~string57.base,3 + #t~string57.offset := 0];call #t~string59.base, #t~string59.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string59.base,#t~string59.offset := 32];#memory_int := #memory_int[#t~string59.base,1 + #t~string59.offset := 97];#memory_int := #memory_int[#t~string59.base,2 + #t~string59.offset := 116];#memory_int := #memory_int[#t~string59.base,3 + #t~string59.offset := 32];#memory_int := #memory_int[#t~string59.base,4 + #t~string59.offset := 0];call #t~string61.base, #t~string61.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string61.base,#t~string61.offset := 37];#memory_int := #memory_int[#t~string61.base,1 + #t~string61.offset := 105];#memory_int := #memory_int[#t~string61.base,2 + #t~string61.offset := 0];call #t~string63.base, #t~string63.offset := #Ultimate.alloc(10);call #t~string65.base, #t~string65.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string65.base,#t~string65.offset := 117];#memory_int := #memory_int[#t~string65.base,1 + #t~string65.offset := 112];#memory_int := #memory_int[#t~string65.base,2 + #t~string65.offset := 0];call #t~string67.base, #t~string67.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string67.base,#t~string67.offset := 100];#memory_int := #memory_int[#t~string67.base,1 + #t~string67.offset := 111];#memory_int := #memory_int[#t~string67.base,2 + #t~string67.offset := 119];#memory_int := #memory_int[#t~string67.base,3 + #t~string67.offset := 110];#memory_int := #memory_int[#t~string67.base,4 + #t~string67.offset := 0];call #t~string69.base, #t~string69.offset := #Ultimate.alloc(7);#memory_int := #memory_int[#t~string69.base,#t~string69.offset := 32];#memory_int := #memory_int[#t~string69.base,1 + #t~string69.offset := 73];#memory_int := #memory_int[#t~string69.base,2 + #t~string69.offset := 76];#memory_int := #memory_int[#t~string69.base,3 + #t~string69.offset := 95];#memory_int := #memory_int[#t~string69.base,4 + #t~string69.offset := 112];#memory_int := #memory_int[#t~string69.base,5 + #t~string69.offset := 58];#memory_int := #memory_int[#t~string69.base,6 + #t~string69.offset := 0];call #t~string71.base, #t~string71.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string71.base,#t~string71.offset := 32];#memory_int := #memory_int[#t~string71.base,1 + #t~string71.offset := 37];#memory_int := #memory_int[#t~string71.base,2 + #t~string71.offset := 105];#memory_int := #memory_int[#t~string71.base,3 + #t~string71.offset := 0];call #t~string73.base, #t~string73.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string73.base,#t~string73.offset := 32];#memory_int := #memory_int[#t~string73.base,1 + #t~string73.offset := 37];#memory_int := #memory_int[#t~string73.base,2 + #t~string73.offset := 105];#memory_int := #memory_int[#t~string73.base,3 + #t~string73.offset := 0];call #t~string75.base, #t~string75.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string75.base,#t~string75.offset := 32];#memory_int := #memory_int[#t~string75.base,1 + #t~string75.offset := 37];#memory_int := #memory_int[#t~string75.base,2 + #t~string75.offset := 105];#memory_int := #memory_int[#t~string75.base,3 + #t~string75.offset := 0];call #t~string77.base, #t~string77.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string77.base,#t~string77.offset := 32];#memory_int := #memory_int[#t~string77.base,1 + #t~string77.offset := 37];#memory_int := #memory_int[#t~string77.base,2 + #t~string77.offset := 105];#memory_int := #memory_int[#t~string77.base,3 + #t~string77.offset := 0];call #t~string79.base, #t~string79.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string79.base,#t~string79.offset := 32];#memory_int := #memory_int[#t~string79.base,1 + #t~string79.offset := 37];#memory_int := #memory_int[#t~string79.base,2 + #t~string79.offset := 105];#memory_int := #memory_int[#t~string79.base,3 + #t~string79.offset := 0];call #t~string81.base, #t~string81.offset := #Ultimate.alloc(6);#memory_int := #memory_int[#t~string81.base,#t~string81.offset := 32];#memory_int := #memory_int[#t~string81.base,1 + #t~string81.offset := 70];#memory_int := #memory_int[#t~string81.base,2 + #t~string81.offset := 95];#memory_int := #memory_int[#t~string81.base,3 + #t~string81.offset := 112];#memory_int := #memory_int[#t~string81.base,4 + #t~string81.offset := 58];#memory_int := #memory_int[#t~string81.base,5 + #t~string81.offset := 0];call #t~string84.base, #t~string84.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string84.base,#t~string84.offset := 32];#memory_int := #memory_int[#t~string84.base,1 + #t~string84.offset := 37];#memory_int := #memory_int[#t~string84.base,2 + #t~string84.offset := 105];#memory_int := #memory_int[#t~string84.base,3 + #t~string84.offset := 0];call #t~string87.base, #t~string87.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string87.base,#t~string87.offset := 32];#memory_int := #memory_int[#t~string87.base,1 + #t~string87.offset := 37];#memory_int := #memory_int[#t~string87.base,2 + #t~string87.offset := 105];#memory_int := #memory_int[#t~string87.base,3 + #t~string87.offset := 0];call #t~string90.base, #t~string90.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string90.base,#t~string90.offset := 32];#memory_int := #memory_int[#t~string90.base,1 + #t~string90.offset := 37];#memory_int := #memory_int[#t~string90.base,2 + #t~string90.offset := 105];#memory_int := #memory_int[#t~string90.base,3 + #t~string90.offset := 0];call #t~string93.base, #t~string93.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string93.base,#t~string93.offset := 32];#memory_int := #memory_int[#t~string93.base,1 + #t~string93.offset := 37];#memory_int := #memory_int[#t~string93.base,2 + #t~string93.offset := 105];#memory_int := #memory_int[#t~string93.base,3 + #t~string93.offset := 0];call #t~string96.base, #t~string96.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string96.base,#t~string96.offset := 32];#memory_int := #memory_int[#t~string96.base,1 + #t~string96.offset := 37];#memory_int := #memory_int[#t~string96.base,2 + #t~string96.offset := 105];#memory_int := #memory_int[#t~string96.base,3 + #t~string96.offset := 0];call #t~string98.base, #t~string98.offset := #Ultimate.alloc(2);#memory_int := #memory_int[#t~string98.base,#t~string98.offset := 10];#memory_int := #memory_int[#t~string98.base,1 + #t~string98.offset := 0];call #t~string139.base, #t~string139.offset := #Ultimate.alloc(30);call #t~string140.base, #t~string140.offset := #Ultimate.alloc(9);call #t~string141.base, #t~string141.offset := #Ultimate.alloc(21);call #t~string142.base, #t~string142.offset := #Ultimate.alloc(30);call #t~string143.base, #t~string143.offset := #Ultimate.alloc(9);call #t~string144.base, #t~string144.offset := #Ultimate.alloc(21);call #t~string148.base, #t~string148.offset := #Ultimate.alloc(30);call #t~string149.base, #t~string149.offset := #Ultimate.alloc(9);call #t~string150.base, #t~string150.offset := #Ultimate.alloc(25);call #t~string151.base, #t~string151.offset := #Ultimate.alloc(30);call #t~string152.base, #t~string152.offset := #Ultimate.alloc(9);call #t~string153.base, #t~string153.offset := #Ultimate.alloc(25);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 114864#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res;havoc main_#t~ret114, main_~retValue_acc~18, main_~tmp~21;havoc main_~retValue_acc~18;havoc main_~tmp~21;assume { :begin_inline_select_helpers } true; 115973#L2445 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 115974#L2438 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res;havoc valid_product_~retValue_acc~23;havoc valid_product_~retValue_acc~23;valid_product_~retValue_acc~23 := 1;valid_product_#res := valid_product_~retValue_acc~23; 116609#L2453 main_#t~ret114 := valid_product_#res;assume { :end_inline_valid_product } true;main_~tmp~21 := main_#t~ret114;havoc main_#t~ret114; 116610#L1952 assume 0 != main_~tmp~21;assume { :begin_inline_setup } true; 116537#L1925 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret107, bigMacCall_~tmp~18;havoc bigMacCall_~tmp~18;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~25;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~25; 115582#L2551 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~25 := 4;getOrigin_#res := getOrigin_~retValue_acc~25; 114877#L2576 bigMacCall_#t~ret107 := getOrigin_#res;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~18 := bigMacCall_#t~ret107;havoc bigMacCall_#t~ret107;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~18;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 114878#L2979 assume 0 == initPersonOnFloor_~floor; 116592#L2980 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 112243#L3087-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 115300#L2771 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 116816#L2783-2 assume { :end_inline_callOnFloor } true; 117010#L3123 assume { :end_inline_initPersonOnFloor } true; 117011#L1730 assume { :end_inline_bigMacCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 112562#L2708 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 112563#L2735 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 118180#L1597 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 115681#L981 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 115682#L312 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 115628#L985 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 115629#L998 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 134129#L1134 assume !(0 != timeShift_~tmp___9~2); 134130#L1225 assume !(1 == ~doorState~0); 139775#L1225-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 139774#L2708-3 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 139773#L2735-3 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 139772#L1597-1 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 139769#L864 assume 0 != stopRequestedInDirection_~tmp___0~2;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 139757#L312-1 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 139756#L877 timeShift_#t~ret49 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 139755#L1233 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 139754#L921 assume !(1 == ~currentHeading~0); 139753#L931 assume !(0 == ~currentFloorID~0); 114019#L931-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 139752#L937-1 assume { :end_inline_continueInDirection } true; 142925#L1242-2 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret157, __utac_acc__Specification14_spec__1_#t~ret158, __utac_acc__Specification14_spec__1_#t~ret159, __utac_acc__Specification14_spec__1_#t~ret160, __utac_acc__Specification14_spec__1_~tmp~27, __utac_acc__Specification14_spec__1_~tmp___0~12, __utac_acc__Specification14_spec__1_~tmp___1~8, __utac_acc__Specification14_spec__1_~tmp___2~6;havoc __utac_acc__Specification14_spec__1_~tmp~27;havoc __utac_acc__Specification14_spec__1_~tmp___0~12;havoc __utac_acc__Specification14_spec__1_~tmp___1~8;havoc __utac_acc__Specification14_spec__1_~tmp___2~6;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 142924#L2708-25 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 118286#L2735-25 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 142923#L1597-3 __utac_acc__Specification14_spec__1_#t~ret157 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~6 := __utac_acc__Specification14_spec__1_#t~ret157;havoc __utac_acc__Specification14_spec__1_#t~ret157; 142918#L2482 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~6); 142916#L2482-1 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 142915#L1257 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 142914#L2708-26 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 118313#L2735-26 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 142913#L1597-4 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 115669#L981-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 115670#L312-4 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 115631#L985-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 115633#L998-1 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 140419#L1134-2 assume !(0 != timeShift_~tmp___9~2); 140418#L1225-3 assume !(1 == ~doorState~0); 140417#L1225-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 140416#L2708-29 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 140415#L2735-29 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 140414#L1597-5 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 140413#L864-2 assume 0 != stopRequestedInDirection_~tmp___0~2;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 140336#L312-5 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 140335#L877-2 timeShift_#t~ret49 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 140334#L1233-2 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 114086#L921-3 assume !(1 == ~currentHeading~0); 114087#L931-9 assume !(0 == ~currentFloorID~0); 113855#L931-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 114513#L937-7 assume { :end_inline_continueInDirection } true; 136270#L1242-5 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret157, __utac_acc__Specification14_spec__1_#t~ret158, __utac_acc__Specification14_spec__1_#t~ret159, __utac_acc__Specification14_spec__1_#t~ret160, __utac_acc__Specification14_spec__1_~tmp~27, __utac_acc__Specification14_spec__1_~tmp___0~12, __utac_acc__Specification14_spec__1_~tmp___1~8, __utac_acc__Specification14_spec__1_~tmp___2~6;havoc __utac_acc__Specification14_spec__1_~tmp~27;havoc __utac_acc__Specification14_spec__1_~tmp___0~12;havoc __utac_acc__Specification14_spec__1_~tmp___1~8;havoc __utac_acc__Specification14_spec__1_~tmp___2~6;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 136269#L2708-51 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 118264#L2735-51 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 136268#L1597-7 __utac_acc__Specification14_spec__1_#t~ret157 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~6 := __utac_acc__Specification14_spec__1_#t~ret157;havoc __utac_acc__Specification14_spec__1_#t~ret157; 136263#L2482-2 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~6); 136261#L2482-3 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 117552#L1257-1 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 117553#L2708-52 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 126076#L2735-52 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 126075#L1597-8 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 126073#L981-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 126074#L312-8 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 126072#L985-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 115252#L998-2 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 113456#L1134-4 assume !(0 != timeShift_~tmp___9~2); 113458#L1225-6 assume !(1 == ~doorState~0); 116427#L1225-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 112145#L2708-55 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 112146#L2735-55 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 138527#L1597-9 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 138526#L864-4 assume 0 != stopRequestedInDirection_~tmp___0~2;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 116733#L312-9 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 116734#L877-4 timeShift_#t~ret49 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 118036#L1233-4 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 114188#L921-6 assume !(1 == ~currentHeading~0); 114189#L931-18 assume !(0 == ~currentFloorID~0); 114511#L931-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 114512#L937-13 assume { :end_inline_continueInDirection } true; 124375#L1242-8 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret157, __utac_acc__Specification14_spec__1_#t~ret158, __utac_acc__Specification14_spec__1_#t~ret159, __utac_acc__Specification14_spec__1_#t~ret160, __utac_acc__Specification14_spec__1_~tmp~27, __utac_acc__Specification14_spec__1_~tmp___0~12, __utac_acc__Specification14_spec__1_~tmp___1~8, __utac_acc__Specification14_spec__1_~tmp___2~6;havoc __utac_acc__Specification14_spec__1_~tmp~27;havoc __utac_acc__Specification14_spec__1_~tmp___0~12;havoc __utac_acc__Specification14_spec__1_~tmp___1~8;havoc __utac_acc__Specification14_spec__1_~tmp___2~6;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 124374#L2708-77 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 124238#L2735-77 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 124373#L1597-11 __utac_acc__Specification14_spec__1_#t~ret157 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~6 := __utac_acc__Specification14_spec__1_#t~ret157;havoc __utac_acc__Specification14_spec__1_#t~ret157; 124368#L2482-4 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~6); 124366#L2482-5 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 124365#L1257-2 assume { :end_inline_timeShift } true; 124364#L1742 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret102, bobCall_~tmp~13;havoc bobCall_~tmp~13;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~25;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~25; 124361#L2551-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~25 := 4;getOrigin_#res := getOrigin_~retValue_acc~25; 124357#L2576-1 bobCall_#t~ret102 := getOrigin_#res;assume { :end_inline_getOrigin } true;bobCall_~tmp~13 := bobCall_#t~ret102;havoc bobCall_#t~ret102;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~13;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 124356#L2979-1 assume 0 == initPersonOnFloor_~floor; 124169#L2980-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 124147#L3087-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 124141#L2771-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 124135#L2783-5 assume { :end_inline_callOnFloor } true; 124133#L3123-1 assume { :end_inline_initPersonOnFloor } true; 124131#L1675 assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret108, cleanup_#t~ret109, cleanup_~i~1, cleanup_~tmp~19, cleanup_~tmp___0~8, cleanup_~__cil_tmp4~0;havoc cleanup_~i~1;havoc cleanup_~tmp~19;havoc cleanup_~tmp___0~8;havoc cleanup_~__cil_tmp4~0;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 124130#L2708-78 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 124128#L2735-78 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 124127#L1597-12 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 124126#L981-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 124125#L312-12 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 124124#L985-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 115637#L998-3 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 131456#L1134-6 assume !(0 != timeShift_~tmp___9~2); 131455#L1225-9 assume !(1 == ~doorState~0); 131454#L1225-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 131448#L2708-81 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 131446#L2735-81 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 131445#L1597-13 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 131443#L864-6 assume 0 != stopRequestedInDirection_~tmp___0~2;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 126328#L312-13 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 126327#L877-6 timeShift_#t~ret49 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 126326#L1233-6 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 126265#L921-9 assume !(1 == ~currentHeading~0); 126263#L931-27 assume !(0 == ~currentFloorID~0); 121862#L931-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 121733#L937-19 assume { :end_inline_continueInDirection } true; 121732#L1242-11 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret157, __utac_acc__Specification14_spec__1_#t~ret158, __utac_acc__Specification14_spec__1_#t~ret159, __utac_acc__Specification14_spec__1_#t~ret160, __utac_acc__Specification14_spec__1_~tmp~27, __utac_acc__Specification14_spec__1_~tmp___0~12, __utac_acc__Specification14_spec__1_~tmp___1~8, __utac_acc__Specification14_spec__1_~tmp___2~6;havoc __utac_acc__Specification14_spec__1_~tmp~27;havoc __utac_acc__Specification14_spec__1_~tmp___0~12;havoc __utac_acc__Specification14_spec__1_~tmp___1~8;havoc __utac_acc__Specification14_spec__1_~tmp___2~6;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 121731#L2708-103 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 121729#L2735-103 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 121728#L1597-15 __utac_acc__Specification14_spec__1_#t~ret157 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~6 := __utac_acc__Specification14_spec__1_#t~ret157;havoc __utac_acc__Specification14_spec__1_#t~ret157; 121725#L2482-6 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~6); 121724#L2482-7 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 119282#L1257-3 assume { :end_inline_timeShift } true;cleanup_~i~1 := 0; 119281#L1757-3 [2018-11-18 11:10:35,450 INFO L796 eck$LassoCheckResult]: Loop: 119281#L1757-3 assume true; 120332#L1757-1 assume !false; 120330#L1758 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 120326#L1761 assume cleanup_~i~1 < cleanup_~__cil_tmp4~0;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~0;havoc isBlocked_~retValue_acc~0;isBlocked_~retValue_acc~0 := 0;isBlocked_#res := isBlocked_~retValue_acc~0; 120324#L139 cleanup_#t~ret108 := isBlocked_#res;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~8 := cleanup_#t~ret108;havoc cleanup_#t~ret108; 120322#L1765 assume 1 != cleanup_~tmp___0~8; 120320#L1765-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res;havoc isIdle_#t~ret8, isIdle_~retValue_acc~7, isIdle_~tmp~4;havoc isIdle_~retValue_acc~7;havoc isIdle_~tmp~4;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret3, anyStopRequested_#t~ret4, anyStopRequested_#t~ret5, anyStopRequested_#t~ret6, anyStopRequested_#t~ret7, anyStopRequested_~retValue_acc~6, anyStopRequested_~tmp~3, anyStopRequested_~tmp___0~0, anyStopRequested_~tmp___1~0, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~6;havoc anyStopRequested_~tmp~3;havoc anyStopRequested_~tmp___0~0;havoc anyStopRequested_~tmp___1~0;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 120318#L2708-104 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 120316#L2735-104 anyStopRequested_#t~ret3 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret3;havoc anyStopRequested_#t~ret3; 119227#L420 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~6 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~6; 119226#L484 isIdle_#t~ret8 := anyStopRequested_#res;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~4 := isIdle_#t~ret8;havoc isIdle_#t~ret8;isIdle_~retValue_acc~7 := (if 0 == isIdle_~tmp~4 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~7; 119225#L497 cleanup_#t~ret109 := isIdle_#res;assume { :end_inline_isIdle } true;cleanup_~tmp~19 := cleanup_#t~ret109;havoc cleanup_#t~ret109; 119224#L1777 assume !(0 != cleanup_~tmp~19);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 119223#L2708-109 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 118270#L2735-109 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 119222#L1597-16 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 119220#L981-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 119219#L312-16 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 119218#L985-4 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 115639#L998-4 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 119630#L1134-8 assume !(0 != timeShift_~tmp___9~2); 119624#L1225-12 assume !(1 == ~doorState~0); 119622#L1225-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 119620#L2708-112 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 119619#L2735-112 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 119618#L1597-17 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 119390#L864-8 assume 0 != stopRequestedInDirection_~tmp___0~2;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 119341#L312-17 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 119335#L877-8 timeShift_#t~ret49 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 119330#L1233-8 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 119324#L921-12 assume !(1 == ~currentHeading~0); 119321#L931-36 assume !(0 == ~currentFloorID~0); 119319#L931-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 119318#L937-25 assume { :end_inline_continueInDirection } true; 122736#L1242-14 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret157, __utac_acc__Specification14_spec__1_#t~ret158, __utac_acc__Specification14_spec__1_#t~ret159, __utac_acc__Specification14_spec__1_#t~ret160, __utac_acc__Specification14_spec__1_~tmp~27, __utac_acc__Specification14_spec__1_~tmp___0~12, __utac_acc__Specification14_spec__1_~tmp___1~8, __utac_acc__Specification14_spec__1_~tmp___2~6;havoc __utac_acc__Specification14_spec__1_~tmp~27;havoc __utac_acc__Specification14_spec__1_~tmp___0~12;havoc __utac_acc__Specification14_spec__1_~tmp___1~8;havoc __utac_acc__Specification14_spec__1_~tmp___2~6;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 122735#L2708-134 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 118315#L2735-134 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 122734#L1597-19 __utac_acc__Specification14_spec__1_#t~ret157 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~6 := __utac_acc__Specification14_spec__1_#t~ret157;havoc __utac_acc__Specification14_spec__1_#t~ret157; 121843#L2482-8 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~6); 121841#L2482-9 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 119280#L1257-4 assume { :end_inline_timeShift } true;cleanup_~i~1 := 1 + cleanup_~i~1; 119281#L1757-3 [2018-11-18 11:10:35,452 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 11:10:35,452 INFO L82 PathProgramCache]: Analyzing trace with hash -450833834, now seen corresponding path program 1 times [2018-11-18 11:10:35,452 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 11:10:35,452 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 11:10:35,453 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 11:10:35,453 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 11:10:35,453 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 11:10:35,480 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 11:10:36,247 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 11:10:36,247 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 11:10:36,247 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-18 11:10:36,248 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-18 11:10:36,248 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 11:10:36,248 INFO L82 PathProgramCache]: Analyzing trace with hash 1241998034, now seen corresponding path program 1 times [2018-11-18 11:10:36,248 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 11:10:36,248 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 11:10:36,249 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 11:10:36,249 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 11:10:36,249 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 11:10:36,255 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 11:10:36,299 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 11:10:36,299 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 11:10:36,299 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2018-11-18 11:10:36,300 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-18 11:10:36,300 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2018-11-18 11:10:36,300 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=43, Unknown=0, NotChecked=0, Total=56 [2018-11-18 11:10:36,300 INFO L87 Difference]: Start difference. First operand 32790 states and 60770 transitions. cyclomatic complexity: 27982 Second operand 8 states. [2018-11-18 11:10:47,877 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 11:10:47,877 INFO L93 Difference]: Finished difference Result 317147 states and 590210 transitions. [2018-11-18 11:10:47,877 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 32 states. [2018-11-18 11:10:47,877 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 317147 states and 590210 transitions. [2018-11-18 11:10:49,105 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 90844 [2018-11-18 11:10:49,697 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 317147 states to 317147 states and 590210 transitions. [2018-11-18 11:10:49,697 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 317147 [2018-11-18 11:10:49,868 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 317147 [2018-11-18 11:10:49,868 INFO L73 IsDeterministic]: Start isDeterministic. Operand 317147 states and 590210 transitions. [2018-11-18 11:10:50,011 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-18 11:10:50,011 INFO L705 BuchiCegarLoop]: Abstraction has 317147 states and 590210 transitions. [2018-11-18 11:10:50,134 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 317147 states and 590210 transitions. [2018-11-18 11:10:51,130 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 317147 to 65401. [2018-11-18 11:10:51,130 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 65401 states. [2018-11-18 11:10:56,061 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 65401 states to 65401 states and 121178 transitions. [2018-11-18 11:10:56,061 INFO L728 BuchiCegarLoop]: Abstraction has 65401 states and 121178 transitions. [2018-11-18 11:10:56,061 INFO L608 BuchiCegarLoop]: Abstraction has 65401 states and 121178 transitions. [2018-11-18 11:10:56,061 INFO L442 BuchiCegarLoop]: ======== Iteration 4============ [2018-11-18 11:10:56,061 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 65401 states and 121178 transitions. [2018-11-18 11:10:56,156 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 14720 [2018-11-18 11:10:56,156 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-18 11:10:56,156 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-18 11:10:56,159 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 11:10:56,159 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 11:10:56,159 INFO L794 eck$LassoCheckResult]: Stem: 464950#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];call #t~string53.base, #t~string53.offset := #Ultimate.alloc(10);call #t~string55.base, #t~string55.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string55.base,#t~string55.offset := 91];#memory_int := #memory_int[#t~string55.base,1 + #t~string55.offset := 95];#memory_int := #memory_int[#t~string55.base,2 + #t~string55.offset := 93];#memory_int := #memory_int[#t~string55.base,3 + #t~string55.offset := 0];call #t~string57.base, #t~string57.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string57.base,#t~string57.offset := 91];#memory_int := #memory_int[#t~string57.base,1 + #t~string57.offset := 93];#memory_int := #memory_int[#t~string57.base,2 + #t~string57.offset := 32];#memory_int := #memory_int[#t~string57.base,3 + #t~string57.offset := 0];call #t~string59.base, #t~string59.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string59.base,#t~string59.offset := 32];#memory_int := #memory_int[#t~string59.base,1 + #t~string59.offset := 97];#memory_int := #memory_int[#t~string59.base,2 + #t~string59.offset := 116];#memory_int := #memory_int[#t~string59.base,3 + #t~string59.offset := 32];#memory_int := #memory_int[#t~string59.base,4 + #t~string59.offset := 0];call #t~string61.base, #t~string61.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string61.base,#t~string61.offset := 37];#memory_int := #memory_int[#t~string61.base,1 + #t~string61.offset := 105];#memory_int := #memory_int[#t~string61.base,2 + #t~string61.offset := 0];call #t~string63.base, #t~string63.offset := #Ultimate.alloc(10);call #t~string65.base, #t~string65.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string65.base,#t~string65.offset := 117];#memory_int := #memory_int[#t~string65.base,1 + #t~string65.offset := 112];#memory_int := #memory_int[#t~string65.base,2 + #t~string65.offset := 0];call #t~string67.base, #t~string67.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string67.base,#t~string67.offset := 100];#memory_int := #memory_int[#t~string67.base,1 + #t~string67.offset := 111];#memory_int := #memory_int[#t~string67.base,2 + #t~string67.offset := 119];#memory_int := #memory_int[#t~string67.base,3 + #t~string67.offset := 110];#memory_int := #memory_int[#t~string67.base,4 + #t~string67.offset := 0];call #t~string69.base, #t~string69.offset := #Ultimate.alloc(7);#memory_int := #memory_int[#t~string69.base,#t~string69.offset := 32];#memory_int := #memory_int[#t~string69.base,1 + #t~string69.offset := 73];#memory_int := #memory_int[#t~string69.base,2 + #t~string69.offset := 76];#memory_int := #memory_int[#t~string69.base,3 + #t~string69.offset := 95];#memory_int := #memory_int[#t~string69.base,4 + #t~string69.offset := 112];#memory_int := #memory_int[#t~string69.base,5 + #t~string69.offset := 58];#memory_int := #memory_int[#t~string69.base,6 + #t~string69.offset := 0];call #t~string71.base, #t~string71.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string71.base,#t~string71.offset := 32];#memory_int := #memory_int[#t~string71.base,1 + #t~string71.offset := 37];#memory_int := #memory_int[#t~string71.base,2 + #t~string71.offset := 105];#memory_int := #memory_int[#t~string71.base,3 + #t~string71.offset := 0];call #t~string73.base, #t~string73.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string73.base,#t~string73.offset := 32];#memory_int := #memory_int[#t~string73.base,1 + #t~string73.offset := 37];#memory_int := #memory_int[#t~string73.base,2 + #t~string73.offset := 105];#memory_int := #memory_int[#t~string73.base,3 + #t~string73.offset := 0];call #t~string75.base, #t~string75.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string75.base,#t~string75.offset := 32];#memory_int := #memory_int[#t~string75.base,1 + #t~string75.offset := 37];#memory_int := #memory_int[#t~string75.base,2 + #t~string75.offset := 105];#memory_int := #memory_int[#t~string75.base,3 + #t~string75.offset := 0];call #t~string77.base, #t~string77.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string77.base,#t~string77.offset := 32];#memory_int := #memory_int[#t~string77.base,1 + #t~string77.offset := 37];#memory_int := #memory_int[#t~string77.base,2 + #t~string77.offset := 105];#memory_int := #memory_int[#t~string77.base,3 + #t~string77.offset := 0];call #t~string79.base, #t~string79.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string79.base,#t~string79.offset := 32];#memory_int := #memory_int[#t~string79.base,1 + #t~string79.offset := 37];#memory_int := #memory_int[#t~string79.base,2 + #t~string79.offset := 105];#memory_int := #memory_int[#t~string79.base,3 + #t~string79.offset := 0];call #t~string81.base, #t~string81.offset := #Ultimate.alloc(6);#memory_int := #memory_int[#t~string81.base,#t~string81.offset := 32];#memory_int := #memory_int[#t~string81.base,1 + #t~string81.offset := 70];#memory_int := #memory_int[#t~string81.base,2 + #t~string81.offset := 95];#memory_int := #memory_int[#t~string81.base,3 + #t~string81.offset := 112];#memory_int := #memory_int[#t~string81.base,4 + #t~string81.offset := 58];#memory_int := #memory_int[#t~string81.base,5 + #t~string81.offset := 0];call #t~string84.base, #t~string84.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string84.base,#t~string84.offset := 32];#memory_int := #memory_int[#t~string84.base,1 + #t~string84.offset := 37];#memory_int := #memory_int[#t~string84.base,2 + #t~string84.offset := 105];#memory_int := #memory_int[#t~string84.base,3 + #t~string84.offset := 0];call #t~string87.base, #t~string87.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string87.base,#t~string87.offset := 32];#memory_int := #memory_int[#t~string87.base,1 + #t~string87.offset := 37];#memory_int := #memory_int[#t~string87.base,2 + #t~string87.offset := 105];#memory_int := #memory_int[#t~string87.base,3 + #t~string87.offset := 0];call #t~string90.base, #t~string90.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string90.base,#t~string90.offset := 32];#memory_int := #memory_int[#t~string90.base,1 + #t~string90.offset := 37];#memory_int := #memory_int[#t~string90.base,2 + #t~string90.offset := 105];#memory_int := #memory_int[#t~string90.base,3 + #t~string90.offset := 0];call #t~string93.base, #t~string93.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string93.base,#t~string93.offset := 32];#memory_int := #memory_int[#t~string93.base,1 + #t~string93.offset := 37];#memory_int := #memory_int[#t~string93.base,2 + #t~string93.offset := 105];#memory_int := #memory_int[#t~string93.base,3 + #t~string93.offset := 0];call #t~string96.base, #t~string96.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string96.base,#t~string96.offset := 32];#memory_int := #memory_int[#t~string96.base,1 + #t~string96.offset := 37];#memory_int := #memory_int[#t~string96.base,2 + #t~string96.offset := 105];#memory_int := #memory_int[#t~string96.base,3 + #t~string96.offset := 0];call #t~string98.base, #t~string98.offset := #Ultimate.alloc(2);#memory_int := #memory_int[#t~string98.base,#t~string98.offset := 10];#memory_int := #memory_int[#t~string98.base,1 + #t~string98.offset := 0];call #t~string139.base, #t~string139.offset := #Ultimate.alloc(30);call #t~string140.base, #t~string140.offset := #Ultimate.alloc(9);call #t~string141.base, #t~string141.offset := #Ultimate.alloc(21);call #t~string142.base, #t~string142.offset := #Ultimate.alloc(30);call #t~string143.base, #t~string143.offset := #Ultimate.alloc(9);call #t~string144.base, #t~string144.offset := #Ultimate.alloc(21);call #t~string148.base, #t~string148.offset := #Ultimate.alloc(30);call #t~string149.base, #t~string149.offset := #Ultimate.alloc(9);call #t~string150.base, #t~string150.offset := #Ultimate.alloc(25);call #t~string151.base, #t~string151.offset := #Ultimate.alloc(30);call #t~string152.base, #t~string152.offset := #Ultimate.alloc(9);call #t~string153.base, #t~string153.offset := #Ultimate.alloc(25);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 464951#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res;havoc main_#t~ret114, main_~retValue_acc~18, main_~tmp~21;havoc main_~retValue_acc~18;havoc main_~tmp~21;assume { :begin_inline_select_helpers } true; 466161#L2445 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 466162#L2438 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res;havoc valid_product_~retValue_acc~23;havoc valid_product_~retValue_acc~23;valid_product_~retValue_acc~23 := 1;valid_product_#res := valid_product_~retValue_acc~23; 466818#L2453 main_#t~ret114 := valid_product_#res;assume { :end_inline_valid_product } true;main_~tmp~21 := main_#t~ret114;havoc main_#t~ret114; 466819#L1952 assume 0 != main_~tmp~21;assume { :begin_inline_setup } true; 466741#L1925 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret107, bigMacCall_~tmp~18;havoc bigMacCall_~tmp~18;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~25;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~25; 465724#L2551 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~25 := 4;getOrigin_#res := getOrigin_~retValue_acc~25; 464964#L2576 bigMacCall_#t~ret107 := getOrigin_#res;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~18 := bigMacCall_#t~ret107;havoc bigMacCall_#t~ret107;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~18;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 464965#L2979 assume 0 == initPersonOnFloor_~floor; 466795#L2980 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 462256#L3087-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 465400#L2771 assume !(0 == callOnFloor_~floorID); 467235#L2774 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 467043#L2783-2 assume { :end_inline_callOnFloor } true; 467407#L3123 assume { :end_inline_initPersonOnFloor } true; 467296#L1730 assume { :end_inline_bigMacCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 467297#L2708 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 468668#L2735 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 468669#L1597 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 465836#L981 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 465837#L312 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 465784#L985 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 465786#L998 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 470366#L1134 assume !(0 != timeShift_~tmp___9~2); 470364#L1225 assume !(1 == ~doorState~0); 470365#L1225-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 470361#L2708-3 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 470362#L2735-3 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 470357#L1597-1 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 470358#L864 assume 0 != stopRequestedInDirection_~tmp___0~2;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 466967#L312-1 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 466968#L877 timeShift_#t~ret49 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 470427#L1233 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 470428#L921 assume !(1 == ~currentHeading~0); 470515#L931 assume !(0 == ~currentFloorID~0); 464067#L931-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 464394#L937-1 assume { :end_inline_continueInDirection } true; 464388#L1242-2 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret157, __utac_acc__Specification14_spec__1_#t~ret158, __utac_acc__Specification14_spec__1_#t~ret159, __utac_acc__Specification14_spec__1_#t~ret160, __utac_acc__Specification14_spec__1_~tmp~27, __utac_acc__Specification14_spec__1_~tmp___0~12, __utac_acc__Specification14_spec__1_~tmp___1~8, __utac_acc__Specification14_spec__1_~tmp___2~6;havoc __utac_acc__Specification14_spec__1_~tmp~27;havoc __utac_acc__Specification14_spec__1_~tmp___0~12;havoc __utac_acc__Specification14_spec__1_~tmp___1~8;havoc __utac_acc__Specification14_spec__1_~tmp___2~6;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 468602#L2708-25 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 465489#L2735-25 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 465490#L1597-3 __utac_acc__Specification14_spec__1_#t~ret157 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~6 := __utac_acc__Specification14_spec__1_#t~ret157;havoc __utac_acc__Specification14_spec__1_#t~ret157; 468538#L2482 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~6); 467654#L2482-1 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 467795#L1257 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 462535#L2708-26 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 462536#L2735-26 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 465491#L1597-4 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 477756#L981-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 477750#L312-4 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 477751#L985-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 478325#L998-1 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 478323#L1134-2 assume !(0 != timeShift_~tmp___9~2); 478322#L1225-3 assume !(1 == ~doorState~0); 478321#L1225-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 478320#L2708-29 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 465471#L2735-29 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 465472#L1597-5 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 478318#L864-2 assume 0 != stopRequestedInDirection_~tmp___0~2;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 478316#L312-5 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 478315#L877-2 timeShift_#t~ret49 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 478314#L1233-2 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 477611#L921-3 assume !(1 == ~currentHeading~0); 464575#L931-9 assume !(0 == ~currentFloorID~0); 463903#L931-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 464570#L937-7 assume { :end_inline_continueInDirection } true; 487187#L1242-5 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret157, __utac_acc__Specification14_spec__1_#t~ret158, __utac_acc__Specification14_spec__1_#t~ret159, __utac_acc__Specification14_spec__1_#t~ret160, __utac_acc__Specification14_spec__1_~tmp~27, __utac_acc__Specification14_spec__1_~tmp___0~12, __utac_acc__Specification14_spec__1_~tmp___1~8, __utac_acc__Specification14_spec__1_~tmp___2~6;havoc __utac_acc__Specification14_spec__1_~tmp~27;havoc __utac_acc__Specification14_spec__1_~tmp___0~12;havoc __utac_acc__Specification14_spec__1_~tmp___1~8;havoc __utac_acc__Specification14_spec__1_~tmp___2~6;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 470538#L2708-51 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 470539#L2735-51 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 470534#L1597-7 __utac_acc__Specification14_spec__1_#t~ret157 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~6 := __utac_acc__Specification14_spec__1_#t~ret157;havoc __utac_acc__Specification14_spec__1_#t~ret157; 470535#L2482-2 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~6); 470526#L2482-3 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 470527#L1257-1 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 470522#L2708-52 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 470523#L2735-52 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 470519#L1597-8 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 470520#L981-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 470513#L312-8 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 470514#L985-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 465792#L998-2 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 463484#L1134-4 assume !(0 != timeShift_~tmp___9~2); 463486#L1225-6 assume !(1 == ~doorState~0); 466614#L1225-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 462156#L2708-55 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 462157#L2735-55 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 465911#L1597-9 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 468561#L864-4 assume 0 != stopRequestedInDirection_~tmp___0~2;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 486996#L312-9 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 486978#L877-4 timeShift_#t~ret49 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 486973#L1233-4 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 486967#L921-6 assume !(1 == ~currentHeading~0); 486963#L931-18 assume !(0 == ~currentFloorID~0); 486960#L931-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 486959#L937-13 assume { :end_inline_continueInDirection } true; 497649#L1242-8 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret157, __utac_acc__Specification14_spec__1_#t~ret158, __utac_acc__Specification14_spec__1_#t~ret159, __utac_acc__Specification14_spec__1_#t~ret160, __utac_acc__Specification14_spec__1_~tmp~27, __utac_acc__Specification14_spec__1_~tmp___0~12, __utac_acc__Specification14_spec__1_~tmp___1~8, __utac_acc__Specification14_spec__1_~tmp___2~6;havoc __utac_acc__Specification14_spec__1_~tmp~27;havoc __utac_acc__Specification14_spec__1_~tmp___0~12;havoc __utac_acc__Specification14_spec__1_~tmp___1~8;havoc __utac_acc__Specification14_spec__1_~tmp___2~6;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 477914#L2708-77 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 477915#L2735-77 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 468562#L1597-11 __utac_acc__Specification14_spec__1_#t~ret157 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~6 := __utac_acc__Specification14_spec__1_#t~ret157;havoc __utac_acc__Specification14_spec__1_#t~ret157; 468563#L2482-4 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~6); 497643#L2482-5 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 497642#L1257-2 assume { :end_inline_timeShift } true; 497641#L1742 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret102, bobCall_~tmp~13;havoc bobCall_~tmp~13;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~25;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~25; 497638#L2551-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~25 := 4;getOrigin_#res := getOrigin_~retValue_acc~25; 497634#L2576-1 bobCall_#t~ret102 := getOrigin_#res;assume { :end_inline_getOrigin } true;bobCall_~tmp~13 := bobCall_#t~ret102;havoc bobCall_#t~ret102;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~13;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 497633#L2979-1 assume 0 == initPersonOnFloor_~floor; 497619#L2980-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 497598#L3087-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 497544#L2771-2 assume !(0 == callOnFloor_~floorID); 479792#L2774-2 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 479793#L2783-5 assume { :end_inline_callOnFloor } true; 477599#L3123-1 assume { :end_inline_initPersonOnFloor } true; 477600#L1675 assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret108, cleanup_#t~ret109, cleanup_~i~1, cleanup_~tmp~19, cleanup_~tmp___0~8, cleanup_~__cil_tmp4~0;havoc cleanup_~i~1;havoc cleanup_~tmp~19;havoc cleanup_~tmp___0~8;havoc cleanup_~__cil_tmp4~0;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 470503#L2708-78 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 470504#L2735-78 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 470500#L1597-12 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 470501#L981-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 470372#L312-12 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 470373#L985-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 503234#L998-3 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 503366#L1134-6 assume !(0 != timeShift_~tmp___9~2); 503263#L1225-9 assume !(1 == ~doorState~0); 503261#L1225-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 503260#L2708-81 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 503259#L2735-81 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 503258#L1597-13 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 503256#L864-6 assume 0 != stopRequestedInDirection_~tmp___0~2;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 503255#L312-13 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 503254#L877-6 timeShift_#t~ret49 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 503253#L1233-6 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 464262#L921-9 assume !(1 == ~currentHeading~0); 464263#L931-27 assume !(0 == ~currentFloorID~0); 463865#L931-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 464566#L937-19 assume { :end_inline_continueInDirection } true; 516458#L1242-11 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret157, __utac_acc__Specification14_spec__1_#t~ret158, __utac_acc__Specification14_spec__1_#t~ret159, __utac_acc__Specification14_spec__1_#t~ret160, __utac_acc__Specification14_spec__1_~tmp~27, __utac_acc__Specification14_spec__1_~tmp___0~12, __utac_acc__Specification14_spec__1_~tmp___1~8, __utac_acc__Specification14_spec__1_~tmp___2~6;havoc __utac_acc__Specification14_spec__1_~tmp~27;havoc __utac_acc__Specification14_spec__1_~tmp___0~12;havoc __utac_acc__Specification14_spec__1_~tmp___1~8;havoc __utac_acc__Specification14_spec__1_~tmp___2~6;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 506437#L2708-103 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 506438#L2735-103 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 506430#L1597-15 __utac_acc__Specification14_spec__1_#t~ret157 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~6 := __utac_acc__Specification14_spec__1_#t~ret157;havoc __utac_acc__Specification14_spec__1_#t~ret157; 506431#L2482-6 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~6); 506420#L2482-7 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 506421#L1257-3 assume { :end_inline_timeShift } true;cleanup_~i~1 := 0; 516456#L1757-3 [2018-11-18 11:10:56,160 INFO L796 eck$LassoCheckResult]: Loop: 516456#L1757-3 assume true; 516455#L1757-1 assume !false; 516454#L1758 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 468376#L1761 assume cleanup_~i~1 < cleanup_~__cil_tmp4~0;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~0;havoc isBlocked_~retValue_acc~0;isBlocked_~retValue_acc~0 := 0;isBlocked_#res := isBlocked_~retValue_acc~0; 468377#L139 cleanup_#t~ret108 := isBlocked_#res;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~8 := cleanup_#t~ret108;havoc cleanup_#t~ret108; 494994#L1765 assume 1 != cleanup_~tmp___0~8; 494995#L1765-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res;havoc isIdle_#t~ret8, isIdle_~retValue_acc~7, isIdle_~tmp~4;havoc isIdle_~retValue_acc~7;havoc isIdle_~tmp~4;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret3, anyStopRequested_#t~ret4, anyStopRequested_#t~ret5, anyStopRequested_#t~ret6, anyStopRequested_#t~ret7, anyStopRequested_~retValue_acc~6, anyStopRequested_~tmp~3, anyStopRequested_~tmp___0~0, anyStopRequested_~tmp___1~0, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~6;havoc anyStopRequested_~tmp~3;havoc anyStopRequested_~tmp___0~0;havoc anyStopRequested_~tmp___1~0;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 462307#L2708-104 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 462308#L2735-104 anyStopRequested_#t~ret3 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret3;havoc anyStopRequested_#t~ret3; 494984#L420 assume !(0 != anyStopRequested_~tmp___3~0); 494985#L424 assume 0 != ~floorButtons_0~0;anyStopRequested_~retValue_acc~6 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~6; 467224#L484 isIdle_#t~ret8 := anyStopRequested_#res;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~4 := isIdle_#t~ret8;havoc isIdle_#t~ret8;isIdle_~retValue_acc~7 := (if 0 == isIdle_~tmp~4 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~7; 467225#L497 cleanup_#t~ret109 := isIdle_#res;assume { :end_inline_isIdle } true;cleanup_~tmp~19 := cleanup_#t~ret109;havoc cleanup_#t~ret109; 468417#L1777 assume !(0 != cleanup_~tmp~19);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 468418#L2708-109 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 506182#L2735-109 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 506183#L1597-16 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 465832#L981-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 465833#L312-16 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 506153#L985-4 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 506155#L998-4 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 523407#L1134-8 assume !(0 != timeShift_~tmp___9~2); 523406#L1225-12 assume !(1 == ~doorState~0); 523405#L1225-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 523404#L2708-112 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 523403#L2735-112 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 523402#L1597-17 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 466103#L864-8 assume 0 != stopRequestedInDirection_~tmp___0~2;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 466104#L312-17 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 466891#L877-8 timeShift_#t~ret49 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 468350#L1233-8 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 464224#L921-12 assume !(1 == ~currentHeading~0); 464225#L931-36 assume !(0 == ~currentFloorID~0); 463838#L931-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 464473#L937-25 assume { :end_inline_continueInDirection } true; 464466#L1242-14 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret157, __utac_acc__Specification14_spec__1_#t~ret158, __utac_acc__Specification14_spec__1_#t~ret159, __utac_acc__Specification14_spec__1_#t~ret160, __utac_acc__Specification14_spec__1_~tmp~27, __utac_acc__Specification14_spec__1_~tmp___0~12, __utac_acc__Specification14_spec__1_~tmp___1~8, __utac_acc__Specification14_spec__1_~tmp___2~6;havoc __utac_acc__Specification14_spec__1_~tmp~27;havoc __utac_acc__Specification14_spec__1_~tmp___0~12;havoc __utac_acc__Specification14_spec__1_~tmp___1~8;havoc __utac_acc__Specification14_spec__1_~tmp___2~6;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 461634#L2708-134 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 461635#L2735-134 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 468559#L1597-19 __utac_acc__Specification14_spec__1_#t~ret157 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~6 := __utac_acc__Specification14_spec__1_#t~ret157;havoc __utac_acc__Specification14_spec__1_#t~ret157; 468560#L2482-8 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~6); 468520#L2482-9 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 468521#L1257-4 assume { :end_inline_timeShift } true;cleanup_~i~1 := 1 + cleanup_~i~1; 516456#L1757-3 [2018-11-18 11:10:56,165 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 11:10:56,165 INFO L82 PathProgramCache]: Analyzing trace with hash 1394443671, now seen corresponding path program 1 times [2018-11-18 11:10:56,166 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 11:10:56,166 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 11:10:56,166 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 11:10:56,166 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 11:10:56,166 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 11:10:56,181 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 11:10:56,926 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 11:10:56,927 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 11:10:56,927 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-18 11:10:56,927 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-18 11:10:56,927 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 11:10:56,927 INFO L82 PathProgramCache]: Analyzing trace with hash -268153787, now seen corresponding path program 1 times [2018-11-18 11:10:56,927 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 11:10:56,928 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 11:10:56,928 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 11:10:56,928 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 11:10:56,928 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 11:10:56,933 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 11:10:56,988 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 11:10:56,988 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 11:10:56,988 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2018-11-18 11:10:56,988 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-18 11:10:56,989 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2018-11-18 11:10:56,989 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=43, Unknown=0, NotChecked=0, Total=56 [2018-11-18 11:10:56,989 INFO L87 Difference]: Start difference. First operand 65401 states and 121178 transitions. cyclomatic complexity: 55779 Second operand 8 states. [2018-11-18 11:11:07,674 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 11:11:07,674 INFO L93 Difference]: Finished difference Result 377263 states and 698830 transitions. [2018-11-18 11:11:07,675 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 41 states. [2018-11-18 11:11:07,675 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 377263 states and 698830 transitions. [2018-11-18 11:11:08,935 INFO L131 ngComponentsAnalysis]: Automaton has 6 accepting balls. 104838 [2018-11-18 11:11:09,593 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 377263 states to 377263 states and 698830 transitions. [2018-11-18 11:11:09,593 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 377263 [2018-11-18 11:11:09,767 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 377263 [2018-11-18 11:11:09,767 INFO L73 IsDeterministic]: Start isDeterministic. Operand 377263 states and 698830 transitions. [2018-11-18 11:11:09,911 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-18 11:11:09,911 INFO L705 BuchiCegarLoop]: Abstraction has 377263 states and 698830 transitions. [2018-11-18 11:11:10,056 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 377263 states and 698830 transitions. [2018-11-18 11:11:11,072 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 377263 to 64740. [2018-11-18 11:11:11,072 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 64740 states. [2018-11-18 11:11:11,934 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 64740 states to 64740 states and 119935 transitions. [2018-11-18 11:11:11,934 INFO L728 BuchiCegarLoop]: Abstraction has 64740 states and 119935 transitions. [2018-11-18 11:11:11,934 INFO L608 BuchiCegarLoop]: Abstraction has 64740 states and 119935 transitions. [2018-11-18 11:11:11,935 INFO L442 BuchiCegarLoop]: ======== Iteration 5============ [2018-11-18 11:11:11,935 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 64740 states and 119935 transitions. [2018-11-18 11:11:12,036 INFO L131 ngComponentsAnalysis]: Automaton has 6 accepting balls. 14678 [2018-11-18 11:11:12,036 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-18 11:11:12,036 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-18 11:11:12,039 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 11:11:12,040 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 11:11:12,040 INFO L794 eck$LassoCheckResult]: Stem: 907676#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];call #t~string53.base, #t~string53.offset := #Ultimate.alloc(10);call #t~string55.base, #t~string55.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string55.base,#t~string55.offset := 91];#memory_int := #memory_int[#t~string55.base,1 + #t~string55.offset := 95];#memory_int := #memory_int[#t~string55.base,2 + #t~string55.offset := 93];#memory_int := #memory_int[#t~string55.base,3 + #t~string55.offset := 0];call #t~string57.base, #t~string57.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string57.base,#t~string57.offset := 91];#memory_int := #memory_int[#t~string57.base,1 + #t~string57.offset := 93];#memory_int := #memory_int[#t~string57.base,2 + #t~string57.offset := 32];#memory_int := #memory_int[#t~string57.base,3 + #t~string57.offset := 0];call #t~string59.base, #t~string59.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string59.base,#t~string59.offset := 32];#memory_int := #memory_int[#t~string59.base,1 + #t~string59.offset := 97];#memory_int := #memory_int[#t~string59.base,2 + #t~string59.offset := 116];#memory_int := #memory_int[#t~string59.base,3 + #t~string59.offset := 32];#memory_int := #memory_int[#t~string59.base,4 + #t~string59.offset := 0];call #t~string61.base, #t~string61.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string61.base,#t~string61.offset := 37];#memory_int := #memory_int[#t~string61.base,1 + #t~string61.offset := 105];#memory_int := #memory_int[#t~string61.base,2 + #t~string61.offset := 0];call #t~string63.base, #t~string63.offset := #Ultimate.alloc(10);call #t~string65.base, #t~string65.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string65.base,#t~string65.offset := 117];#memory_int := #memory_int[#t~string65.base,1 + #t~string65.offset := 112];#memory_int := #memory_int[#t~string65.base,2 + #t~string65.offset := 0];call #t~string67.base, #t~string67.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string67.base,#t~string67.offset := 100];#memory_int := #memory_int[#t~string67.base,1 + #t~string67.offset := 111];#memory_int := #memory_int[#t~string67.base,2 + #t~string67.offset := 119];#memory_int := #memory_int[#t~string67.base,3 + #t~string67.offset := 110];#memory_int := #memory_int[#t~string67.base,4 + #t~string67.offset := 0];call #t~string69.base, #t~string69.offset := #Ultimate.alloc(7);#memory_int := #memory_int[#t~string69.base,#t~string69.offset := 32];#memory_int := #memory_int[#t~string69.base,1 + #t~string69.offset := 73];#memory_int := #memory_int[#t~string69.base,2 + #t~string69.offset := 76];#memory_int := #memory_int[#t~string69.base,3 + #t~string69.offset := 95];#memory_int := #memory_int[#t~string69.base,4 + #t~string69.offset := 112];#memory_int := #memory_int[#t~string69.base,5 + #t~string69.offset := 58];#memory_int := #memory_int[#t~string69.base,6 + #t~string69.offset := 0];call #t~string71.base, #t~string71.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string71.base,#t~string71.offset := 32];#memory_int := #memory_int[#t~string71.base,1 + #t~string71.offset := 37];#memory_int := #memory_int[#t~string71.base,2 + #t~string71.offset := 105];#memory_int := #memory_int[#t~string71.base,3 + #t~string71.offset := 0];call #t~string73.base, #t~string73.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string73.base,#t~string73.offset := 32];#memory_int := #memory_int[#t~string73.base,1 + #t~string73.offset := 37];#memory_int := #memory_int[#t~string73.base,2 + #t~string73.offset := 105];#memory_int := #memory_int[#t~string73.base,3 + #t~string73.offset := 0];call #t~string75.base, #t~string75.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string75.base,#t~string75.offset := 32];#memory_int := #memory_int[#t~string75.base,1 + #t~string75.offset := 37];#memory_int := #memory_int[#t~string75.base,2 + #t~string75.offset := 105];#memory_int := #memory_int[#t~string75.base,3 + #t~string75.offset := 0];call #t~string77.base, #t~string77.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string77.base,#t~string77.offset := 32];#memory_int := #memory_int[#t~string77.base,1 + #t~string77.offset := 37];#memory_int := #memory_int[#t~string77.base,2 + #t~string77.offset := 105];#memory_int := #memory_int[#t~string77.base,3 + #t~string77.offset := 0];call #t~string79.base, #t~string79.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string79.base,#t~string79.offset := 32];#memory_int := #memory_int[#t~string79.base,1 + #t~string79.offset := 37];#memory_int := #memory_int[#t~string79.base,2 + #t~string79.offset := 105];#memory_int := #memory_int[#t~string79.base,3 + #t~string79.offset := 0];call #t~string81.base, #t~string81.offset := #Ultimate.alloc(6);#memory_int := #memory_int[#t~string81.base,#t~string81.offset := 32];#memory_int := #memory_int[#t~string81.base,1 + #t~string81.offset := 70];#memory_int := #memory_int[#t~string81.base,2 + #t~string81.offset := 95];#memory_int := #memory_int[#t~string81.base,3 + #t~string81.offset := 112];#memory_int := #memory_int[#t~string81.base,4 + #t~string81.offset := 58];#memory_int := #memory_int[#t~string81.base,5 + #t~string81.offset := 0];call #t~string84.base, #t~string84.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string84.base,#t~string84.offset := 32];#memory_int := #memory_int[#t~string84.base,1 + #t~string84.offset := 37];#memory_int := #memory_int[#t~string84.base,2 + #t~string84.offset := 105];#memory_int := #memory_int[#t~string84.base,3 + #t~string84.offset := 0];call #t~string87.base, #t~string87.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string87.base,#t~string87.offset := 32];#memory_int := #memory_int[#t~string87.base,1 + #t~string87.offset := 37];#memory_int := #memory_int[#t~string87.base,2 + #t~string87.offset := 105];#memory_int := #memory_int[#t~string87.base,3 + #t~string87.offset := 0];call #t~string90.base, #t~string90.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string90.base,#t~string90.offset := 32];#memory_int := #memory_int[#t~string90.base,1 + #t~string90.offset := 37];#memory_int := #memory_int[#t~string90.base,2 + #t~string90.offset := 105];#memory_int := #memory_int[#t~string90.base,3 + #t~string90.offset := 0];call #t~string93.base, #t~string93.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string93.base,#t~string93.offset := 32];#memory_int := #memory_int[#t~string93.base,1 + #t~string93.offset := 37];#memory_int := #memory_int[#t~string93.base,2 + #t~string93.offset := 105];#memory_int := #memory_int[#t~string93.base,3 + #t~string93.offset := 0];call #t~string96.base, #t~string96.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string96.base,#t~string96.offset := 32];#memory_int := #memory_int[#t~string96.base,1 + #t~string96.offset := 37];#memory_int := #memory_int[#t~string96.base,2 + #t~string96.offset := 105];#memory_int := #memory_int[#t~string96.base,3 + #t~string96.offset := 0];call #t~string98.base, #t~string98.offset := #Ultimate.alloc(2);#memory_int := #memory_int[#t~string98.base,#t~string98.offset := 10];#memory_int := #memory_int[#t~string98.base,1 + #t~string98.offset := 0];call #t~string139.base, #t~string139.offset := #Ultimate.alloc(30);call #t~string140.base, #t~string140.offset := #Ultimate.alloc(9);call #t~string141.base, #t~string141.offset := #Ultimate.alloc(21);call #t~string142.base, #t~string142.offset := #Ultimate.alloc(30);call #t~string143.base, #t~string143.offset := #Ultimate.alloc(9);call #t~string144.base, #t~string144.offset := #Ultimate.alloc(21);call #t~string148.base, #t~string148.offset := #Ultimate.alloc(30);call #t~string149.base, #t~string149.offset := #Ultimate.alloc(9);call #t~string150.base, #t~string150.offset := #Ultimate.alloc(25);call #t~string151.base, #t~string151.offset := #Ultimate.alloc(30);call #t~string152.base, #t~string152.offset := #Ultimate.alloc(9);call #t~string153.base, #t~string153.offset := #Ultimate.alloc(25);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 907677#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res;havoc main_#t~ret114, main_~retValue_acc~18, main_~tmp~21;havoc main_~retValue_acc~18;havoc main_~tmp~21;assume { :begin_inline_select_helpers } true; 908855#L2445 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 908856#L2438 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res;havoc valid_product_~retValue_acc~23;havoc valid_product_~retValue_acc~23;valid_product_~retValue_acc~23 := 1;valid_product_#res := valid_product_~retValue_acc~23; 909518#L2453 main_#t~ret114 := valid_product_#res;assume { :end_inline_valid_product } true;main_~tmp~21 := main_#t~ret114;havoc main_#t~ret114; 909519#L1952 assume 0 != main_~tmp~21;assume { :begin_inline_setup } true; 909443#L1925 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret107, bigMacCall_~tmp~18;havoc bigMacCall_~tmp~18;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~25;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~25; 908413#L2551 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~25 := 4;getOrigin_#res := getOrigin_~retValue_acc~25; 907690#L2576 bigMacCall_#t~ret107 := getOrigin_#res;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~18 := bigMacCall_#t~ret107;havoc bigMacCall_#t~ret107;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~18;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 907691#L2979 assume 0 == initPersonOnFloor_~floor; 909495#L2980 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 905005#L3087-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 908112#L2771 assume !(0 == callOnFloor_~floorID); 909928#L2774 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 909737#L2783-2 assume { :end_inline_callOnFloor } true; 909938#L3123 assume { :end_inline_initPersonOnFloor } true; 909939#L1730 assume { :end_inline_bigMacCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 905327#L2708 assume !(0 == isFloorCalling_~floorID); 904469#L2712 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 904470#L2735 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 911245#L1597 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 911246#L981 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 909658#L312 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 909659#L985 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 935080#L998 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 935078#L1134 assume !(0 != timeShift_~tmp___9~2); 935077#L1225 assume !(1 == ~doorState~0); 912219#L1225-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 912220#L2708-3 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 913274#L2735-3 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 913275#L1597-1 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 913270#L864 assume 0 != stopRequestedInDirection_~tmp___0~2;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 913271#L312-1 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 935075#L877 timeShift_#t~ret49 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 935073#L1233 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 935072#L921 assume !(1 == ~currentHeading~0); 935069#L931 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 935068#L931-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 933052#L937-1 assume { :end_inline_continueInDirection } true; 932991#L1242-2 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret157, __utac_acc__Specification14_spec__1_#t~ret158, __utac_acc__Specification14_spec__1_#t~ret159, __utac_acc__Specification14_spec__1_#t~ret160, __utac_acc__Specification14_spec__1_~tmp~27, __utac_acc__Specification14_spec__1_~tmp___0~12, __utac_acc__Specification14_spec__1_~tmp___1~8, __utac_acc__Specification14_spec__1_~tmp___2~6;havoc __utac_acc__Specification14_spec__1_~tmp~27;havoc __utac_acc__Specification14_spec__1_~tmp___0~12;havoc __utac_acc__Specification14_spec__1_~tmp___1~8;havoc __utac_acc__Specification14_spec__1_~tmp___2~6;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 932989#L2708-25 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 932988#L2735-25 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 932987#L1597-3 __utac_acc__Specification14_spec__1_#t~ret157 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~6 := __utac_acc__Specification14_spec__1_#t~ret157;havoc __utac_acc__Specification14_spec__1_#t~ret157; 913341#L2482 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~6); 911173#L2482-1 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 910491#L1257 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 910492#L2708-26 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 932980#L2735-26 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 932979#L1597-4 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 932978#L981-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret24, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret25, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~11, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~8, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~11;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~8;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 932973#L2708-28 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 932968#L2735-28 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret24 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret24;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret24; 932964#L954-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~11 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~11; 932963#L966-3 stopRequestedAtCurrentFloor_#t~ret29 := stopRequestedAtCurrentFloor__wrappee__empty_#res;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~12 := stopRequestedAtCurrentFloor_#t~ret29;havoc stopRequestedAtCurrentFloor_#t~ret29;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 932956#L998-1 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 932940#L1134-2 assume !(0 != timeShift_~tmp___9~2); 932941#L1225-3 assume !(1 == ~doorState~0); 933435#L1225-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 933434#L2708-29 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 933432#L2735-29 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 933431#L1597-5 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 933429#L864-2 assume 0 != stopRequestedInDirection_~tmp___0~2;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 933427#L312-5 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 933423#L877-2 timeShift_#t~ret49 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 933416#L1233-2 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 933410#L921-3 assume !(1 == ~currentHeading~0); 933407#L931-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 933406#L931-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 930150#L937-7 assume { :end_inline_continueInDirection } true; 929763#L1242-5 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret157, __utac_acc__Specification14_spec__1_#t~ret158, __utac_acc__Specification14_spec__1_#t~ret159, __utac_acc__Specification14_spec__1_#t~ret160, __utac_acc__Specification14_spec__1_~tmp~27, __utac_acc__Specification14_spec__1_~tmp___0~12, __utac_acc__Specification14_spec__1_~tmp___1~8, __utac_acc__Specification14_spec__1_~tmp___2~6;havoc __utac_acc__Specification14_spec__1_~tmp~27;havoc __utac_acc__Specification14_spec__1_~tmp___0~12;havoc __utac_acc__Specification14_spec__1_~tmp___1~8;havoc __utac_acc__Specification14_spec__1_~tmp___2~6;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 929754#L2708-51 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 929752#L2735-51 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 929751#L1597-7 __utac_acc__Specification14_spec__1_#t~ret157 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~6 := __utac_acc__Specification14_spec__1_#t~ret157;havoc __utac_acc__Specification14_spec__1_#t~ret157; 929747#L2482-2 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~6); 929745#L2482-3 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 929743#L1257-1 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 929741#L2708-52 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 929740#L2735-52 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 929739#L1597-8 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 929738#L981-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret24, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret25, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~11, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~8, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~11;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~8;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 929737#L2708-54 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 929711#L2735-54 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret24 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret24;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret24; 929705#L954-5 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~11 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~11; 929704#L966-5 stopRequestedAtCurrentFloor_#t~ret29 := stopRequestedAtCurrentFloor__wrappee__empty_#res;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~12 := stopRequestedAtCurrentFloor_#t~ret29;havoc stopRequestedAtCurrentFloor_#t~ret29;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 929680#L998-2 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 929669#L1134-4 assume !(0 != timeShift_~tmp___9~2); 929670#L1225-6 assume !(1 == ~doorState~0); 930885#L1225-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 930884#L2708-55 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 930882#L2735-55 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 930881#L1597-9 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 930879#L864-4 assume 0 != stopRequestedInDirection_~tmp___0~2;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 930880#L312-9 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 930899#L877-4 timeShift_#t~ret49 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 930897#L1233-4 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 930179#L921-6 assume !(1 == ~currentHeading~0); 930156#L931-18 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 930142#L931-20 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 930138#L937-13 assume { :end_inline_continueInDirection } true; 918583#L1242-8 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret157, __utac_acc__Specification14_spec__1_#t~ret158, __utac_acc__Specification14_spec__1_#t~ret159, __utac_acc__Specification14_spec__1_#t~ret160, __utac_acc__Specification14_spec__1_~tmp~27, __utac_acc__Specification14_spec__1_~tmp___0~12, __utac_acc__Specification14_spec__1_~tmp___1~8, __utac_acc__Specification14_spec__1_~tmp___2~6;havoc __utac_acc__Specification14_spec__1_~tmp~27;havoc __utac_acc__Specification14_spec__1_~tmp___0~12;havoc __utac_acc__Specification14_spec__1_~tmp___1~8;havoc __utac_acc__Specification14_spec__1_~tmp___2~6;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 918582#L2708-77 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 918361#L2735-77 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 918581#L1597-11 __utac_acc__Specification14_spec__1_#t~ret157 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~6 := __utac_acc__Specification14_spec__1_#t~ret157;havoc __utac_acc__Specification14_spec__1_#t~ret157; 918576#L2482-4 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~6); 918574#L2482-5 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 918573#L1257-2 assume { :end_inline_timeShift } true; 918572#L1742 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret102, bobCall_~tmp~13;havoc bobCall_~tmp~13;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~25;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~25; 918569#L2551-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~25 := 4;getOrigin_#res := getOrigin_~retValue_acc~25; 918565#L2576-1 bobCall_#t~ret102 := getOrigin_#res;assume { :end_inline_getOrigin } true;bobCall_~tmp~13 := bobCall_#t~ret102;havoc bobCall_#t~ret102;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~13;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 918564#L2979-1 assume 0 == initPersonOnFloor_~floor; 917116#L2980-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 917096#L3087-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 917089#L2771-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 916872#L2783-5 assume { :end_inline_callOnFloor } true; 913358#L3123-1 assume { :end_inline_initPersonOnFloor } true; 911274#L1675 assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret108, cleanup_#t~ret109, cleanup_~i~1, cleanup_~tmp~19, cleanup_~tmp___0~8, cleanup_~__cil_tmp4~0;havoc cleanup_~i~1;havoc cleanup_~tmp~19;havoc cleanup_~tmp___0~8;havoc cleanup_~__cil_tmp4~0;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 911275#L2708-78 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 911268#L2735-78 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 911269#L1597-12 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 911263#L981-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 911265#L312-12 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 911259#L985-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 908477#L998-3 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 915300#L1134-6 assume !(0 != timeShift_~tmp___9~2); 915302#L1225-9 assume !(1 == ~doorState~0); 918643#L1225-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 918642#L2708-81 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 918641#L2735-81 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 918640#L1597-13 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 918638#L864-6 assume 0 != stopRequestedInDirection_~tmp___0~2;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 918636#L312-13 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 918243#L877-6 timeShift_#t~ret49 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 918238#L1233-6 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 918101#L921-9 assume !(1 == ~currentHeading~0); 918097#L931-27 assume !(0 == ~currentFloorID~0); 918094#L931-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 918093#L937-19 assume { :end_inline_continueInDirection } true; 913638#L1242-11 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret157, __utac_acc__Specification14_spec__1_#t~ret158, __utac_acc__Specification14_spec__1_#t~ret159, __utac_acc__Specification14_spec__1_#t~ret160, __utac_acc__Specification14_spec__1_~tmp~27, __utac_acc__Specification14_spec__1_~tmp___0~12, __utac_acc__Specification14_spec__1_~tmp___1~8, __utac_acc__Specification14_spec__1_~tmp___2~6;havoc __utac_acc__Specification14_spec__1_~tmp~27;havoc __utac_acc__Specification14_spec__1_~tmp___0~12;havoc __utac_acc__Specification14_spec__1_~tmp___1~8;havoc __utac_acc__Specification14_spec__1_~tmp___2~6;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 913639#L2708-103 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 913630#L2735-103 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 913631#L1597-15 __utac_acc__Specification14_spec__1_#t~ret157 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~6 := __utac_acc__Specification14_spec__1_#t~ret157;havoc __utac_acc__Specification14_spec__1_#t~ret157; 913626#L2482-6 assume 0 != __utac_acc__Specification14_spec__1_~tmp___2~6;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 913627#L312-15 __utac_acc__Specification14_spec__1_#t~ret158 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification14_spec__1_~tmp~27 := __utac_acc__Specification14_spec__1_#t~ret158;havoc __utac_acc__Specification14_spec__1_#t~ret158;assume { :begin_inline_isExecutiveFloor } true;isExecutiveFloor_#in~floorID := __utac_acc__Specification14_spec__1_~tmp~27;havoc isExecutiveFloor_#res;havoc isExecutiveFloor_~floorID, isExecutiveFloor_~retValue_acc~16;isExecutiveFloor_~floorID := isExecutiveFloor_#in~floorID;havoc isExecutiveFloor_~retValue_acc~16;isExecutiveFloor_~retValue_acc~16 := (if ~executiveFloor~0 == isExecutiveFloor_~floorID then 1 else 0);isExecutiveFloor_#res := isExecutiveFloor_~retValue_acc~16; 913620#L1606-3 __utac_acc__Specification14_spec__1_#t~ret159 := isExecutiveFloor_#res;assume { :end_inline_isExecutiveFloor } true;__utac_acc__Specification14_spec__1_~tmp___0~12 := __utac_acc__Specification14_spec__1_#t~ret159;havoc __utac_acc__Specification14_spec__1_#t~ret159; 913621#L2487-6 assume 0 != __utac_acc__Specification14_spec__1_~tmp___0~12; 913614#L2482-7 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 913615#L1257-3 assume { :end_inline_timeShift } true;cleanup_~i~1 := 0; 913590#L1757-3 [2018-11-18 11:11:12,041 INFO L796 eck$LassoCheckResult]: Loop: 913590#L1757-3 assume true; 913591#L1757-1 assume !false; 913570#L1758 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 913571#L1761 assume cleanup_~i~1 < cleanup_~__cil_tmp4~0;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~0;havoc isBlocked_~retValue_acc~0;isBlocked_~retValue_acc~0 := 0;isBlocked_#res := isBlocked_~retValue_acc~0; 913454#L139 cleanup_#t~ret108 := isBlocked_#res;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~8 := cleanup_#t~ret108;havoc cleanup_#t~ret108; 913455#L1765 assume 1 != cleanup_~tmp___0~8; 913416#L1765-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res;havoc isIdle_#t~ret8, isIdle_~retValue_acc~7, isIdle_~tmp~4;havoc isIdle_~retValue_acc~7;havoc isIdle_~tmp~4;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret3, anyStopRequested_#t~ret4, anyStopRequested_#t~ret5, anyStopRequested_#t~ret6, anyStopRequested_#t~ret7, anyStopRequested_~retValue_acc~6, anyStopRequested_~tmp~3, anyStopRequested_~tmp___0~0, anyStopRequested_~tmp___1~0, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~6;havoc anyStopRequested_~tmp~3;havoc anyStopRequested_~tmp___0~0;havoc anyStopRequested_~tmp___1~0;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 913417#L2708-104 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 913412#L2735-104 anyStopRequested_#t~ret3 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret3;havoc anyStopRequested_#t~ret3; 913413#L420 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~6 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~6; 913404#L484 isIdle_#t~ret8 := anyStopRequested_#res;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~4 := isIdle_#t~ret8;havoc isIdle_#t~ret8;isIdle_~retValue_acc~7 := (if 0 == isIdle_~tmp~4 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~7; 913405#L497 cleanup_#t~ret109 := isIdle_#res;assume { :end_inline_isIdle } true;cleanup_~tmp~19 := cleanup_#t~ret109;havoc cleanup_#t~ret109; 913394#L1777 assume !(0 != cleanup_~tmp~19);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 913395#L2708-109 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 913386#L2735-109 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 913387#L1597-16 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 913355#L981-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 913356#L312-16 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 913359#L985-4 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 913361#L998-4 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 954906#L1134-8 assume !(0 != timeShift_~tmp___9~2); 954904#L1225-12 assume !(1 == ~doorState~0); 954903#L1225-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 954902#L2708-112 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 954901#L2735-112 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 954900#L1597-17 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 954898#L864-8 assume 0 != stopRequestedInDirection_~tmp___0~2;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 954897#L312-17 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 954896#L877-8 timeShift_#t~ret49 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 954889#L1233-8 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 949986#L921-12 assume !(1 == ~currentHeading~0); 949982#L931-36 assume !(0 == ~currentFloorID~0); 949978#L931-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 949977#L937-25 assume { :end_inline_continueInDirection } true; 946451#L1242-14 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret157, __utac_acc__Specification14_spec__1_#t~ret158, __utac_acc__Specification14_spec__1_#t~ret159, __utac_acc__Specification14_spec__1_#t~ret160, __utac_acc__Specification14_spec__1_~tmp~27, __utac_acc__Specification14_spec__1_~tmp___0~12, __utac_acc__Specification14_spec__1_~tmp___1~8, __utac_acc__Specification14_spec__1_~tmp___2~6;havoc __utac_acc__Specification14_spec__1_~tmp~27;havoc __utac_acc__Specification14_spec__1_~tmp___0~12;havoc __utac_acc__Specification14_spec__1_~tmp___1~8;havoc __utac_acc__Specification14_spec__1_~tmp___2~6;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 946452#L2708-134 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 913874#L2735-134 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 913875#L1597-19 __utac_acc__Specification14_spec__1_#t~ret157 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~6 := __utac_acc__Specification14_spec__1_#t~ret157;havoc __utac_acc__Specification14_spec__1_#t~ret157; 913870#L2482-8 assume 0 != __utac_acc__Specification14_spec__1_~tmp___2~6;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 913871#L312-19 __utac_acc__Specification14_spec__1_#t~ret158 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification14_spec__1_~tmp~27 := __utac_acc__Specification14_spec__1_#t~ret158;havoc __utac_acc__Specification14_spec__1_#t~ret158;assume { :begin_inline_isExecutiveFloor } true;isExecutiveFloor_#in~floorID := __utac_acc__Specification14_spec__1_~tmp~27;havoc isExecutiveFloor_#res;havoc isExecutiveFloor_~floorID, isExecutiveFloor_~retValue_acc~16;isExecutiveFloor_~floorID := isExecutiveFloor_#in~floorID;havoc isExecutiveFloor_~retValue_acc~16;isExecutiveFloor_~retValue_acc~16 := (if ~executiveFloor~0 == isExecutiveFloor_~floorID then 1 else 0);isExecutiveFloor_#res := isExecutiveFloor_~retValue_acc~16; 913866#L1606-4 __utac_acc__Specification14_spec__1_#t~ret159 := isExecutiveFloor_#res;assume { :end_inline_isExecutiveFloor } true;__utac_acc__Specification14_spec__1_~tmp___0~12 := __utac_acc__Specification14_spec__1_#t~ret159;havoc __utac_acc__Specification14_spec__1_#t~ret159; 913867#L2487-8 assume 0 != __utac_acc__Specification14_spec__1_~tmp___0~12; 913681#L2482-9 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 913682#L1257-4 assume { :end_inline_timeShift } true;cleanup_~i~1 := 1 + cleanup_~i~1; 913590#L1757-3 [2018-11-18 11:11:12,045 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 11:11:12,045 INFO L82 PathProgramCache]: Analyzing trace with hash -113678761, now seen corresponding path program 1 times [2018-11-18 11:11:12,045 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 11:11:12,045 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 11:11:12,046 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 11:11:12,046 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 11:11:12,046 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 11:11:12,059 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 11:11:12,832 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 11:11:12,832 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 11:11:12,832 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-18 11:11:12,832 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-18 11:11:12,833 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 11:11:12,833 INFO L82 PathProgramCache]: Analyzing trace with hash -1431878011, now seen corresponding path program 1 times [2018-11-18 11:11:12,833 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 11:11:12,833 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 11:11:12,833 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 11:11:12,834 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 11:11:12,834 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 11:11:12,840 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2018-11-18 11:11:12,845 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2018-11-18 11:11:13,304 WARN L180 SmtUtils]: Spent 428.00 ms on a formula simplification. DAG size of input: 191 DAG size of output: 172 [2018-11-18 11:11:13,822 WARN L180 SmtUtils]: Spent 475.00 ms on a formula simplification. DAG size of input: 169 DAG size of output: 121 [2018-11-18 11:11:13,830 INFO L216 LassoAnalysis]: Preferences: [2018-11-18 11:11:13,831 INFO L124 ssoRankerPreferences]: Compute integeral hull: false [2018-11-18 11:11:13,831 INFO L125 ssoRankerPreferences]: Enable LassoPartitioneer: true [2018-11-18 11:11:13,831 INFO L126 ssoRankerPreferences]: Term annotations enabled: false [2018-11-18 11:11:13,831 INFO L127 ssoRankerPreferences]: Use exernal solver: true [2018-11-18 11:11:13,831 INFO L128 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 11:11:13,831 INFO L129 ssoRankerPreferences]: Dump SMT script to file: false [2018-11-18 11:11:13,831 INFO L130 ssoRankerPreferences]: Path of dumped script: [2018-11-18 11:11:13,832 INFO L131 ssoRankerPreferences]: Filename of dumped script: elevator_spec14_product27_true-unreach-call_true-termination.cil.c_Iteration5_Loop [2018-11-18 11:11:13,832 INFO L132 ssoRankerPreferences]: MapElimAlgo: Frank [2018-11-18 11:11:13,832 INFO L282 LassoAnalysis]: Starting lasso preprocessing... [2018-11-18 11:11:13,853 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:11:13,858 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:11:13,861 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:11:13,870 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:11:13,872 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:11:13,873 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:11:13,878 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:11:13,879 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:11:13,880 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:11:13,881 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:11:13,882 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:11:13,883 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:11:13,887 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:11:13,890 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:11:13,891 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:11:13,892 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:11:13,893 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:11:13,894 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:11:13,896 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:11:13,897 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:11:13,900 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:11:13,901 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:11:13,907 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:11:13,910 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:11:13,914 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:11:13,916 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:11:13,918 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:11:13,920 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:11:13,923 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:11:13,924 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:11:13,926 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:11:13,930 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:11:13,931 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:11:13,935 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:11:13,936 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:11:13,937 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:11:13,939 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:11:13,941 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:11:13,943 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:11:13,944 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:11:13,948 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:11:13,949 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:11:13,951 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:11:13,952 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:11:13,964 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:11:13,965 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:11:13,968 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:11:13,969 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:11:13,970 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:11:13,971 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:11:13,972 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:11:13,973 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:11:13,980 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:11:13,981 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:11:13,991 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:11:13,992 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:11:13,993 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:11:13,997 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:11:14,001 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:11:14,002 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:11:14,003 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:11:14,004 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:11:14,005 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:11:14,398 INFO L300 LassoAnalysis]: Preprocessing complete. [2018-11-18 11:11:14,399 INFO L412 LassoAnalysis]: Checking for nontermination... No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_ce920c4a-54ba-49d1-94ac-e4efc00bba70/bin-2019/uautomizer/z3 Starting monitored process 2 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 2 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 11:11:14,407 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 11:11:14,408 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 11:11:14,413 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 11:11:14,413 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_#t~ret20=0} Honda state: {ULTIMATE.start_stopRequestedInDirection_#t~ret20=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_ce920c4a-54ba-49d1-94ac-e4efc00bba70/bin-2019/uautomizer/z3 Starting monitored process 3 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 3 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 11:11:14,430 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 11:11:14,431 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 11:11:14,433 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 11:11:14,433 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_anyStopRequested_~tmp___1~0=0} Honda state: {ULTIMATE.start_anyStopRequested_~tmp___1~0=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_ce920c4a-54ba-49d1-94ac-e4efc00bba70/bin-2019/uautomizer/z3 Starting monitored process 4 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 4 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 11:11:14,458 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 11:11:14,458 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 11:11:14,461 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 11:11:14,461 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedAtCurrentFloor_#res=0, ULTIMATE.start_stopRequestedAtCurrentFloor_~retValue_acc~12=0} Honda state: {ULTIMATE.start_stopRequestedAtCurrentFloor_#res=0, ULTIMATE.start_stopRequestedAtCurrentFloor_~retValue_acc~12=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_ce920c4a-54ba-49d1-94ac-e4efc00bba70/bin-2019/uautomizer/z3 Starting monitored process 5 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 5 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 11:11:14,479 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 11:11:14,479 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 11:11:14,482 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 11:11:14,482 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___1~3=0} Honda state: {ULTIMATE.start_timeShift_~tmp___1~3=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_ce920c4a-54ba-49d1-94ac-e4efc00bba70/bin-2019/uautomizer/z3 Starting monitored process 6 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 6 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 11:11:14,511 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 11:11:14,511 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 11:11:14,518 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 11:11:14,518 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret43=0} Honda state: {ULTIMATE.start_timeShift_#t~ret43=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_ce920c4a-54ba-49d1-94ac-e4efc00bba70/bin-2019/uautomizer/z3 Starting monitored process 7 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 7 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 11:11:14,551 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 11:11:14,552 INFO L163 nArgumentSynthesizer]: Using integer mode. No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_ce920c4a-54ba-49d1-94ac-e4efc00bba70/bin-2019/uautomizer/z3 Starting monitored process 8 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 8 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 11:11:14,583 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 3 Nilpotent components: true [2018-11-18 11:11:14,584 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 11:11:15,050 INFO L452 LassoAnalysis]: Proving nontermination failed: No geometric nontermination argument exists. [2018-11-18 11:11:15,052 INFO L216 LassoAnalysis]: Preferences: [2018-11-18 11:11:15,052 INFO L124 ssoRankerPreferences]: Compute integeral hull: false [2018-11-18 11:11:15,053 INFO L125 ssoRankerPreferences]: Enable LassoPartitioneer: true [2018-11-18 11:11:15,053 INFO L126 ssoRankerPreferences]: Term annotations enabled: false [2018-11-18 11:11:15,053 INFO L127 ssoRankerPreferences]: Use exernal solver: false [2018-11-18 11:11:15,053 INFO L128 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 11:11:15,053 INFO L129 ssoRankerPreferences]: Dump SMT script to file: false [2018-11-18 11:11:15,053 INFO L130 ssoRankerPreferences]: Path of dumped script: [2018-11-18 11:11:15,053 INFO L131 ssoRankerPreferences]: Filename of dumped script: elevator_spec14_product27_true-unreach-call_true-termination.cil.c_Iteration5_Loop [2018-11-18 11:11:15,053 INFO L132 ssoRankerPreferences]: MapElimAlgo: Frank [2018-11-18 11:11:15,053 INFO L282 LassoAnalysis]: Starting lasso preprocessing... [2018-11-18 11:11:15,056 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:11:15,074 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:11:15,075 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:11:15,077 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:11:15,078 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:11:15,083 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:11:15,085 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:11:15,086 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:11:15,087 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:11:15,088 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:11:15,090 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:11:15,091 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:11:15,095 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:11:15,096 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:11:15,097 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:11:15,098 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:11:15,099 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:11:15,100 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:11:15,102 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:11:15,103 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:11:15,104 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:11:15,105 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:11:15,106 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:11:15,107 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:11:15,108 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:11:15,109 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:11:15,110 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:11:15,111 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:11:15,112 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:11:15,116 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:11:15,118 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:11:15,120 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:11:15,122 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:11:15,127 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:11:15,132 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:11:15,138 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:11:15,152 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:11:15,153 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:11:15,155 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:11:15,159 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:11:15,160 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:11:15,161 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:11:15,172 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:11:15,173 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:11:15,174 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:11:15,176 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:11:15,177 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:11:15,181 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:11:15,182 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:11:15,183 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:11:15,184 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:11:15,186 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:11:15,193 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:11:15,194 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:11:15,195 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:11:15,201 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:11:15,203 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:11:15,213 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:11:15,218 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:11:15,222 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:11:15,223 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:11:15,224 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:11:15,230 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 11:11:15,600 INFO L300 LassoAnalysis]: Preprocessing complete. [2018-11-18 11:11:15,605 INFO L497 LassoAnalysis]: Using template 'affine'. [2018-11-18 11:11:15,606 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 11:11:15,607 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 11:11:15,607 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 11:11:15,608 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 11:11:15,608 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 11:11:15,608 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 11:11:15,610 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 11:11:15,610 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 11:11:15,612 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 11:11:15,613 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 11:11:15,613 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 11:11:15,613 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 11:11:15,613 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 11:11:15,613 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 11:11:15,613 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 11:11:15,614 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 11:11:15,614 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 11:11:15,614 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 11:11:15,615 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 11:11:15,615 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 11:11:15,615 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 11:11:15,615 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 11:11:15,615 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 11:11:15,615 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 11:11:15,616 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 11:11:15,616 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 11:11:15,616 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 11:11:15,617 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 11:11:15,617 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 11:11:15,617 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 11:11:15,617 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 11:11:15,617 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 11:11:15,617 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 11:11:15,618 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 11:11:15,618 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 11:11:15,618 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 11:11:15,619 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 11:11:15,619 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 11:11:15,619 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 11:11:15,619 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 11:11:15,619 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 11:11:15,619 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 11:11:15,620 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 11:11:15,620 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 11:11:15,623 INFO L421 nArgumentSynthesizer]: Found a termination argument, trying to simplify. [2018-11-18 11:11:15,627 INFO L443 ModelExtractionUtils]: Simplification made 4 calls to the SMT solver. [2018-11-18 11:11:15,627 INFO L444 ModelExtractionUtils]: 1 out of 5 variables were initially zero. Simplification set additionally 1 variables to zero. [2018-11-18 11:11:15,629 INFO L437 nArgumentSynthesizer]: Simplifying supporting invariants... [2018-11-18 11:11:15,629 INFO L440 nArgumentSynthesizer]: Removed 0 redundant supporting invariants from a total of 0. [2018-11-18 11:11:15,629 INFO L518 LassoAnalysis]: Proved termination. [2018-11-18 11:11:15,629 INFO L520 LassoAnalysis]: Termination argument consisting of: Ranking function f(~cleanupTimeShifts~0, ULTIMATE.start_cleanup_~i~1) = 1*~cleanupTimeShifts~0 - 1*ULTIMATE.start_cleanup_~i~1 Supporting invariants [] [2018-11-18 11:11:15,630 INFO L297 tatePredicateManager]: 0 out of 0 supporting invariants were superfluous and have been removed [2018-11-18 11:11:15,663 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 11:11:15,764 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 11:11:15,773 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-18 11:11:15,810 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 11:11:15,812 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-18 11:11:15,836 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 11:11:15,839 INFO L152 lantAutomatonBouncer]: Defining deterministic Buchi interpolant automaton with honda bouncer for stem and without honda bouncer for loop.1 stem predicates 3 loop predicates [2018-11-18 11:11:15,840 INFO L72 iDifferenceNCSBLazy3]: Start buchiDifferenceNCSBLazy3. First operand 64740 states and 119935 transitions. cyclomatic complexity: 55201 Second operand 5 states. [2018-11-18 11:11:16,389 INFO L76 iDifferenceNCSBLazy3]: Finished buchiDifferenceNCSBLazy3. First operand 64740 states and 119935 transitions. cyclomatic complexity: 55201. Second operand 5 states. Result 79442 states and 147089 transitions. Complement of second has 8 states. [2018-11-18 11:11:16,390 INFO L142 InterpolantAutomaton]: Switched to read-only mode: Buchi interpolant automaton has 5 states 1 stem states 3 non-accepting loop states 1 accepting loop states [2018-11-18 11:11:16,391 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2018-11-18 11:11:16,399 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 11717 transitions. [2018-11-18 11:11:16,400 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 5 states and 11717 transitions. Stem has 147 letters. Loop has 44 letters. [2018-11-18 11:11:16,402 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2018-11-18 11:11:16,402 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 5 states and 11717 transitions. Stem has 191 letters. Loop has 44 letters. [2018-11-18 11:11:16,403 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2018-11-18 11:11:16,403 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 5 states and 11717 transitions. Stem has 147 letters. Loop has 88 letters. [2018-11-18 11:11:16,406 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2018-11-18 11:11:16,407 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 79442 states and 147089 transitions. [2018-11-18 11:11:16,639 INFO L131 ngComponentsAnalysis]: Automaton has 0 accepting balls. 0 [2018-11-18 11:11:16,639 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 79442 states to 0 states and 0 transitions. [2018-11-18 11:11:16,639 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 0 [2018-11-18 11:11:16,639 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 0 [2018-11-18 11:11:16,639 INFO L73 IsDeterministic]: Start isDeterministic. Operand 0 states and 0 transitions. [2018-11-18 11:11:16,639 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-18 11:11:16,639 INFO L705 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2018-11-18 11:11:16,639 INFO L728 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2018-11-18 11:11:16,640 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-18 11:11:16,640 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-18 11:11:16,640 INFO L87 Difference]: Start difference. First operand 0 states and 0 transitions. Second operand 3 states. [2018-11-18 11:11:16,640 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 11:11:16,640 INFO L93 Difference]: Finished difference Result 0 states and 0 transitions. [2018-11-18 11:11:16,640 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2018-11-18 11:11:16,640 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 0 states and 0 transitions. [2018-11-18 11:11:16,640 INFO L131 ngComponentsAnalysis]: Automaton has 0 accepting balls. 0 [2018-11-18 11:11:16,640 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 0 states to 0 states and 0 transitions. [2018-11-18 11:11:16,640 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 0 [2018-11-18 11:11:16,641 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 0 [2018-11-18 11:11:16,641 INFO L73 IsDeterministic]: Start isDeterministic. Operand 0 states and 0 transitions. [2018-11-18 11:11:16,641 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-18 11:11:16,641 INFO L705 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2018-11-18 11:11:16,641 INFO L728 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2018-11-18 11:11:16,641 INFO L608 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2018-11-18 11:11:16,641 INFO L442 BuchiCegarLoop]: ======== Iteration 6============ [2018-11-18 11:11:16,641 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 0 states and 0 transitions. [2018-11-18 11:11:16,641 INFO L131 ngComponentsAnalysis]: Automaton has 0 accepting balls. 0 [2018-11-18 11:11:16,641 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is true [2018-11-18 11:11:16,647 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer CFG 18.11 11:11:16 BoogieIcfgContainer [2018-11-18 11:11:16,647 INFO L132 PluginConnector]: ------------------------ END BuchiAutomizer---------------------------- [2018-11-18 11:11:16,647 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2018-11-18 11:11:16,647 INFO L271 PluginConnector]: Initializing Witness Printer... [2018-11-18 11:11:16,648 INFO L276 PluginConnector]: Witness Printer initialized [2018-11-18 11:11:16,648 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 18.11 11:10:17" (3/4) ... [2018-11-18 11:11:16,651 INFO L147 WitnessPrinter]: No result that supports witness generation found [2018-11-18 11:11:16,651 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2018-11-18 11:11:16,652 INFO L168 Benchmark]: Toolchain (without parser) took 67432.22 ms. Allocated memory was 1.0 GB in the beginning and 5.2 GB in the end (delta: 4.2 GB). Free memory was 951.1 MB in the beginning and 677.6 MB in the end (delta: 273.5 MB). Peak memory consumption was 4.5 GB. Max. memory is 11.5 GB. [2018-11-18 11:11:16,653 INFO L168 Benchmark]: CDTParser took 0.12 ms. Allocated memory is still 1.0 GB. Free memory is still 980.1 MB. There was no memory consumed. Max. memory is 11.5 GB. [2018-11-18 11:11:16,653 INFO L168 Benchmark]: CACSL2BoogieTranslator took 543.85 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 166.2 MB). Free memory was 951.1 MB in the beginning and 1.1 GB in the end (delta: -185.0 MB). Peak memory consumption was 47.8 MB. Max. memory is 11.5 GB. [2018-11-18 11:11:16,653 INFO L168 Benchmark]: Boogie Procedure Inliner took 203.67 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 59.5 MB). Peak memory consumption was 59.5 MB. Max. memory is 11.5 GB. [2018-11-18 11:11:16,654 INFO L168 Benchmark]: Boogie Preprocessor took 214.99 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.0 GB in the end (delta: 56.5 MB). Peak memory consumption was 56.5 MB. Max. memory is 11.5 GB. [2018-11-18 11:11:16,654 INFO L168 Benchmark]: RCFGBuilder took 6965.41 ms. Allocated memory was 1.2 GB in the beginning and 1.6 GB in the end (delta: 414.2 MB). Free memory was 1.0 GB in the beginning and 1.5 GB in the end (delta: -434.1 MB). Peak memory consumption was 448.8 MB. Max. memory is 11.5 GB. [2018-11-18 11:11:16,655 INFO L168 Benchmark]: BuchiAutomizer took 59497.38 ms. Allocated memory was 1.6 GB in the beginning and 5.2 GB in the end (delta: 3.6 GB). Free memory was 1.5 GB in the beginning and 677.6 MB in the end (delta: 776.5 MB). Peak memory consumption was 4.4 GB. Max. memory is 11.5 GB. [2018-11-18 11:11:16,655 INFO L168 Benchmark]: Witness Printer took 4.02 ms. Allocated memory is still 5.2 GB. Free memory is still 677.6 MB. There was no memory consumed. Max. memory is 11.5 GB. [2018-11-18 11:11:16,658 INFO L336 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.12 ms. Allocated memory is still 1.0 GB. Free memory is still 980.1 MB. There was no memory consumed. Max. memory is 11.5 GB. * CACSL2BoogieTranslator took 543.85 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 166.2 MB). Free memory was 951.1 MB in the beginning and 1.1 GB in the end (delta: -185.0 MB). Peak memory consumption was 47.8 MB. Max. memory is 11.5 GB. * Boogie Procedure Inliner took 203.67 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 59.5 MB). Peak memory consumption was 59.5 MB. Max. memory is 11.5 GB. * Boogie Preprocessor took 214.99 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.0 GB in the end (delta: 56.5 MB). Peak memory consumption was 56.5 MB. Max. memory is 11.5 GB. * RCFGBuilder took 6965.41 ms. Allocated memory was 1.2 GB in the beginning and 1.6 GB in the end (delta: 414.2 MB). Free memory was 1.0 GB in the beginning and 1.5 GB in the end (delta: -434.1 MB). Peak memory consumption was 448.8 MB. Max. memory is 11.5 GB. * BuchiAutomizer took 59497.38 ms. Allocated memory was 1.6 GB in the beginning and 5.2 GB in the end (delta: 3.6 GB). Free memory was 1.5 GB in the beginning and 677.6 MB in the end (delta: 776.5 MB). Peak memory consumption was 4.4 GB. Max. memory is 11.5 GB. * Witness Printer took 4.02 ms. Allocated memory is still 5.2 GB. Free memory is still 677.6 MB. There was no memory consumed. Max. memory is 11.5 GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: Constructed decomposition of program Your program was decomposed into 6 terminating modules (5 trivial, 1 deterministic, 0 nondeterministic). One deterministic module has affine ranking function cleanupTimeShifts + -1 * i and consists of 5 locations. 5 modules have a trivial ranking function, the largest among these consists of 8 locations. - StatisticsResult: Timing statistics BüchiAutomizer plugin needed 59.4s and 6 iterations. TraceHistogramMax:1. Analysis of lassos took 7.1s. Construction of modules took 27.6s. Büchi inclusion checks took 10.0s. Highest rank in rank-based complementation 3. Minimization of det autom 6. Minimization of nondet autom 0. Automata minimization 8.8s AutomataMinimizationTime, 4 MinimizatonAttempts, 600027 StatesRemovedByMinimization, 4 NontrivialMinimizations. Non-live state removal took 4.5s Buchi closure took 0.4s. Biggest automaton had 65401 states and ocurred in iteration 3. Nontrivial modules had stage [1, 0, 0, 0, 0]. InterpolantCoveringCapabilityFinite: 0/0 InterpolantCoveringCapabilityBuchi: 0/0 HoareTripleCheckerStatistics: 95766 SDtfs, 563427 SDslu, 596044 SDs, 0 SdLazy, 25881 SolverSat, 3957 SolverUnsat, 0 SolverUnknown, 0 SolverNotchecked, 27.6s Time LassoAnalysisResults: nont0 unkn0 SFLI0 SFLT0 conc0 concLT0 SILN0 SILU0 SILI4 SILT1 lasso0 LassoPreprocessingBenchmarks: Lassos: inital176 mio100 ax100 hnf100 lsp21 ukn100 mio100 lsp100 div100 bol100 ite100 ukn100 eq224 hnf86 smp100 dnf150 smp100 tf101 neg98 sie103 LassoTerminationAnalysisBenchmarks: ConstraintsSatisfiability: unsat Degree: 0 Time: 6ms VariablesStem: 0 VariablesLoop: 2 DisjunctsStem: 1 DisjunctsLoop: 1 SupportingInvariants: 0 MotzkinApplications: 2 LassoTerminationAnalysisBenchmarks: LassoNonterminationAnalysisSatFixpoint: 5 LassoNonterminationAnalysisSatUnbounded: 0 LassoNonterminationAnalysisUnsat: 1 LassoNonterminationAnalysisUnknown: 0 LassoNonterminationAnalysisTime: 0.5s - TerminationAnalysisResult: Termination proven Buchi Automizer proved that your program is terminating RESULT: Ultimate proved your program to be correct! Received shutdown request...