./Ultimate.py --spec ../../sv-benchmarks/c/Termination.prp --file ../../sv-benchmarks/c/product-lines/elevator_spec14_product31_true-unreach-call_true-termination.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for termination Using default analysis Version 5842f4b8 Calling Ultimate with: java -Dosgi.configuration.area=/tmp/vcloud-vcloud-master/worker/working_dir_2f012cc8-9a3e-4900-b054-f09b41e9aa8b/bin-2019/uautomizer/data/config -Xmx12G -Xms1G -jar /tmp/vcloud-vcloud-master/worker/working_dir_2f012cc8-9a3e-4900-b054-f09b41e9aa8b/bin-2019/uautomizer/plugins/org.eclipse.equinox.launcher_1.3.100.v20150511-1540.jar -data @noDefault -ultimatedata /tmp/vcloud-vcloud-master/worker/working_dir_2f012cc8-9a3e-4900-b054-f09b41e9aa8b/bin-2019/uautomizer/data -tc /tmp/vcloud-vcloud-master/worker/working_dir_2f012cc8-9a3e-4900-b054-f09b41e9aa8b/bin-2019/uautomizer/config/AutomizerTermination.xml -i ../../sv-benchmarks/c/product-lines/elevator_spec14_product31_true-unreach-call_true-termination.cil.c -s /tmp/vcloud-vcloud-master/worker/working_dir_2f012cc8-9a3e-4900-b054-f09b41e9aa8b/bin-2019/uautomizer/config/svcomp-Termination-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud-vcloud-master/worker/working_dir_2f012cc8-9a3e-4900-b054-f09b41e9aa8b/bin-2019/uautomizer --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(F end) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 5e1ff702e9d3c4686258650f8b88102f67b944d7 .................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................. Execution finished normally Writing output log to file Ultimate.log Result: TRUE --- Real Ultimate output --- This is Ultimate 0.1.23-5842f4b [2018-11-18 16:50:49,513 INFO L170 SettingsManager]: Resetting all preferences to default values... [2018-11-18 16:50:49,514 INFO L174 SettingsManager]: Resetting UltimateCore preferences to default values [2018-11-18 16:50:49,522 INFO L177 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2018-11-18 16:50:49,522 INFO L174 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2018-11-18 16:50:49,522 INFO L174 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2018-11-18 16:50:49,523 INFO L174 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2018-11-18 16:50:49,524 INFO L174 SettingsManager]: Resetting LassoRanker preferences to default values [2018-11-18 16:50:49,525 INFO L174 SettingsManager]: Resetting Reaching Definitions preferences to default values [2018-11-18 16:50:49,526 INFO L174 SettingsManager]: Resetting SyntaxChecker preferences to default values [2018-11-18 16:50:49,527 INFO L177 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2018-11-18 16:50:49,527 INFO L174 SettingsManager]: Resetting LTL2Aut preferences to default values [2018-11-18 16:50:49,528 INFO L174 SettingsManager]: Resetting PEA to Boogie preferences to default values [2018-11-18 16:50:49,528 INFO L174 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2018-11-18 16:50:49,529 INFO L174 SettingsManager]: Resetting ChcToBoogie preferences to default values [2018-11-18 16:50:49,529 INFO L174 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2018-11-18 16:50:49,530 INFO L174 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2018-11-18 16:50:49,531 INFO L174 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2018-11-18 16:50:49,532 INFO L174 SettingsManager]: Resetting CodeCheck preferences to default values [2018-11-18 16:50:49,534 INFO L174 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2018-11-18 16:50:49,534 INFO L174 SettingsManager]: Resetting RCFGBuilder preferences to default values [2018-11-18 16:50:49,535 INFO L174 SettingsManager]: Resetting TraceAbstraction preferences to default values [2018-11-18 16:50:49,537 INFO L177 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2018-11-18 16:50:49,537 INFO L177 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2018-11-18 16:50:49,537 INFO L174 SettingsManager]: Resetting TreeAutomizer preferences to default values [2018-11-18 16:50:49,538 INFO L174 SettingsManager]: Resetting IcfgTransformer preferences to default values [2018-11-18 16:50:49,539 INFO L174 SettingsManager]: Resetting Boogie Printer preferences to default values [2018-11-18 16:50:49,539 INFO L174 SettingsManager]: Resetting ReqPrinter preferences to default values [2018-11-18 16:50:49,540 INFO L174 SettingsManager]: Resetting Witness Printer preferences to default values [2018-11-18 16:50:49,540 INFO L177 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2018-11-18 16:50:49,541 INFO L174 SettingsManager]: Resetting CDTParser preferences to default values [2018-11-18 16:50:49,541 INFO L177 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2018-11-18 16:50:49,541 INFO L177 SettingsManager]: ReqParser provides no preferences, ignoring... [2018-11-18 16:50:49,541 INFO L174 SettingsManager]: Resetting SmtParser preferences to default values [2018-11-18 16:50:49,542 INFO L174 SettingsManager]: Resetting Witness Parser preferences to default values [2018-11-18 16:50:49,543 INFO L181 SettingsManager]: Finished resetting all preferences to default values... [2018-11-18 16:50:49,543 INFO L98 SettingsManager]: Beginning loading settings from /tmp/vcloud-vcloud-master/worker/working_dir_2f012cc8-9a3e-4900-b054-f09b41e9aa8b/bin-2019/uautomizer/config/svcomp-Termination-32bit-Automizer_Default.epf [2018-11-18 16:50:49,554 INFO L110 SettingsManager]: Loading preferences was successful [2018-11-18 16:50:49,554 INFO L112 SettingsManager]: Preferences different from defaults after loading the file: [2018-11-18 16:50:49,555 INFO L131 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2018-11-18 16:50:49,555 INFO L133 SettingsManager]: * Create parallel compositions if possible=false [2018-11-18 16:50:49,556 INFO L133 SettingsManager]: * Use SBE=true [2018-11-18 16:50:49,556 INFO L131 SettingsManager]: Preferences of BuchiAutomizer differ from their defaults: [2018-11-18 16:50:49,556 INFO L133 SettingsManager]: * NCSB implementation=INTSET_LAZY3 [2018-11-18 16:50:49,556 INFO L133 SettingsManager]: * Use old map elimination=false [2018-11-18 16:50:49,556 INFO L133 SettingsManager]: * Use external solver (rank synthesis)=false [2018-11-18 16:50:49,556 INFO L133 SettingsManager]: * Use only trivial implications for array writes=true [2018-11-18 16:50:49,557 INFO L133 SettingsManager]: * Rank analysis=LINEAR_WITH_GUESSES [2018-11-18 16:50:49,557 INFO L131 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2018-11-18 16:50:49,557 INFO L133 SettingsManager]: * sizeof long=4 [2018-11-18 16:50:49,557 INFO L133 SettingsManager]: * Check unreachability of error function in SV-COMP mode=false [2018-11-18 16:50:49,557 INFO L133 SettingsManager]: * Overapproximate operations on floating types=true [2018-11-18 16:50:49,557 INFO L133 SettingsManager]: * sizeof POINTER=4 [2018-11-18 16:50:49,557 INFO L133 SettingsManager]: * Check division by zero=IGNORE [2018-11-18 16:50:49,558 INFO L133 SettingsManager]: * Pointer to allocated memory at dereference=ASSUME [2018-11-18 16:50:49,558 INFO L133 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=ASSUME [2018-11-18 16:50:49,558 INFO L133 SettingsManager]: * Check array bounds for arrays that are off heap=ASSUME [2018-11-18 16:50:49,558 INFO L133 SettingsManager]: * sizeof long double=12 [2018-11-18 16:50:49,558 INFO L133 SettingsManager]: * Check if freed pointer was valid=false [2018-11-18 16:50:49,558 INFO L133 SettingsManager]: * Assume nondeterminstic values are in range=false [2018-11-18 16:50:49,558 INFO L133 SettingsManager]: * Use constant arrays=true [2018-11-18 16:50:49,559 INFO L133 SettingsManager]: * Pointer base address is valid at dereference=ASSUME [2018-11-18 16:50:49,559 INFO L131 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2018-11-18 16:50:49,559 INFO L133 SettingsManager]: * Size of a code block=SequenceOfStatements [2018-11-18 16:50:49,559 INFO L133 SettingsManager]: * To the following directory=/home/matthias/ultimate/dump [2018-11-18 16:50:49,559 INFO L131 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2018-11-18 16:50:49,559 INFO L133 SettingsManager]: * Trace refinement strategy=CAMEL [2018-11-18 16:50:49,560 INFO L133 SettingsManager]: * Dump automata to the following directory=/home/matthias/ultimate/dump/auto [2018-11-18 16:50:49,560 INFO L131 SettingsManager]: Preferences of IcfgTransformer differ from their defaults: [2018-11-18 16:50:49,560 INFO L133 SettingsManager]: * TransformationType=MODULO_NEIGHBOR Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud-vcloud-master/worker/working_dir_2f012cc8-9a3e-4900-b054-f09b41e9aa8b/bin-2019/uautomizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(F end) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 5e1ff702e9d3c4686258650f8b88102f67b944d7 [2018-11-18 16:50:49,581 INFO L81 nceAwareModelManager]: Repository-Root is: /tmp [2018-11-18 16:50:49,590 INFO L258 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2018-11-18 16:50:49,592 INFO L214 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2018-11-18 16:50:49,593 INFO L271 PluginConnector]: Initializing CDTParser... [2018-11-18 16:50:49,593 INFO L276 PluginConnector]: CDTParser initialized [2018-11-18 16:50:49,593 INFO L418 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud-vcloud-master/worker/working_dir_2f012cc8-9a3e-4900-b054-f09b41e9aa8b/bin-2019/uautomizer/../../sv-benchmarks/c/product-lines/elevator_spec14_product31_true-unreach-call_true-termination.cil.c [2018-11-18 16:50:49,629 INFO L221 CDTParser]: Created temporary CDT project at /tmp/vcloud-vcloud-master/worker/working_dir_2f012cc8-9a3e-4900-b054-f09b41e9aa8b/bin-2019/uautomizer/data/d0d3a21df/f3905e4a9b0e4df2bb10de0ec434cdc0/FLAG059571c79 [2018-11-18 16:50:50,102 INFO L307 CDTParser]: Found 1 translation units. [2018-11-18 16:50:50,103 INFO L161 CDTParser]: Scanning /tmp/vcloud-vcloud-master/worker/working_dir_2f012cc8-9a3e-4900-b054-f09b41e9aa8b/sv-benchmarks/c/product-lines/elevator_spec14_product31_true-unreach-call_true-termination.cil.c [2018-11-18 16:50:50,115 INFO L355 CDTParser]: About to delete temporary CDT project at /tmp/vcloud-vcloud-master/worker/working_dir_2f012cc8-9a3e-4900-b054-f09b41e9aa8b/bin-2019/uautomizer/data/d0d3a21df/f3905e4a9b0e4df2bb10de0ec434cdc0/FLAG059571c79 [2018-11-18 16:50:50,614 INFO L363 CDTParser]: Successfully deleted /tmp/vcloud-vcloud-master/worker/working_dir_2f012cc8-9a3e-4900-b054-f09b41e9aa8b/bin-2019/uautomizer/data/d0d3a21df/f3905e4a9b0e4df2bb10de0ec434cdc0 [2018-11-18 16:50:50,616 INFO L296 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2018-11-18 16:50:50,617 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2018-11-18 16:50:50,618 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2018-11-18 16:50:50,618 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2018-11-18 16:50:50,620 INFO L276 PluginConnector]: CACSL2BoogieTranslator initialized [2018-11-18 16:50:50,621 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 18.11 04:50:50" (1/1) ... [2018-11-18 16:50:50,622 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@209e89ff and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 04:50:50, skipping insertion in model container [2018-11-18 16:50:50,622 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 18.11 04:50:50" (1/1) ... [2018-11-18 16:50:50,628 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2018-11-18 16:50:50,671 INFO L176 MainTranslator]: Built tables and reachable declarations [2018-11-18 16:50:51,063 INFO L201 PostProcessor]: Analyzing one entry point: main [2018-11-18 16:50:51,073 INFO L191 MainTranslator]: Completed pre-run [2018-11-18 16:50:51,161 INFO L201 PostProcessor]: Analyzing one entry point: main [2018-11-18 16:50:51,202 INFO L195 MainTranslator]: Completed translation [2018-11-18 16:50:51,203 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 04:50:51 WrapperNode [2018-11-18 16:50:51,203 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2018-11-18 16:50:51,203 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2018-11-18 16:50:51,203 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2018-11-18 16:50:51,204 INFO L276 PluginConnector]: Boogie Procedure Inliner initialized [2018-11-18 16:50:51,211 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 04:50:51" (1/1) ... [2018-11-18 16:50:51,229 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 04:50:51" (1/1) ... [2018-11-18 16:50:51,475 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2018-11-18 16:50:51,475 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2018-11-18 16:50:51,475 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2018-11-18 16:50:51,475 INFO L276 PluginConnector]: Boogie Preprocessor initialized [2018-11-18 16:50:51,484 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 04:50:51" (1/1) ... [2018-11-18 16:50:51,484 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 04:50:51" (1/1) ... [2018-11-18 16:50:51,530 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 04:50:51" (1/1) ... [2018-11-18 16:50:51,530 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 04:50:51" (1/1) ... [2018-11-18 16:50:51,624 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 04:50:51" (1/1) ... [2018-11-18 16:50:51,718 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 04:50:51" (1/1) ... [2018-11-18 16:50:51,749 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 04:50:51" (1/1) ... [2018-11-18 16:50:51,810 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2018-11-18 16:50:51,811 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2018-11-18 16:50:51,811 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2018-11-18 16:50:51,811 INFO L276 PluginConnector]: RCFGBuilder initialized [2018-11-18 16:50:51,812 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 04:50:51" (1/1) ... No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_2f012cc8-9a3e-4900-b054-f09b41e9aa8b/bin-2019/uautomizer/z3 Starting monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 16:50:51,868 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.alloc [2018-11-18 16:50:51,868 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2018-11-18 16:50:51,868 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2018-11-18 16:51:00,846 INFO L278 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2018-11-18 16:51:00,846 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 18.11 04:51:00 BoogieIcfgContainer [2018-11-18 16:51:00,846 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2018-11-18 16:51:00,847 INFO L113 PluginConnector]: ------------------------BuchiAutomizer---------------------------- [2018-11-18 16:51:00,847 INFO L271 PluginConnector]: Initializing BuchiAutomizer... [2018-11-18 16:51:00,849 INFO L276 PluginConnector]: BuchiAutomizer initialized [2018-11-18 16:51:00,850 INFO L102 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2018-11-18 16:51:00,850 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "CDTParser AST 18.11 04:50:50" (1/3) ... [2018-11-18 16:51:00,851 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@3fa65164 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 18.11 04:51:00, skipping insertion in model container [2018-11-18 16:51:00,851 INFO L102 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2018-11-18 16:51:00,851 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 04:50:51" (2/3) ... [2018-11-18 16:51:00,851 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@3fa65164 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 18.11 04:51:00, skipping insertion in model container [2018-11-18 16:51:00,852 INFO L102 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2018-11-18 16:51:00,852 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 18.11 04:51:00" (3/3) ... [2018-11-18 16:51:00,853 INFO L375 chiAutomizerObserver]: Analyzing ICFG elevator_spec14_product31_true-unreach-call_true-termination.cil.c [2018-11-18 16:51:00,892 INFO L133 ementStrategyFactory]: Using default assertion order modulation [2018-11-18 16:51:00,892 INFO L374 BuchiCegarLoop]: Interprodecural is true [2018-11-18 16:51:00,893 INFO L375 BuchiCegarLoop]: Hoare is false [2018-11-18 16:51:00,893 INFO L376 BuchiCegarLoop]: Compute interpolants for ForwardPredicates [2018-11-18 16:51:00,893 INFO L377 BuchiCegarLoop]: Backedges is STRAIGHT_LINE [2018-11-18 16:51:00,893 INFO L378 BuchiCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2018-11-18 16:51:00,893 INFO L379 BuchiCegarLoop]: Difference is false [2018-11-18 16:51:00,893 INFO L380 BuchiCegarLoop]: Minimize is MINIMIZE_SEVPA [2018-11-18 16:51:00,893 INFO L383 BuchiCegarLoop]: ======== Iteration 0==of CEGAR loop == BuchiCegarLoop======== [2018-11-18 16:51:00,967 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 8987 states. [2018-11-18 16:51:01,068 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1814 [2018-11-18 16:51:01,068 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-18 16:51:01,068 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-18 16:51:01,083 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 16:51:01,083 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 16:51:01,083 INFO L442 BuchiCegarLoop]: ======== Iteration 1============ [2018-11-18 16:51:01,084 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 8987 states. [2018-11-18 16:51:01,135 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1814 [2018-11-18 16:51:01,135 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-18 16:51:01,135 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-18 16:51:01,139 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 16:51:01,139 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 16:51:01,147 INFO L794 eck$LassoCheckResult]: Stem: 2366#ULTIMATE.startENTRYtrue assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];call #t~string18.base, #t~string18.offset := #Ultimate.alloc(30);call #t~string19.base, #t~string19.offset := #Ultimate.alloc(9);call #t~string20.base, #t~string20.offset := #Ultimate.alloc(21);call #t~string21.base, #t~string21.offset := #Ultimate.alloc(30);call #t~string22.base, #t~string22.offset := #Ultimate.alloc(9);call #t~string23.base, #t~string23.offset := #Ultimate.alloc(21);call #t~string27.base, #t~string27.offset := #Ultimate.alloc(30);call #t~string28.base, #t~string28.offset := #Ultimate.alloc(9);call #t~string29.base, #t~string29.offset := #Ultimate.alloc(25);call #t~string30.base, #t~string30.offset := #Ultimate.alloc(30);call #t~string31.base, #t~string31.offset := #Ultimate.alloc(9);call #t~string32.base, #t~string32.offset := #Ultimate.alloc(25);call #t~string102.base, #t~string102.offset := #Ultimate.alloc(10);call #t~string104.base, #t~string104.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string104.base,#t~string104.offset := 91];#memory_int := #memory_int[#t~string104.base,1 + #t~string104.offset := 95];#memory_int := #memory_int[#t~string104.base,2 + #t~string104.offset := 93];#memory_int := #memory_int[#t~string104.base,3 + #t~string104.offset := 0];call #t~string106.base, #t~string106.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string106.base,#t~string106.offset := 91];#memory_int := #memory_int[#t~string106.base,1 + #t~string106.offset := 93];#memory_int := #memory_int[#t~string106.base,2 + #t~string106.offset := 32];#memory_int := #memory_int[#t~string106.base,3 + #t~string106.offset := 0];call #t~string108.base, #t~string108.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string108.base,#t~string108.offset := 32];#memory_int := #memory_int[#t~string108.base,1 + #t~string108.offset := 97];#memory_int := #memory_int[#t~string108.base,2 + #t~string108.offset := 116];#memory_int := #memory_int[#t~string108.base,3 + #t~string108.offset := 32];#memory_int := #memory_int[#t~string108.base,4 + #t~string108.offset := 0];call #t~string110.base, #t~string110.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string110.base,#t~string110.offset := 37];#memory_int := #memory_int[#t~string110.base,1 + #t~string110.offset := 105];#memory_int := #memory_int[#t~string110.base,2 + #t~string110.offset := 0];call #t~string112.base, #t~string112.offset := #Ultimate.alloc(10);call #t~string114.base, #t~string114.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string114.base,#t~string114.offset := 117];#memory_int := #memory_int[#t~string114.base,1 + #t~string114.offset := 112];#memory_int := #memory_int[#t~string114.base,2 + #t~string114.offset := 0];call #t~string116.base, #t~string116.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string116.base,#t~string116.offset := 100];#memory_int := #memory_int[#t~string116.base,1 + #t~string116.offset := 111];#memory_int := #memory_int[#t~string116.base,2 + #t~string116.offset := 119];#memory_int := #memory_int[#t~string116.base,3 + #t~string116.offset := 110];#memory_int := #memory_int[#t~string116.base,4 + #t~string116.offset := 0];call #t~string118.base, #t~string118.offset := #Ultimate.alloc(7);#memory_int := #memory_int[#t~string118.base,#t~string118.offset := 32];#memory_int := #memory_int[#t~string118.base,1 + #t~string118.offset := 73];#memory_int := #memory_int[#t~string118.base,2 + #t~string118.offset := 76];#memory_int := #memory_int[#t~string118.base,3 + #t~string118.offset := 95];#memory_int := #memory_int[#t~string118.base,4 + #t~string118.offset := 112];#memory_int := #memory_int[#t~string118.base,5 + #t~string118.offset := 58];#memory_int := #memory_int[#t~string118.base,6 + #t~string118.offset := 0];call #t~string120.base, #t~string120.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string120.base,#t~string120.offset := 32];#memory_int := #memory_int[#t~string120.base,1 + #t~string120.offset := 37];#memory_int := #memory_int[#t~string120.base,2 + #t~string120.offset := 105];#memory_int := #memory_int[#t~string120.base,3 + #t~string120.offset := 0];call #t~string122.base, #t~string122.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string122.base,#t~string122.offset := 32];#memory_int := #memory_int[#t~string122.base,1 + #t~string122.offset := 37];#memory_int := #memory_int[#t~string122.base,2 + #t~string122.offset := 105];#memory_int := #memory_int[#t~string122.base,3 + #t~string122.offset := 0];call #t~string124.base, #t~string124.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string124.base,#t~string124.offset := 32];#memory_int := #memory_int[#t~string124.base,1 + #t~string124.offset := 37];#memory_int := #memory_int[#t~string124.base,2 + #t~string124.offset := 105];#memory_int := #memory_int[#t~string124.base,3 + #t~string124.offset := 0];call #t~string126.base, #t~string126.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string126.base,#t~string126.offset := 32];#memory_int := #memory_int[#t~string126.base,1 + #t~string126.offset := 37];#memory_int := #memory_int[#t~string126.base,2 + #t~string126.offset := 105];#memory_int := #memory_int[#t~string126.base,3 + #t~string126.offset := 0];call #t~string128.base, #t~string128.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string128.base,#t~string128.offset := 32];#memory_int := #memory_int[#t~string128.base,1 + #t~string128.offset := 37];#memory_int := #memory_int[#t~string128.base,2 + #t~string128.offset := 105];#memory_int := #memory_int[#t~string128.base,3 + #t~string128.offset := 0];call #t~string130.base, #t~string130.offset := #Ultimate.alloc(6);#memory_int := #memory_int[#t~string130.base,#t~string130.offset := 32];#memory_int := #memory_int[#t~string130.base,1 + #t~string130.offset := 70];#memory_int := #memory_int[#t~string130.base,2 + #t~string130.offset := 95];#memory_int := #memory_int[#t~string130.base,3 + #t~string130.offset := 112];#memory_int := #memory_int[#t~string130.base,4 + #t~string130.offset := 58];#memory_int := #memory_int[#t~string130.base,5 + #t~string130.offset := 0];call #t~string133.base, #t~string133.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string133.base,#t~string133.offset := 32];#memory_int := #memory_int[#t~string133.base,1 + #t~string133.offset := 37];#memory_int := #memory_int[#t~string133.base,2 + #t~string133.offset := 105];#memory_int := #memory_int[#t~string133.base,3 + #t~string133.offset := 0];call #t~string136.base, #t~string136.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string136.base,#t~string136.offset := 32];#memory_int := #memory_int[#t~string136.base,1 + #t~string136.offset := 37];#memory_int := #memory_int[#t~string136.base,2 + #t~string136.offset := 105];#memory_int := #memory_int[#t~string136.base,3 + #t~string136.offset := 0];call #t~string139.base, #t~string139.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string139.base,#t~string139.offset := 32];#memory_int := #memory_int[#t~string139.base,1 + #t~string139.offset := 37];#memory_int := #memory_int[#t~string139.base,2 + #t~string139.offset := 105];#memory_int := #memory_int[#t~string139.base,3 + #t~string139.offset := 0];call #t~string142.base, #t~string142.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string142.base,#t~string142.offset := 32];#memory_int := #memory_int[#t~string142.base,1 + #t~string142.offset := 37];#memory_int := #memory_int[#t~string142.base,2 + #t~string142.offset := 105];#memory_int := #memory_int[#t~string142.base,3 + #t~string142.offset := 0];call #t~string145.base, #t~string145.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string145.base,#t~string145.offset := 32];#memory_int := #memory_int[#t~string145.base,1 + #t~string145.offset := 37];#memory_int := #memory_int[#t~string145.base,2 + #t~string145.offset := 105];#memory_int := #memory_int[#t~string145.base,3 + #t~string145.offset := 0];call #t~string147.base, #t~string147.offset := #Ultimate.alloc(2);#memory_int := #memory_int[#t~string147.base,#t~string147.offset := 10];#memory_int := #memory_int[#t~string147.base,1 + #t~string147.offset := 0];~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 8360#L-1true assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res;havoc main_#t~ret163, main_~retValue_acc~31, main_~tmp~28;havoc main_~retValue_acc~31;havoc main_~tmp~28;assume { :begin_inline_select_helpers } true; 6764#L1199true assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 5698#L1192true assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res;havoc valid_product_~retValue_acc~7;havoc valid_product_~retValue_acc~7;valid_product_~retValue_acc~7 := 1;valid_product_#res := valid_product_~retValue_acc~7; 4362#L1207true main_#t~ret163 := valid_product_#res;assume { :end_inline_valid_product } true;main_~tmp~28 := main_#t~ret163;havoc main_#t~ret163; 2217#L3282true assume 0 != main_~tmp~28;assume { :begin_inline_setup } true; 3288#L3258true assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret156, bigMacCall_~tmp~25;havoc bigMacCall_~tmp~25;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~9;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~9; 7612#L1257true assume 0 == getOrigin_~person;getOrigin_~retValue_acc~9 := 4;getOrigin_#res := getOrigin_~retValue_acc~9; 1313#L1282true bigMacCall_#t~ret156 := getOrigin_#res;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~25 := bigMacCall_#t~ret156;havoc bigMacCall_#t~ret156;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~25;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 1345#L399true assume 0 == initPersonOnFloor_~floor; 1221#L400true assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 4110#L507-1true assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 8639#L191true assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 7430#L203-2true assume { :end_inline_callOnFloor } true; 8642#L543true assume { :end_inline_initPersonOnFloor } true; 266#L3063true assume { :end_inline_bigMacCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~18, timeShift_~tmp___0~9, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~18;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret75, stopRequestedAtCurrentFloor_#t~ret76, stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~16, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~16;havoc stopRequestedAtCurrentFloor_~tmp___0~7;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret149, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 6063#L128true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 4055#L155true isExecutiveFloorCalling_#t~ret149 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret149;havoc isExecutiveFloorCalling_#t~ret149;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 2092#L2933true stopRequestedAtCurrentFloor_#t~ret75 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~16 := stopRequestedAtCurrentFloor_#t~ret75;havoc stopRequestedAtCurrentFloor_#t~ret75; 7453#L2317true assume 0 != stopRequestedAtCurrentFloor_~tmp~16;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 4620#L1580true stopRequestedAtCurrentFloor_#t~ret76 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret76;havoc stopRequestedAtCurrentFloor_#t~ret76; 8013#L2321true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~7);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 1395#L2334true timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 8162#L2470true assume !(0 != timeShift_~tmp___9~2); 3777#L2561true assume !(1 == ~doorState~0); 3779#L2561-2true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~12, stopRequestedInDirection_~tmp___0~4, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~6;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~12;havoc stopRequestedInDirection_~tmp___0~4;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~6;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret149, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 6047#L128-3true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 4081#L155-3true isExecutiveFloorCalling_#t~ret149 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret149;havoc isExecutiveFloorCalling_#t~ret149;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 2071#L2933-1true stopRequestedInDirection_#t~ret66 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4 := stopRequestedInDirection_#t~ret66;havoc stopRequestedInDirection_#t~ret66; 1757#L2172true assume 0 != stopRequestedInDirection_~tmp___0~4;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 4602#L1580-3true stopRequestedInDirection_#t~ret67 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~12 := stopRequestedInDirection_#t~ret67;havoc stopRequestedInDirection_#t~ret67;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~6 := (if stopRequestedInDirection_~tmp~12 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~21 := (if stopRequestedInDirection_~__cil_tmp8~6 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 51#L2185true timeShift_#t~ret98 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 3567#L2569true assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret69, continueInDirection_~dir, continueInDirection_~tmp~13;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~13;~currentHeading~0 := continueInDirection_~dir; 2195#L2229true assume !(1 == ~currentHeading~0); 2571#L2239true assume !(0 == ~currentFloorID~0); 2560#L2239-2true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 5814#L2245-1true assume { :end_inline_continueInDirection } true; 2209#L2578-2true assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret164, __utac_acc__Specification14_spec__1_#t~ret165, __utac_acc__Specification14_spec__1_#t~ret166, __utac_acc__Specification14_spec__1_#t~ret167, __utac_acc__Specification14_spec__1_~tmp~29, __utac_acc__Specification14_spec__1_~tmp___0~13, __utac_acc__Specification14_spec__1_~tmp___1~8, __utac_acc__Specification14_spec__1_~tmp___2~6;havoc __utac_acc__Specification14_spec__1_~tmp~29;havoc __utac_acc__Specification14_spec__1_~tmp___0~13;havoc __utac_acc__Specification14_spec__1_~tmp___1~8;havoc __utac_acc__Specification14_spec__1_~tmp___2~6;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret149, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 5928#L128-65true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 4112#L155-65true isExecutiveFloorCalling_#t~ret149 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret149;havoc isExecutiveFloorCalling_#t~ret149;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 2074#L2933-3true __utac_acc__Specification14_spec__1_#t~ret164 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~6 := __utac_acc__Specification14_spec__1_#t~ret164;havoc __utac_acc__Specification14_spec__1_#t~ret164; 5328#L3307true assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~6); 5325#L3307-1true assume { :end_inline___utac_acc__Specification14_spec__1 } true; 2625#L2593true assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~18, timeShift_~tmp___0~9, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~18;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret75, stopRequestedAtCurrentFloor_#t~ret76, stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~16, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~16;havoc stopRequestedAtCurrentFloor_~tmp___0~7;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret149, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 5894#L128-66true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 4121#L155-66true isExecutiveFloorCalling_#t~ret149 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret149;havoc isExecutiveFloorCalling_#t~ret149;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 2077#L2933-4true stopRequestedAtCurrentFloor_#t~ret75 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~16 := stopRequestedAtCurrentFloor_#t~ret75;havoc stopRequestedAtCurrentFloor_#t~ret75; 7458#L2317-1true assume 0 != stopRequestedAtCurrentFloor_~tmp~16;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 4612#L1580-6true stopRequestedAtCurrentFloor_#t~ret76 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret76;havoc stopRequestedAtCurrentFloor_#t~ret76; 8015#L2321-1true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~7);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 1400#L2334-1true timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 8151#L2470-2true assume !(0 != timeShift_~tmp___9~2); 3767#L2561-3true assume !(1 == ~doorState~0); 3772#L2561-5true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~12, stopRequestedInDirection_~tmp___0~4, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~6;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~12;havoc stopRequestedInDirection_~tmp___0~4;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~6;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret149, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 5885#L128-69true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 4118#L155-69true isExecutiveFloorCalling_#t~ret149 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret149;havoc isExecutiveFloorCalling_#t~ret149;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 2082#L2933-5true stopRequestedInDirection_#t~ret66 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4 := stopRequestedInDirection_#t~ret66;havoc stopRequestedInDirection_#t~ret66; 1758#L2172-2true assume 0 != stopRequestedInDirection_~tmp___0~4;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 4595#L1580-9true stopRequestedInDirection_#t~ret67 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~12 := stopRequestedInDirection_#t~ret67;havoc stopRequestedInDirection_#t~ret67;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~6 := (if stopRequestedInDirection_~tmp~12 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~21 := (if stopRequestedInDirection_~__cil_tmp8~6 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 52#L2185-2true timeShift_#t~ret98 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 3569#L2569-2true assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret69, continueInDirection_~dir, continueInDirection_~tmp~13;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~13;~currentHeading~0 := continueInDirection_~dir; 2178#L2229-3true assume !(1 == ~currentHeading~0); 2552#L2239-9true assume !(0 == ~currentFloorID~0); 2537#L2239-11true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 6027#L2245-7true assume { :end_inline_continueInDirection } true; 2204#L2578-5true assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret164, __utac_acc__Specification14_spec__1_#t~ret165, __utac_acc__Specification14_spec__1_#t~ret166, __utac_acc__Specification14_spec__1_#t~ret167, __utac_acc__Specification14_spec__1_~tmp~29, __utac_acc__Specification14_spec__1_~tmp___0~13, __utac_acc__Specification14_spec__1_~tmp___1~8, __utac_acc__Specification14_spec__1_~tmp___2~6;havoc __utac_acc__Specification14_spec__1_~tmp~29;havoc __utac_acc__Specification14_spec__1_~tmp___0~13;havoc __utac_acc__Specification14_spec__1_~tmp___1~8;havoc __utac_acc__Specification14_spec__1_~tmp___2~6;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret149, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 5951#L128-131true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 3962#L155-131true isExecutiveFloorCalling_#t~ret149 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret149;havoc isExecutiveFloorCalling_#t~ret149;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 2056#L2933-7true __utac_acc__Specification14_spec__1_#t~ret164 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~6 := __utac_acc__Specification14_spec__1_#t~ret164;havoc __utac_acc__Specification14_spec__1_#t~ret164; 5301#L3307-2true assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~6); 5294#L3307-3true assume { :end_inline___utac_acc__Specification14_spec__1 } true; 2633#L2593-1true assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~18, timeShift_~tmp___0~9, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~18;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret75, stopRequestedAtCurrentFloor_#t~ret76, stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~16, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~16;havoc stopRequestedAtCurrentFloor_~tmp___0~7;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret149, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 5949#L128-132true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 3960#L155-132true isExecutiveFloorCalling_#t~ret149 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret149;havoc isExecutiveFloorCalling_#t~ret149;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 2058#L2933-8true stopRequestedAtCurrentFloor_#t~ret75 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~16 := stopRequestedAtCurrentFloor_#t~ret75;havoc stopRequestedAtCurrentFloor_#t~ret75; 7456#L2317-2true assume 0 != stopRequestedAtCurrentFloor_~tmp~16;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 4600#L1580-12true stopRequestedAtCurrentFloor_#t~ret76 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret76;havoc stopRequestedAtCurrentFloor_#t~ret76; 8014#L2321-2true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~7);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 1405#L2334-2true timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 8152#L2470-4true assume !(0 != timeShift_~tmp___9~2); 3769#L2561-6true assume !(1 == ~doorState~0); 3757#L2561-8true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~12, stopRequestedInDirection_~tmp___0~4, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~6;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~12;havoc stopRequestedInDirection_~tmp___0~4;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~6;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret149, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 5965#L128-135true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 3933#L155-135true isExecutiveFloorCalling_#t~ret149 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret149;havoc isExecutiveFloorCalling_#t~ret149;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 2063#L2933-9true stopRequestedInDirection_#t~ret66 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4 := stopRequestedInDirection_#t~ret66;havoc stopRequestedInDirection_#t~ret66; 1749#L2172-4true assume 0 != stopRequestedInDirection_~tmp___0~4;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 8547#L1580-15true stopRequestedInDirection_#t~ret67 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~12 := stopRequestedInDirection_#t~ret67;havoc stopRequestedInDirection_#t~ret67;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~6 := (if stopRequestedInDirection_~tmp~12 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~21 := (if stopRequestedInDirection_~__cil_tmp8~6 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 63#L2185-4true timeShift_#t~ret98 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 3573#L2569-4true assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret69, continueInDirection_~dir, continueInDirection_~tmp~13;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~13;~currentHeading~0 := continueInDirection_~dir; 2183#L2229-6true assume !(1 == ~currentHeading~0); 2529#L2239-18true assume !(0 == ~currentFloorID~0); 2530#L2239-20true assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 6019#L2245-13true assume { :end_inline_continueInDirection } true; 2206#L2578-8true assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret164, __utac_acc__Specification14_spec__1_#t~ret165, __utac_acc__Specification14_spec__1_#t~ret166, __utac_acc__Specification14_spec__1_#t~ret167, __utac_acc__Specification14_spec__1_~tmp~29, __utac_acc__Specification14_spec__1_~tmp___0~13, __utac_acc__Specification14_spec__1_~tmp___1~8, __utac_acc__Specification14_spec__1_~tmp___2~6;havoc __utac_acc__Specification14_spec__1_~tmp~29;havoc __utac_acc__Specification14_spec__1_~tmp___0~13;havoc __utac_acc__Specification14_spec__1_~tmp___1~8;havoc __utac_acc__Specification14_spec__1_~tmp___2~6;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret149, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 5757#L128-197true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 5078#L155-197true isExecutiveFloorCalling_#t~ret149 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret149;havoc isExecutiveFloorCalling_#t~ret149;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 2066#L2933-11true __utac_acc__Specification14_spec__1_#t~ret164 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~6 := __utac_acc__Specification14_spec__1_#t~ret164;havoc __utac_acc__Specification14_spec__1_#t~ret164; 5299#L3307-4true assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~6); 5313#L3307-5true assume { :end_inline___utac_acc__Specification14_spec__1 } true; 2628#L2593-2true assume { :end_inline_timeShift } true; 804#L3075true assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret151, bobCall_~tmp~20;havoc bobCall_~tmp~20;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~9;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~9; 7616#L1257-1true assume 0 == getOrigin_~person;getOrigin_~retValue_acc~9 := 4;getOrigin_#res := getOrigin_~retValue_acc~9; 1315#L1282-1true bobCall_#t~ret151 := getOrigin_#res;assume { :end_inline_getOrigin } true;bobCall_~tmp~20 := bobCall_#t~ret151;havoc bobCall_#t~ret151;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~20;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 1344#L399-1true assume 0 == initPersonOnFloor_~floor; 1208#L400-2true assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 4091#L507-3true assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 8629#L191-2true assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 7425#L203-5true assume { :end_inline_callOnFloor } true; 8640#L543-1true assume { :end_inline_initPersonOnFloor } true; 8820#L3008true assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret157, cleanup_#t~ret158, cleanup_~i~3, cleanup_~tmp~26, cleanup_~tmp___0~11, cleanup_~__cil_tmp4~3;havoc cleanup_~i~3;havoc cleanup_~tmp~26;havoc cleanup_~tmp___0~11;havoc cleanup_~__cil_tmp4~3;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~18, timeShift_~tmp___0~9, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~18;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret75, stopRequestedAtCurrentFloor_#t~ret76, stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~16, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~16;havoc stopRequestedAtCurrentFloor_~tmp___0~7;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret149, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 5753#L128-198true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 5075#L155-198true isExecutiveFloorCalling_#t~ret149 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret149;havoc isExecutiveFloorCalling_#t~ret149;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 2196#L2933-12true stopRequestedAtCurrentFloor_#t~ret75 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~16 := stopRequestedAtCurrentFloor_#t~ret75;havoc stopRequestedAtCurrentFloor_#t~ret75; 7460#L2317-3true assume 0 != stopRequestedAtCurrentFloor_~tmp~16;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 8550#L1580-18true stopRequestedAtCurrentFloor_#t~ret76 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret76;havoc stopRequestedAtCurrentFloor_#t~ret76; 8011#L2321-3true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~7);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 1404#L2334-3true timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 8157#L2470-6true assume !(0 != timeShift_~tmp___9~2); 3761#L2561-9true assume !(1 == ~doorState~0); 3763#L2561-11true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~12, stopRequestedInDirection_~tmp___0~4, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~6;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~12;havoc stopRequestedInDirection_~tmp___0~4;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~6;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret149, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 5779#L128-201true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 5198#L155-201true isExecutiveFloorCalling_#t~ret149 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret149;havoc isExecutiveFloorCalling_#t~ret149;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 2199#L2933-13true stopRequestedInDirection_#t~ret66 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4 := stopRequestedInDirection_#t~ret66;havoc stopRequestedInDirection_#t~ret66; 1750#L2172-6true assume 0 != stopRequestedInDirection_~tmp___0~4;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 8541#L1580-21true stopRequestedInDirection_#t~ret67 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~12 := stopRequestedInDirection_#t~ret67;havoc stopRequestedInDirection_#t~ret67;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~6 := (if stopRequestedInDirection_~tmp~12 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~21 := (if stopRequestedInDirection_~__cil_tmp8~6 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 32#L2185-6true timeShift_#t~ret98 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 3559#L2569-6true assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret69, continueInDirection_~dir, continueInDirection_~tmp~13;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~13;~currentHeading~0 := continueInDirection_~dir; 2172#L2229-9true assume !(1 == ~currentHeading~0); 2685#L2239-27true assume !(0 == ~currentFloorID~0); 2687#L2239-29true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 6007#L2245-19true assume { :end_inline_continueInDirection } true; 2260#L2578-11true assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret164, __utac_acc__Specification14_spec__1_#t~ret165, __utac_acc__Specification14_spec__1_#t~ret166, __utac_acc__Specification14_spec__1_#t~ret167, __utac_acc__Specification14_spec__1_~tmp~29, __utac_acc__Specification14_spec__1_~tmp___0~13, __utac_acc__Specification14_spec__1_~tmp___1~8, __utac_acc__Specification14_spec__1_~tmp___2~6;havoc __utac_acc__Specification14_spec__1_~tmp~29;havoc __utac_acc__Specification14_spec__1_~tmp___0~13;havoc __utac_acc__Specification14_spec__1_~tmp___1~8;havoc __utac_acc__Specification14_spec__1_~tmp___2~6;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret149, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 5268#L128-263true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 4896#L155-263true isExecutiveFloorCalling_#t~ret149 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret149;havoc isExecutiveFloorCalling_#t~ret149;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 2201#L2933-15true __utac_acc__Specification14_spec__1_#t~ret164 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~6 := __utac_acc__Specification14_spec__1_#t~ret164;havoc __utac_acc__Specification14_spec__1_#t~ret164; 5307#L3307-6true assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~6); 5275#L3307-7true assume { :end_inline___utac_acc__Specification14_spec__1 } true; 2607#L2593-3true assume { :end_inline_timeShift } true;cleanup_~i~3 := 0; 3756#L3090-3true [2018-11-18 16:51:01,148 INFO L796 eck$LassoCheckResult]: Loop: 3756#L3090-3true assume true; 3755#L3090-1true assume !false; 3822#L3091true cleanup_~__cil_tmp4~3 := ~cleanupTimeShifts~0 - 1; 3729#L3094true assume cleanup_~i~3 < cleanup_~__cil_tmp4~3;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~11;havoc isBlocked_~retValue_acc~11;isBlocked_~retValue_acc~11 := 0;isBlocked_#res := isBlocked_~retValue_acc~11; 8564#L1407true cleanup_#t~ret157 := isBlocked_#res;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~11 := cleanup_#t~ret157;havoc cleanup_#t~ret157; 3558#L3098true assume 1 != cleanup_~tmp___0~11; 3547#L3098-1true assume { :begin_inline_isIdle } true;havoc isIdle_#res;havoc isIdle_#t~ret50, isIdle_~retValue_acc~18, isIdle_~tmp~9;havoc isIdle_~retValue_acc~18;havoc isIdle_~tmp~9;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret45, anyStopRequested_#t~ret46, anyStopRequested_#t~ret47, anyStopRequested_#t~ret48, anyStopRequested_#t~ret49, anyStopRequested_~retValue_acc~17, anyStopRequested_~tmp~8, anyStopRequested_~tmp___0~2, anyStopRequested_~tmp___1~2, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~17;havoc anyStopRequested_~tmp~8;havoc anyStopRequested_~tmp___0~2;havoc anyStopRequested_~tmp___1~2;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 5263#L128-264true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 4894#L155-264true anyStopRequested_#t~ret45 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret45;havoc anyStopRequested_#t~ret45; 3575#L1688true assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~17 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~17; 4702#L1752true isIdle_#t~ret50 := anyStopRequested_#res;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~9 := isIdle_#t~ret50;havoc isIdle_#t~ret50;isIdle_~retValue_acc~18 := (if 0 == isIdle_~tmp~9 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~18; 8164#L1765true cleanup_#t~ret158 := isIdle_#res;assume { :end_inline_isIdle } true;cleanup_~tmp~26 := cleanup_#t~ret158;havoc cleanup_#t~ret158; 2180#L3110true assume !(0 != cleanup_~tmp~26);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~18, timeShift_~tmp___0~9, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~18;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret75, stopRequestedAtCurrentFloor_#t~ret76, stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~16, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~16;havoc stopRequestedAtCurrentFloor_~tmp___0~7;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret149, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 5535#L128-269true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 4912#L155-269true isExecutiveFloorCalling_#t~ret149 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret149;havoc isExecutiveFloorCalling_#t~ret149;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 2203#L2933-16true stopRequestedAtCurrentFloor_#t~ret75 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~16 := stopRequestedAtCurrentFloor_#t~ret75;havoc stopRequestedAtCurrentFloor_#t~ret75; 7436#L2317-4true assume 0 != stopRequestedAtCurrentFloor_~tmp~16;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 8532#L1580-24true stopRequestedAtCurrentFloor_#t~ret76 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret76;havoc stopRequestedAtCurrentFloor_#t~ret76; 8012#L2321-4true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~7);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 1407#L2334-4true timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 8143#L2470-8true assume !(0 != timeShift_~tmp___9~2); 3764#L2561-12true assume !(1 == ~doorState~0); 3752#L2561-14true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~12, stopRequestedInDirection_~tmp___0~4, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~6;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~12;havoc stopRequestedInDirection_~tmp___0~4;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~6;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret149, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 5519#L128-272true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 4901#L155-272true isExecutiveFloorCalling_#t~ret149 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret149;havoc isExecutiveFloorCalling_#t~ret149;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 2187#L2933-17true stopRequestedInDirection_#t~ret66 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4 := stopRequestedInDirection_#t~ret66;havoc stopRequestedInDirection_#t~ret66; 1572#L2172-8true assume 0 != stopRequestedInDirection_~tmp___0~4;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 8535#L1580-27true stopRequestedInDirection_#t~ret67 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~12 := stopRequestedInDirection_#t~ret67;havoc stopRequestedInDirection_#t~ret67;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~6 := (if stopRequestedInDirection_~tmp~12 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~21 := (if stopRequestedInDirection_~__cil_tmp8~6 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 43#L2185-8true timeShift_#t~ret98 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 3563#L2569-8true assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret69, continueInDirection_~dir, continueInDirection_~tmp~13;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~13;~currentHeading~0 := continueInDirection_~dir; 2162#L2229-12true assume !(1 == ~currentHeading~0); 2677#L2239-36true assume !(0 == ~currentFloorID~0); 2651#L2239-38true assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 5998#L2245-25true assume { :end_inline_continueInDirection } true; 2258#L2578-14true assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret164, __utac_acc__Specification14_spec__1_#t~ret165, __utac_acc__Specification14_spec__1_#t~ret166, __utac_acc__Specification14_spec__1_#t~ret167, __utac_acc__Specification14_spec__1_~tmp~29, __utac_acc__Specification14_spec__1_~tmp___0~13, __utac_acc__Specification14_spec__1_~tmp___1~8, __utac_acc__Specification14_spec__1_~tmp___2~6;havoc __utac_acc__Specification14_spec__1_~tmp~29;havoc __utac_acc__Specification14_spec__1_~tmp___0~13;havoc __utac_acc__Specification14_spec__1_~tmp___1~8;havoc __utac_acc__Specification14_spec__1_~tmp___2~6;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret149, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 7108#L128-334true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 4802#L155-334true isExecutiveFloorCalling_#t~ret149 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret149;havoc isExecutiveFloorCalling_#t~ret149;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 2189#L2933-19true __utac_acc__Specification14_spec__1_#t~ret164 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~6 := __utac_acc__Specification14_spec__1_#t~ret164;havoc __utac_acc__Specification14_spec__1_#t~ret164; 5281#L3307-8true assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~6); 5273#L3307-9true assume { :end_inline___utac_acc__Specification14_spec__1 } true; 2609#L2593-4true assume { :end_inline_timeShift } true;cleanup_~i~3 := 1 + cleanup_~i~3; 3756#L3090-3true [2018-11-18 16:51:01,157 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 16:51:01,159 INFO L82 PathProgramCache]: Analyzing trace with hash -326077620, now seen corresponding path program 1 times [2018-11-18 16:51:01,160 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 16:51:01,161 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 16:51:01,196 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 16:51:01,197 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 16:51:01,197 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 16:51:01,276 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 16:51:02,014 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 16:51:02,016 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 16:51:02,016 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-18 16:51:02,019 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-18 16:51:02,019 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 16:51:02,019 INFO L82 PathProgramCache]: Analyzing trace with hash -623856282, now seen corresponding path program 1 times [2018-11-18 16:51:02,020 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 16:51:02,020 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 16:51:02,020 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 16:51:02,021 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 16:51:02,021 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 16:51:02,030 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 16:51:02,055 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 16:51:02,055 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 16:51:02,055 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-18 16:51:02,056 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-18 16:51:02,066 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-18 16:51:02,066 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-18 16:51:02,068 INFO L87 Difference]: Start difference. First operand 8987 states. Second operand 3 states. [2018-11-18 16:51:03,797 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 16:51:03,797 INFO L93 Difference]: Finished difference Result 16126 states and 30140 transitions. [2018-11-18 16:51:03,798 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-18 16:51:03,799 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 16126 states and 30140 transitions. [2018-11-18 16:51:03,856 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 3614 [2018-11-18 16:51:03,916 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 16126 states to 16102 states and 30111 transitions. [2018-11-18 16:51:03,917 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 16102 [2018-11-18 16:51:03,930 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 16102 [2018-11-18 16:51:03,931 INFO L73 IsDeterministic]: Start isDeterministic. Operand 16102 states and 30111 transitions. [2018-11-18 16:51:03,950 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-18 16:51:03,950 INFO L705 BuchiCegarLoop]: Abstraction has 16102 states and 30111 transitions. [2018-11-18 16:51:03,976 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 16102 states and 30111 transitions. [2018-11-18 16:51:04,133 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 16102 to 16094. [2018-11-18 16:51:04,133 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 16094 states. [2018-11-18 16:51:04,155 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 16094 states to 16094 states and 30099 transitions. [2018-11-18 16:51:04,156 INFO L728 BuchiCegarLoop]: Abstraction has 16094 states and 30099 transitions. [2018-11-18 16:51:04,156 INFO L608 BuchiCegarLoop]: Abstraction has 16094 states and 30099 transitions. [2018-11-18 16:51:04,156 INFO L442 BuchiCegarLoop]: ======== Iteration 2============ [2018-11-18 16:51:04,156 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 16094 states and 30099 transitions. [2018-11-18 16:51:04,197 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 3612 [2018-11-18 16:51:04,197 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-18 16:51:04,197 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-18 16:51:04,201 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 16:51:04,201 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 16:51:04,202 INFO L794 eck$LassoCheckResult]: Stem: 28366#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];call #t~string18.base, #t~string18.offset := #Ultimate.alloc(30);call #t~string19.base, #t~string19.offset := #Ultimate.alloc(9);call #t~string20.base, #t~string20.offset := #Ultimate.alloc(21);call #t~string21.base, #t~string21.offset := #Ultimate.alloc(30);call #t~string22.base, #t~string22.offset := #Ultimate.alloc(9);call #t~string23.base, #t~string23.offset := #Ultimate.alloc(21);call #t~string27.base, #t~string27.offset := #Ultimate.alloc(30);call #t~string28.base, #t~string28.offset := #Ultimate.alloc(9);call #t~string29.base, #t~string29.offset := #Ultimate.alloc(25);call #t~string30.base, #t~string30.offset := #Ultimate.alloc(30);call #t~string31.base, #t~string31.offset := #Ultimate.alloc(9);call #t~string32.base, #t~string32.offset := #Ultimate.alloc(25);call #t~string102.base, #t~string102.offset := #Ultimate.alloc(10);call #t~string104.base, #t~string104.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string104.base,#t~string104.offset := 91];#memory_int := #memory_int[#t~string104.base,1 + #t~string104.offset := 95];#memory_int := #memory_int[#t~string104.base,2 + #t~string104.offset := 93];#memory_int := #memory_int[#t~string104.base,3 + #t~string104.offset := 0];call #t~string106.base, #t~string106.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string106.base,#t~string106.offset := 91];#memory_int := #memory_int[#t~string106.base,1 + #t~string106.offset := 93];#memory_int := #memory_int[#t~string106.base,2 + #t~string106.offset := 32];#memory_int := #memory_int[#t~string106.base,3 + #t~string106.offset := 0];call #t~string108.base, #t~string108.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string108.base,#t~string108.offset := 32];#memory_int := #memory_int[#t~string108.base,1 + #t~string108.offset := 97];#memory_int := #memory_int[#t~string108.base,2 + #t~string108.offset := 116];#memory_int := #memory_int[#t~string108.base,3 + #t~string108.offset := 32];#memory_int := #memory_int[#t~string108.base,4 + #t~string108.offset := 0];call #t~string110.base, #t~string110.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string110.base,#t~string110.offset := 37];#memory_int := #memory_int[#t~string110.base,1 + #t~string110.offset := 105];#memory_int := #memory_int[#t~string110.base,2 + #t~string110.offset := 0];call #t~string112.base, #t~string112.offset := #Ultimate.alloc(10);call #t~string114.base, #t~string114.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string114.base,#t~string114.offset := 117];#memory_int := #memory_int[#t~string114.base,1 + #t~string114.offset := 112];#memory_int := #memory_int[#t~string114.base,2 + #t~string114.offset := 0];call #t~string116.base, #t~string116.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string116.base,#t~string116.offset := 100];#memory_int := #memory_int[#t~string116.base,1 + #t~string116.offset := 111];#memory_int := #memory_int[#t~string116.base,2 + #t~string116.offset := 119];#memory_int := #memory_int[#t~string116.base,3 + #t~string116.offset := 110];#memory_int := #memory_int[#t~string116.base,4 + #t~string116.offset := 0];call #t~string118.base, #t~string118.offset := #Ultimate.alloc(7);#memory_int := #memory_int[#t~string118.base,#t~string118.offset := 32];#memory_int := #memory_int[#t~string118.base,1 + #t~string118.offset := 73];#memory_int := #memory_int[#t~string118.base,2 + #t~string118.offset := 76];#memory_int := #memory_int[#t~string118.base,3 + #t~string118.offset := 95];#memory_int := #memory_int[#t~string118.base,4 + #t~string118.offset := 112];#memory_int := #memory_int[#t~string118.base,5 + #t~string118.offset := 58];#memory_int := #memory_int[#t~string118.base,6 + #t~string118.offset := 0];call #t~string120.base, #t~string120.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string120.base,#t~string120.offset := 32];#memory_int := #memory_int[#t~string120.base,1 + #t~string120.offset := 37];#memory_int := #memory_int[#t~string120.base,2 + #t~string120.offset := 105];#memory_int := #memory_int[#t~string120.base,3 + #t~string120.offset := 0];call #t~string122.base, #t~string122.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string122.base,#t~string122.offset := 32];#memory_int := #memory_int[#t~string122.base,1 + #t~string122.offset := 37];#memory_int := #memory_int[#t~string122.base,2 + #t~string122.offset := 105];#memory_int := #memory_int[#t~string122.base,3 + #t~string122.offset := 0];call #t~string124.base, #t~string124.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string124.base,#t~string124.offset := 32];#memory_int := #memory_int[#t~string124.base,1 + #t~string124.offset := 37];#memory_int := #memory_int[#t~string124.base,2 + #t~string124.offset := 105];#memory_int := #memory_int[#t~string124.base,3 + #t~string124.offset := 0];call #t~string126.base, #t~string126.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string126.base,#t~string126.offset := 32];#memory_int := #memory_int[#t~string126.base,1 + #t~string126.offset := 37];#memory_int := #memory_int[#t~string126.base,2 + #t~string126.offset := 105];#memory_int := #memory_int[#t~string126.base,3 + #t~string126.offset := 0];call #t~string128.base, #t~string128.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string128.base,#t~string128.offset := 32];#memory_int := #memory_int[#t~string128.base,1 + #t~string128.offset := 37];#memory_int := #memory_int[#t~string128.base,2 + #t~string128.offset := 105];#memory_int := #memory_int[#t~string128.base,3 + #t~string128.offset := 0];call #t~string130.base, #t~string130.offset := #Ultimate.alloc(6);#memory_int := #memory_int[#t~string130.base,#t~string130.offset := 32];#memory_int := #memory_int[#t~string130.base,1 + #t~string130.offset := 70];#memory_int := #memory_int[#t~string130.base,2 + #t~string130.offset := 95];#memory_int := #memory_int[#t~string130.base,3 + #t~string130.offset := 112];#memory_int := #memory_int[#t~string130.base,4 + #t~string130.offset := 58];#memory_int := #memory_int[#t~string130.base,5 + #t~string130.offset := 0];call #t~string133.base, #t~string133.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string133.base,#t~string133.offset := 32];#memory_int := #memory_int[#t~string133.base,1 + #t~string133.offset := 37];#memory_int := #memory_int[#t~string133.base,2 + #t~string133.offset := 105];#memory_int := #memory_int[#t~string133.base,3 + #t~string133.offset := 0];call #t~string136.base, #t~string136.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string136.base,#t~string136.offset := 32];#memory_int := #memory_int[#t~string136.base,1 + #t~string136.offset := 37];#memory_int := #memory_int[#t~string136.base,2 + #t~string136.offset := 105];#memory_int := #memory_int[#t~string136.base,3 + #t~string136.offset := 0];call #t~string139.base, #t~string139.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string139.base,#t~string139.offset := 32];#memory_int := #memory_int[#t~string139.base,1 + #t~string139.offset := 37];#memory_int := #memory_int[#t~string139.base,2 + #t~string139.offset := 105];#memory_int := #memory_int[#t~string139.base,3 + #t~string139.offset := 0];call #t~string142.base, #t~string142.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string142.base,#t~string142.offset := 32];#memory_int := #memory_int[#t~string142.base,1 + #t~string142.offset := 37];#memory_int := #memory_int[#t~string142.base,2 + #t~string142.offset := 105];#memory_int := #memory_int[#t~string142.base,3 + #t~string142.offset := 0];call #t~string145.base, #t~string145.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string145.base,#t~string145.offset := 32];#memory_int := #memory_int[#t~string145.base,1 + #t~string145.offset := 37];#memory_int := #memory_int[#t~string145.base,2 + #t~string145.offset := 105];#memory_int := #memory_int[#t~string145.base,3 + #t~string145.offset := 0];call #t~string147.base, #t~string147.offset := #Ultimate.alloc(2);#memory_int := #memory_int[#t~string147.base,#t~string147.offset := 10];#memory_int := #memory_int[#t~string147.base,1 + #t~string147.offset := 0];~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 28367#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res;havoc main_#t~ret163, main_~retValue_acc~31, main_~tmp~28;havoc main_~retValue_acc~31;havoc main_~tmp~28;assume { :begin_inline_select_helpers } true; 32806#L1199 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 31987#L1192 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res;havoc valid_product_~retValue_acc~7;havoc valid_product_~retValue_acc~7;valid_product_~retValue_acc~7 := 1;valid_product_#res := valid_product_~retValue_acc~7; 30403#L1207 main_#t~ret163 := valid_product_#res;assume { :end_inline_valid_product } true;main_~tmp~28 := main_#t~ret163;havoc main_#t~ret163; 28162#L3282 assume 0 != main_~tmp~28;assume { :begin_inline_setup } true; 28163#L3258 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret156, bigMacCall_~tmp~25;havoc bigMacCall_~tmp~25;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~9;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~9; 29319#L1257 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~9 := 4;getOrigin_#res := getOrigin_~retValue_acc~9; 27162#L1282 bigMacCall_#t~ret156 := getOrigin_#res;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~25 := bigMacCall_#t~ret156;havoc bigMacCall_#t~ret156;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~25;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 27163#L399 assume 0 == initPersonOnFloor_~floor; 26996#L400 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 26152#L507-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 30015#L191 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 33123#L203-2 assume { :end_inline_callOnFloor } true; 33124#L543 assume { :end_inline_initPersonOnFloor } true; 25668#L3063 assume { :end_inline_bigMacCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~18, timeShift_~tmp___0~9, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~18;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret75, stopRequestedAtCurrentFloor_#t~ret76, stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~16, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~16;havoc stopRequestedAtCurrentFloor_~tmp___0~7;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret149, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 25669#L128 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 29942#L155 isExecutiveFloorCalling_#t~ret149 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret149;havoc isExecutiveFloorCalling_#t~ret149;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 27903#L2933 stopRequestedAtCurrentFloor_#t~ret75 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~16 := stopRequestedAtCurrentFloor_#t~ret75;havoc stopRequestedAtCurrentFloor_#t~ret75; 27904#L2317 assume 0 != stopRequestedAtCurrentFloor_~tmp~16;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 30828#L1580 stopRequestedAtCurrentFloor_#t~ret76 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret76;havoc stopRequestedAtCurrentFloor_#t~ret76; 30829#L2321 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~7);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 27261#L2334 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 27262#L2470 assume !(0 != timeShift_~tmp___9~2); 29613#L2561 assume !(1 == ~doorState~0); 29614#L2561-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~12, stopRequestedInDirection_~tmp___0~4, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~6;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~12;havoc stopRequestedInDirection_~tmp___0~4;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~6;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret149, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 29616#L128-3 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 29975#L155-3 isExecutiveFloorCalling_#t~ret149 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret149;havoc isExecutiveFloorCalling_#t~ret149;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 27860#L2933-1 stopRequestedInDirection_#t~ret66 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4 := stopRequestedInDirection_#t~ret66;havoc stopRequestedInDirection_#t~ret66; 27629#L2172 assume 0 != stopRequestedInDirection_~tmp___0~4;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 27630#L1580-3 stopRequestedInDirection_#t~ret67 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~12 := stopRequestedInDirection_#t~ret67;havoc stopRequestedInDirection_#t~ret67;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~6 := (if stopRequestedInDirection_~tmp~12 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~21 := (if stopRequestedInDirection_~__cil_tmp8~6 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 25262#L2185 timeShift_#t~ret98 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 25263#L2569 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret69, continueInDirection_~dir, continueInDirection_~tmp~13;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~13;~currentHeading~0 := continueInDirection_~dir; 28129#L2229 assume !(1 == ~currentHeading~0); 28130#L2239 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 28641#L2239-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 38196#L2245-1 assume { :end_inline_continueInDirection } true; 30277#L2578-2 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret164, __utac_acc__Specification14_spec__1_#t~ret165, __utac_acc__Specification14_spec__1_#t~ret166, __utac_acc__Specification14_spec__1_#t~ret167, __utac_acc__Specification14_spec__1_~tmp~29, __utac_acc__Specification14_spec__1_~tmp___0~13, __utac_acc__Specification14_spec__1_~tmp___1~8, __utac_acc__Specification14_spec__1_~tmp___2~6;havoc __utac_acc__Specification14_spec__1_~tmp~29;havoc __utac_acc__Specification14_spec__1_~tmp___0~13;havoc __utac_acc__Specification14_spec__1_~tmp___1~8;havoc __utac_acc__Specification14_spec__1_~tmp___2~6;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret149, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 38195#L128-65 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 38190#L155-65 isExecutiveFloorCalling_#t~ret149 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret149;havoc isExecutiveFloorCalling_#t~ret149;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 38189#L2933-3 __utac_acc__Specification14_spec__1_#t~ret164 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~6 := __utac_acc__Specification14_spec__1_#t~ret164;havoc __utac_acc__Specification14_spec__1_#t~ret164; 38184#L3307 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~6); 38182#L3307-1 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 38181#L2593 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~18, timeShift_~tmp___0~9, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~18;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret75, stopRequestedAtCurrentFloor_#t~ret76, stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~16, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~16;havoc stopRequestedAtCurrentFloor_~tmp___0~7;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret149, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 38179#L128-66 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 38175#L155-66 isExecutiveFloorCalling_#t~ret149 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret149;havoc isExecutiveFloorCalling_#t~ret149;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 38169#L2933-4 stopRequestedAtCurrentFloor_#t~ret75 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~16 := stopRequestedAtCurrentFloor_#t~ret75;havoc stopRequestedAtCurrentFloor_#t~ret75; 38167#L2317-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~16;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 38168#L1580-6 stopRequestedAtCurrentFloor_#t~ret76 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret76;havoc stopRequestedAtCurrentFloor_#t~ret76; 38128#L2321-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~7);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 38122#L2334-1 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 38119#L2470-2 assume !(0 != timeShift_~tmp___9~2); 38120#L2561-3 assume !(1 == ~doorState~0); 38848#L2561-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~12, stopRequestedInDirection_~tmp___0~4, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~6;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~12;havoc stopRequestedInDirection_~tmp___0~4;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~6;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret149, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 34309#L128-69 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 34304#L155-69 isExecutiveFloorCalling_#t~ret149 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret149;havoc isExecutiveFloorCalling_#t~ret149;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 34259#L2933-5 stopRequestedInDirection_#t~ret66 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4 := stopRequestedInDirection_#t~ret66;havoc stopRequestedInDirection_#t~ret66; 34254#L2172-2 assume 0 != stopRequestedInDirection_~tmp___0~4;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 34253#L1580-9 stopRequestedInDirection_#t~ret67 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~12 := stopRequestedInDirection_#t~ret67;havoc stopRequestedInDirection_#t~ret67;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~6 := (if stopRequestedInDirection_~tmp~12 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~21 := (if stopRequestedInDirection_~__cil_tmp8~6 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 34251#L2185-2 timeShift_#t~ret98 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 34249#L2569-2 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret69, continueInDirection_~dir, continueInDirection_~tmp~13;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~13;~currentHeading~0 := continueInDirection_~dir; 34248#L2229-3 assume !(1 == ~currentHeading~0); 28094#L2239-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 28601#L2239-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 37620#L2245-7 assume { :end_inline_continueInDirection } true; 37618#L2578-5 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret164, __utac_acc__Specification14_spec__1_#t~ret165, __utac_acc__Specification14_spec__1_#t~ret166, __utac_acc__Specification14_spec__1_#t~ret167, __utac_acc__Specification14_spec__1_~tmp~29, __utac_acc__Specification14_spec__1_~tmp___0~13, __utac_acc__Specification14_spec__1_~tmp___1~8, __utac_acc__Specification14_spec__1_~tmp___2~6;havoc __utac_acc__Specification14_spec__1_~tmp~29;havoc __utac_acc__Specification14_spec__1_~tmp___0~13;havoc __utac_acc__Specification14_spec__1_~tmp___1~8;havoc __utac_acc__Specification14_spec__1_~tmp___2~6;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret149, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 37617#L128-131 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 37612#L155-131 isExecutiveFloorCalling_#t~ret149 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret149;havoc isExecutiveFloorCalling_#t~ret149;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 37611#L2933-7 __utac_acc__Specification14_spec__1_#t~ret164 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~6 := __utac_acc__Specification14_spec__1_#t~ret164;havoc __utac_acc__Specification14_spec__1_#t~ret164; 37603#L3307-2 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~6); 37602#L3307-3 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 37600#L2593-1 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~18, timeShift_~tmp___0~9, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~18;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret75, stopRequestedAtCurrentFloor_#t~ret76, stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~16, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~16;havoc stopRequestedAtCurrentFloor_~tmp___0~7;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret149, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 37307#L128-132 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 37303#L155-132 isExecutiveFloorCalling_#t~ret149 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret149;havoc isExecutiveFloorCalling_#t~ret149;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 37298#L2933-8 stopRequestedAtCurrentFloor_#t~ret75 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~16 := stopRequestedAtCurrentFloor_#t~ret75;havoc stopRequestedAtCurrentFloor_#t~ret75; 37295#L2317-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~16;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 37291#L1580-12 stopRequestedAtCurrentFloor_#t~ret76 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret76;havoc stopRequestedAtCurrentFloor_#t~ret76; 37286#L2321-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~7);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 37284#L2334-2 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 37283#L2470-4 assume !(0 != timeShift_~tmp___9~2); 37282#L2561-6 assume !(1 == ~doorState~0); 37281#L2561-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~12, stopRequestedInDirection_~tmp___0~4, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~6;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~12;havoc stopRequestedInDirection_~tmp___0~4;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~6;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret149, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 37280#L128-135 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 37275#L155-135 isExecutiveFloorCalling_#t~ret149 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret149;havoc isExecutiveFloorCalling_#t~ret149;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 37230#L2933-9 stopRequestedInDirection_#t~ret66 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4 := stopRequestedInDirection_#t~ret66;havoc stopRequestedInDirection_#t~ret66; 37225#L2172-4 assume 0 != stopRequestedInDirection_~tmp___0~4;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 37224#L1580-15 stopRequestedInDirection_#t~ret67 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~12 := stopRequestedInDirection_#t~ret67;havoc stopRequestedInDirection_#t~ret67;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~6 := (if stopRequestedInDirection_~tmp~12 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~21 := (if stopRequestedInDirection_~__cil_tmp8~6 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 37154#L2185-4 timeShift_#t~ret98 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 34221#L2569-4 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret69, continueInDirection_~dir, continueInDirection_~tmp~13;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~13;~currentHeading~0 := continueInDirection_~dir; 34215#L2229-6 assume !(1 == ~currentHeading~0); 28106#L2239-18 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 28550#L2239-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 28552#L2245-13 assume { :end_inline_continueInDirection } true; 28151#L2578-8 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret164, __utac_acc__Specification14_spec__1_#t~ret165, __utac_acc__Specification14_spec__1_#t~ret166, __utac_acc__Specification14_spec__1_#t~ret167, __utac_acc__Specification14_spec__1_~tmp~29, __utac_acc__Specification14_spec__1_~tmp___0~13, __utac_acc__Specification14_spec__1_~tmp___1~8, __utac_acc__Specification14_spec__1_~tmp___2~6;havoc __utac_acc__Specification14_spec__1_~tmp~29;havoc __utac_acc__Specification14_spec__1_~tmp___0~13;havoc __utac_acc__Specification14_spec__1_~tmp___1~8;havoc __utac_acc__Specification14_spec__1_~tmp___2~6;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret149, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 28152#L128-197 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 30372#L155-197 isExecutiveFloorCalling_#t~ret149 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret149;havoc isExecutiveFloorCalling_#t~ret149;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 27851#L2933-11 __utac_acc__Specification14_spec__1_#t~ret164 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~6 := __utac_acc__Specification14_spec__1_#t~ret164;havoc __utac_acc__Specification14_spec__1_#t~ret164; 27852#L3307-4 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~6); 31443#L3307-5 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 28735#L2593-2 assume { :end_inline_timeShift } true; 26532#L3075 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret151, bobCall_~tmp~20;havoc bobCall_~tmp~20;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~9;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~9; 26533#L1257-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~9 := 4;getOrigin_#res := getOrigin_~retValue_acc~9; 27166#L1282-1 bobCall_#t~ret151 := getOrigin_#res;assume { :end_inline_getOrigin } true;bobCall_~tmp~20 := bobCall_#t~ret151;havoc bobCall_#t~ret151;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~20;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 27167#L399-1 assume 0 == initPersonOnFloor_~floor; 26964#L400-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 26120#L507-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 29990#L191-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 33114#L203-5 assume { :end_inline_callOnFloor } true; 33115#L543-1 assume { :end_inline_initPersonOnFloor } true; 34002#L3008 assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret157, cleanup_#t~ret158, cleanup_~i~3, cleanup_~tmp~26, cleanup_~tmp___0~11, cleanup_~__cil_tmp4~3;havoc cleanup_~i~3;havoc cleanup_~tmp~26;havoc cleanup_~tmp___0~11;havoc cleanup_~__cil_tmp4~3;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~18, timeShift_~tmp___0~9, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~18;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret75, stopRequestedAtCurrentFloor_#t~ret76, stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~16, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~16;havoc stopRequestedAtCurrentFloor_~tmp___0~7;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret149, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 32052#L128-198 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 30369#L155-198 isExecutiveFloorCalling_#t~ret149 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret149;havoc isExecutiveFloorCalling_#t~ret149;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 28132#L2933-12 stopRequestedAtCurrentFloor_#t~ret75 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~16 := stopRequestedAtCurrentFloor_#t~ret75;havoc stopRequestedAtCurrentFloor_#t~ret75; 28133#L2317-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~16;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 33171#L1580-18 stopRequestedAtCurrentFloor_#t~ret76 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret76;havoc stopRequestedAtCurrentFloor_#t~ret76; 33673#L2321-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~7);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 27270#L2334-3 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 27271#L2470-6 assume !(0 != timeShift_~tmp___9~2); 29600#L2561-9 assume !(1 == ~doorState~0); 29601#L2561-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~12, stopRequestedInDirection_~tmp___0~4, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~6;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~12;havoc stopRequestedInDirection_~tmp___0~4;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~6;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret149, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 29602#L128-201 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 30643#L155-201 isExecutiveFloorCalling_#t~ret149 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret149;havoc isExecutiveFloorCalling_#t~ret149;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 28138#L2933-13 stopRequestedInDirection_#t~ret66 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4 := stopRequestedInDirection_#t~ret66;havoc stopRequestedInDirection_#t~ret66; 27615#L2172-6 assume 0 != stopRequestedInDirection_~tmp___0~4;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 27616#L1580-21 stopRequestedInDirection_#t~ret67 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~12 := stopRequestedInDirection_#t~ret67;havoc stopRequestedInDirection_#t~ret67;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~6 := (if stopRequestedInDirection_~tmp~12 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~21 := (if stopRequestedInDirection_~__cil_tmp8~6 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 25210#L2185-6 timeShift_#t~ret98 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 25211#L2569-6 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret69, continueInDirection_~dir, continueInDirection_~tmp~13;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~13;~currentHeading~0 := continueInDirection_~dir; 28078#L2229-9 assume !(1 == ~currentHeading~0); 28079#L2239-27 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 28806#L2239-29 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 32199#L2245-19 assume { :end_inline_continueInDirection } true; 28215#L2578-11 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret164, __utac_acc__Specification14_spec__1_#t~ret165, __utac_acc__Specification14_spec__1_#t~ret166, __utac_acc__Specification14_spec__1_#t~ret167, __utac_acc__Specification14_spec__1_~tmp~29, __utac_acc__Specification14_spec__1_~tmp___0~13, __utac_acc__Specification14_spec__1_~tmp___1~8, __utac_acc__Specification14_spec__1_~tmp___2~6;havoc __utac_acc__Specification14_spec__1_~tmp~29;havoc __utac_acc__Specification14_spec__1_~tmp___0~13;havoc __utac_acc__Specification14_spec__1_~tmp___1~8;havoc __utac_acc__Specification14_spec__1_~tmp___2~6;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret149, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 28216#L128-263 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 30118#L155-263 isExecutiveFloorCalling_#t~ret149 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret149;havoc isExecutiveFloorCalling_#t~ret149;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 28142#L2933-15 __utac_acc__Specification14_spec__1_#t~ret164 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~6 := __utac_acc__Specification14_spec__1_#t~ret164;havoc __utac_acc__Specification14_spec__1_#t~ret164; 28143#L3307-6 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~6); 31405#L3307-7 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 28708#L2593-3 assume { :end_inline_timeShift } true;cleanup_~i~3 := 0; 28709#L3090-3 [2018-11-18 16:51:04,202 INFO L796 eck$LassoCheckResult]: Loop: 28709#L3090-3 assume true; 29596#L3090-1 assume !false; 29597#L3091 cleanup_~__cil_tmp4~3 := ~cleanupTimeShifts~0 - 1; 29575#L3094 assume cleanup_~i~3 < cleanup_~__cil_tmp4~3;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~11;havoc isBlocked_~retValue_acc~11;isBlocked_~retValue_acc~11 := 0;isBlocked_#res := isBlocked_~retValue_acc~11; 29576#L1407 cleanup_#t~ret157 := isBlocked_#res;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~11 := cleanup_#t~ret157;havoc cleanup_#t~ret157; 29459#L3098 assume 1 != cleanup_~tmp___0~11; 29438#L3098-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res;havoc isIdle_#t~ret50, isIdle_~retValue_acc~18, isIdle_~tmp~9;havoc isIdle_~retValue_acc~18;havoc isIdle_~tmp~9;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret45, anyStopRequested_#t~ret46, anyStopRequested_#t~ret47, anyStopRequested_#t~ret48, anyStopRequested_#t~ret49, anyStopRequested_~retValue_acc~17, anyStopRequested_~tmp~8, anyStopRequested_~tmp___0~2, anyStopRequested_~tmp___1~2, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~17;havoc anyStopRequested_~tmp~8;havoc anyStopRequested_~tmp___0~2;havoc anyStopRequested_~tmp___1~2;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 29439#L128-264 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 37988#L155-264 anyStopRequested_#t~ret45 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret45;havoc anyStopRequested_#t~ret45; 36765#L1688 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~17 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~17; 36756#L1752 isIdle_#t~ret50 := anyStopRequested_#res;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~9 := isIdle_#t~ret50;havoc isIdle_#t~ret50;isIdle_~retValue_acc~18 := (if 0 == isIdle_~tmp~9 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~18; 36755#L1765 cleanup_#t~ret158 := isIdle_#res;assume { :end_inline_isIdle } true;cleanup_~tmp~26 := cleanup_#t~ret158;havoc cleanup_#t~ret158; 36754#L3110 assume !(0 != cleanup_~tmp~26);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~18, timeShift_~tmp___0~9, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~18;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret75, stopRequestedAtCurrentFloor_#t~ret76, stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~16, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~16;havoc stopRequestedAtCurrentFloor_~tmp___0~7;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret149, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 36285#L128-269 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 36276#L155-269 isExecutiveFloorCalling_#t~ret149 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret149;havoc isExecutiveFloorCalling_#t~ret149;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 36274#L2933-16 stopRequestedAtCurrentFloor_#t~ret75 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~16 := stopRequestedAtCurrentFloor_#t~ret75;havoc stopRequestedAtCurrentFloor_#t~ret75; 36269#L2317-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~16;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 36266#L1580-24 stopRequestedAtCurrentFloor_#t~ret76 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret76;havoc stopRequestedAtCurrentFloor_#t~ret76; 36264#L2321-4 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~7);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 36261#L2334-4 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 36255#L2470-8 assume !(0 != timeShift_~tmp___9~2); 36253#L2561-12 assume !(1 == ~doorState~0); 36252#L2561-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~12, stopRequestedInDirection_~tmp___0~4, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~6;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~12;havoc stopRequestedInDirection_~tmp___0~4;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~6;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret149, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 36234#L128-272 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 36230#L155-272 isExecutiveFloorCalling_#t~ret149 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret149;havoc isExecutiveFloorCalling_#t~ret149;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 35961#L2933-17 stopRequestedInDirection_#t~ret66 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4 := stopRequestedInDirection_#t~ret66;havoc stopRequestedInDirection_#t~ret66; 35946#L2172-8 assume 0 != stopRequestedInDirection_~tmp___0~4;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 35937#L1580-27 stopRequestedInDirection_#t~ret67 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~12 := stopRequestedInDirection_#t~ret67;havoc stopRequestedInDirection_#t~ret67;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~6 := (if stopRequestedInDirection_~tmp~12 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~21 := (if stopRequestedInDirection_~__cil_tmp8~6 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 35934#L2185-8 timeShift_#t~ret98 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 35931#L2569-8 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret69, continueInDirection_~dir, continueInDirection_~tmp~13;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~13;~currentHeading~0 := continueInDirection_~dir; 34154#L2229-12 assume !(1 == ~currentHeading~0); 28055#L2239-36 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 28798#L2239-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 32197#L2245-25 assume { :end_inline_continueInDirection } true; 28212#L2578-14 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret164, __utac_acc__Specification14_spec__1_#t~ret165, __utac_acc__Specification14_spec__1_#t~ret166, __utac_acc__Specification14_spec__1_#t~ret167, __utac_acc__Specification14_spec__1_~tmp~29, __utac_acc__Specification14_spec__1_~tmp___0~13, __utac_acc__Specification14_spec__1_~tmp___1~8, __utac_acc__Specification14_spec__1_~tmp___2~6;havoc __utac_acc__Specification14_spec__1_~tmp~29;havoc __utac_acc__Specification14_spec__1_~tmp___0~13;havoc __utac_acc__Specification14_spec__1_~tmp___1~8;havoc __utac_acc__Specification14_spec__1_~tmp___2~6;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret149, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 28213#L128-334 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 30009#L155-334 isExecutiveFloorCalling_#t~ret149 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret149;havoc isExecutiveFloorCalling_#t~ret149;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 28116#L2933-19 __utac_acc__Specification14_spec__1_#t~ret164 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~6 := __utac_acc__Specification14_spec__1_#t~ret164;havoc __utac_acc__Specification14_spec__1_#t~ret164; 28117#L3307-8 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~6); 31403#L3307-9 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 28711#L2593-4 assume { :end_inline_timeShift } true;cleanup_~i~3 := 1 + cleanup_~i~3; 28709#L3090-3 [2018-11-18 16:51:04,210 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 16:51:04,210 INFO L82 PathProgramCache]: Analyzing trace with hash -1918026928, now seen corresponding path program 1 times [2018-11-18 16:51:04,210 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 16:51:04,210 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 16:51:04,211 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 16:51:04,211 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 16:51:04,211 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 16:51:04,243 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 16:51:05,062 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 16:51:05,063 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 16:51:05,063 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-18 16:51:05,063 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-18 16:51:05,063 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 16:51:05,063 INFO L82 PathProgramCache]: Analyzing trace with hash -230829272, now seen corresponding path program 1 times [2018-11-18 16:51:05,064 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 16:51:05,064 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 16:51:05,064 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 16:51:05,064 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 16:51:05,065 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 16:51:05,072 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 16:51:05,132 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 16:51:05,133 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 16:51:05,133 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2018-11-18 16:51:05,133 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-18 16:51:05,133 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2018-11-18 16:51:05,134 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2018-11-18 16:51:05,134 INFO L87 Difference]: Start difference. First operand 16094 states and 30099 transitions. cyclomatic complexity: 14006 Second operand 7 states. [2018-11-18 16:51:24,027 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 16:51:24,027 INFO L93 Difference]: Finished difference Result 144693 states and 268890 transitions. [2018-11-18 16:51:24,028 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2018-11-18 16:51:24,028 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 144693 states and 268890 transitions. [2018-11-18 16:51:24,454 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 33530 [2018-11-18 16:51:24,865 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 144693 states to 144693 states and 268890 transitions. [2018-11-18 16:51:24,865 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 144693 [2018-11-18 16:51:24,956 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 144693 [2018-11-18 16:51:24,956 INFO L73 IsDeterministic]: Start isDeterministic. Operand 144693 states and 268890 transitions. [2018-11-18 16:51:25,040 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-18 16:51:25,040 INFO L705 BuchiCegarLoop]: Abstraction has 144693 states and 268890 transitions. [2018-11-18 16:51:25,104 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 144693 states and 268890 transitions. [2018-11-18 16:51:25,765 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 144693 to 46371. [2018-11-18 16:51:25,765 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 46371 states. [2018-11-18 16:51:25,819 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 46371 states to 46371 states and 86273 transitions. [2018-11-18 16:51:25,820 INFO L728 BuchiCegarLoop]: Abstraction has 46371 states and 86273 transitions. [2018-11-18 16:51:25,820 INFO L608 BuchiCegarLoop]: Abstraction has 46371 states and 86273 transitions. [2018-11-18 16:51:25,820 INFO L442 BuchiCegarLoop]: ======== Iteration 3============ [2018-11-18 16:51:25,820 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 46371 states and 86273 transitions. [2018-11-18 16:51:25,911 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 10444 [2018-11-18 16:51:25,911 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-18 16:51:25,911 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-18 16:51:25,916 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 16:51:25,916 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 16:51:25,917 INFO L794 eck$LassoCheckResult]: Stem: 189469#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];call #t~string18.base, #t~string18.offset := #Ultimate.alloc(30);call #t~string19.base, #t~string19.offset := #Ultimate.alloc(9);call #t~string20.base, #t~string20.offset := #Ultimate.alloc(21);call #t~string21.base, #t~string21.offset := #Ultimate.alloc(30);call #t~string22.base, #t~string22.offset := #Ultimate.alloc(9);call #t~string23.base, #t~string23.offset := #Ultimate.alloc(21);call #t~string27.base, #t~string27.offset := #Ultimate.alloc(30);call #t~string28.base, #t~string28.offset := #Ultimate.alloc(9);call #t~string29.base, #t~string29.offset := #Ultimate.alloc(25);call #t~string30.base, #t~string30.offset := #Ultimate.alloc(30);call #t~string31.base, #t~string31.offset := #Ultimate.alloc(9);call #t~string32.base, #t~string32.offset := #Ultimate.alloc(25);call #t~string102.base, #t~string102.offset := #Ultimate.alloc(10);call #t~string104.base, #t~string104.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string104.base,#t~string104.offset := 91];#memory_int := #memory_int[#t~string104.base,1 + #t~string104.offset := 95];#memory_int := #memory_int[#t~string104.base,2 + #t~string104.offset := 93];#memory_int := #memory_int[#t~string104.base,3 + #t~string104.offset := 0];call #t~string106.base, #t~string106.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string106.base,#t~string106.offset := 91];#memory_int := #memory_int[#t~string106.base,1 + #t~string106.offset := 93];#memory_int := #memory_int[#t~string106.base,2 + #t~string106.offset := 32];#memory_int := #memory_int[#t~string106.base,3 + #t~string106.offset := 0];call #t~string108.base, #t~string108.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string108.base,#t~string108.offset := 32];#memory_int := #memory_int[#t~string108.base,1 + #t~string108.offset := 97];#memory_int := #memory_int[#t~string108.base,2 + #t~string108.offset := 116];#memory_int := #memory_int[#t~string108.base,3 + #t~string108.offset := 32];#memory_int := #memory_int[#t~string108.base,4 + #t~string108.offset := 0];call #t~string110.base, #t~string110.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string110.base,#t~string110.offset := 37];#memory_int := #memory_int[#t~string110.base,1 + #t~string110.offset := 105];#memory_int := #memory_int[#t~string110.base,2 + #t~string110.offset := 0];call #t~string112.base, #t~string112.offset := #Ultimate.alloc(10);call #t~string114.base, #t~string114.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string114.base,#t~string114.offset := 117];#memory_int := #memory_int[#t~string114.base,1 + #t~string114.offset := 112];#memory_int := #memory_int[#t~string114.base,2 + #t~string114.offset := 0];call #t~string116.base, #t~string116.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string116.base,#t~string116.offset := 100];#memory_int := #memory_int[#t~string116.base,1 + #t~string116.offset := 111];#memory_int := #memory_int[#t~string116.base,2 + #t~string116.offset := 119];#memory_int := #memory_int[#t~string116.base,3 + #t~string116.offset := 110];#memory_int := #memory_int[#t~string116.base,4 + #t~string116.offset := 0];call #t~string118.base, #t~string118.offset := #Ultimate.alloc(7);#memory_int := #memory_int[#t~string118.base,#t~string118.offset := 32];#memory_int := #memory_int[#t~string118.base,1 + #t~string118.offset := 73];#memory_int := #memory_int[#t~string118.base,2 + #t~string118.offset := 76];#memory_int := #memory_int[#t~string118.base,3 + #t~string118.offset := 95];#memory_int := #memory_int[#t~string118.base,4 + #t~string118.offset := 112];#memory_int := #memory_int[#t~string118.base,5 + #t~string118.offset := 58];#memory_int := #memory_int[#t~string118.base,6 + #t~string118.offset := 0];call #t~string120.base, #t~string120.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string120.base,#t~string120.offset := 32];#memory_int := #memory_int[#t~string120.base,1 + #t~string120.offset := 37];#memory_int := #memory_int[#t~string120.base,2 + #t~string120.offset := 105];#memory_int := #memory_int[#t~string120.base,3 + #t~string120.offset := 0];call #t~string122.base, #t~string122.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string122.base,#t~string122.offset := 32];#memory_int := #memory_int[#t~string122.base,1 + #t~string122.offset := 37];#memory_int := #memory_int[#t~string122.base,2 + #t~string122.offset := 105];#memory_int := #memory_int[#t~string122.base,3 + #t~string122.offset := 0];call #t~string124.base, #t~string124.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string124.base,#t~string124.offset := 32];#memory_int := #memory_int[#t~string124.base,1 + #t~string124.offset := 37];#memory_int := #memory_int[#t~string124.base,2 + #t~string124.offset := 105];#memory_int := #memory_int[#t~string124.base,3 + #t~string124.offset := 0];call #t~string126.base, #t~string126.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string126.base,#t~string126.offset := 32];#memory_int := #memory_int[#t~string126.base,1 + #t~string126.offset := 37];#memory_int := #memory_int[#t~string126.base,2 + #t~string126.offset := 105];#memory_int := #memory_int[#t~string126.base,3 + #t~string126.offset := 0];call #t~string128.base, #t~string128.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string128.base,#t~string128.offset := 32];#memory_int := #memory_int[#t~string128.base,1 + #t~string128.offset := 37];#memory_int := #memory_int[#t~string128.base,2 + #t~string128.offset := 105];#memory_int := #memory_int[#t~string128.base,3 + #t~string128.offset := 0];call #t~string130.base, #t~string130.offset := #Ultimate.alloc(6);#memory_int := #memory_int[#t~string130.base,#t~string130.offset := 32];#memory_int := #memory_int[#t~string130.base,1 + #t~string130.offset := 70];#memory_int := #memory_int[#t~string130.base,2 + #t~string130.offset := 95];#memory_int := #memory_int[#t~string130.base,3 + #t~string130.offset := 112];#memory_int := #memory_int[#t~string130.base,4 + #t~string130.offset := 58];#memory_int := #memory_int[#t~string130.base,5 + #t~string130.offset := 0];call #t~string133.base, #t~string133.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string133.base,#t~string133.offset := 32];#memory_int := #memory_int[#t~string133.base,1 + #t~string133.offset := 37];#memory_int := #memory_int[#t~string133.base,2 + #t~string133.offset := 105];#memory_int := #memory_int[#t~string133.base,3 + #t~string133.offset := 0];call #t~string136.base, #t~string136.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string136.base,#t~string136.offset := 32];#memory_int := #memory_int[#t~string136.base,1 + #t~string136.offset := 37];#memory_int := #memory_int[#t~string136.base,2 + #t~string136.offset := 105];#memory_int := #memory_int[#t~string136.base,3 + #t~string136.offset := 0];call #t~string139.base, #t~string139.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string139.base,#t~string139.offset := 32];#memory_int := #memory_int[#t~string139.base,1 + #t~string139.offset := 37];#memory_int := #memory_int[#t~string139.base,2 + #t~string139.offset := 105];#memory_int := #memory_int[#t~string139.base,3 + #t~string139.offset := 0];call #t~string142.base, #t~string142.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string142.base,#t~string142.offset := 32];#memory_int := #memory_int[#t~string142.base,1 + #t~string142.offset := 37];#memory_int := #memory_int[#t~string142.base,2 + #t~string142.offset := 105];#memory_int := #memory_int[#t~string142.base,3 + #t~string142.offset := 0];call #t~string145.base, #t~string145.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string145.base,#t~string145.offset := 32];#memory_int := #memory_int[#t~string145.base,1 + #t~string145.offset := 37];#memory_int := #memory_int[#t~string145.base,2 + #t~string145.offset := 105];#memory_int := #memory_int[#t~string145.base,3 + #t~string145.offset := 0];call #t~string147.base, #t~string147.offset := #Ultimate.alloc(2);#memory_int := #memory_int[#t~string147.base,#t~string147.offset := 10];#memory_int := #memory_int[#t~string147.base,1 + #t~string147.offset := 0];~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 189470#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res;havoc main_#t~ret163, main_~retValue_acc~31, main_~tmp~28;havoc main_~retValue_acc~31;havoc main_~tmp~28;assume { :begin_inline_select_helpers } true; 194511#L1199 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 193573#L1192 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res;havoc valid_product_~retValue_acc~7;havoc valid_product_~retValue_acc~7;valid_product_~retValue_acc~7 := 1;valid_product_#res := valid_product_~retValue_acc~7; 191718#L1207 main_#t~ret163 := valid_product_#res;assume { :end_inline_valid_product } true;main_~tmp~28 := main_#t~ret163;havoc main_#t~ret163; 189252#L3282 assume 0 != main_~tmp~28;assume { :begin_inline_setup } true; 189253#L3258 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret156, bigMacCall_~tmp~25;havoc bigMacCall_~tmp~25;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~9;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~9; 190559#L1257 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~9 := 4;getOrigin_#res := getOrigin_~retValue_acc~9; 188117#L1282 bigMacCall_#t~ret156 := getOrigin_#res;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~25 := bigMacCall_#t~ret156;havoc bigMacCall_#t~ret156;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~25;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 188118#L399 assume 0 == initPersonOnFloor_~floor; 187921#L400 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 187023#L507-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 191320#L191 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 194916#L203-2 assume { :end_inline_callOnFloor } true; 194917#L543 assume { :end_inline_initPersonOnFloor } true; 186513#L3063 assume { :end_inline_bigMacCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~18, timeShift_~tmp___0~9, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~18;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret75, stopRequestedAtCurrentFloor_#t~ret76, stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~16, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~16;havoc stopRequestedAtCurrentFloor_~tmp___0~7;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret149, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 186514#L128 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 191244#L155 isExecutiveFloorCalling_#t~ret149 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret149;havoc isExecutiveFloorCalling_#t~ret149;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 191245#L2933 stopRequestedAtCurrentFloor_#t~ret75 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~16 := stopRequestedAtCurrentFloor_#t~ret75;havoc stopRequestedAtCurrentFloor_#t~ret75; 196782#L2317 assume 0 != stopRequestedAtCurrentFloor_~tmp~16;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 192166#L1580 stopRequestedAtCurrentFloor_#t~ret76 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret76;havoc stopRequestedAtCurrentFloor_#t~ret76; 192167#L2321 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~7);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 195689#L2334 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 216927#L2470 assume !(0 != timeShift_~tmp___9~2); 216928#L2561 assume !(1 == ~doorState~0); 222818#L2561-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~12, stopRequestedInDirection_~tmp___0~4, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~6;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~12;havoc stopRequestedInDirection_~tmp___0~4;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~6;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret149, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 222817#L128-3 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 222816#L155-3 isExecutiveFloorCalling_#t~ret149 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret149;havoc isExecutiveFloorCalling_#t~ret149;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 222815#L2933-1 stopRequestedInDirection_#t~ret66 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4 := stopRequestedInDirection_#t~ret66;havoc stopRequestedInDirection_#t~ret66; 222813#L2172 assume 0 != stopRequestedInDirection_~tmp___0~4;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 192123#L1580-3 stopRequestedInDirection_#t~ret67 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~12 := stopRequestedInDirection_#t~ret67;havoc stopRequestedInDirection_#t~ret67;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~6 := (if stopRequestedInDirection_~tmp~12 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~21 := (if stopRequestedInDirection_~__cil_tmp8~6 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 186090#L2185 timeShift_#t~ret98 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 186091#L2569 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret69, continueInDirection_~dir, continueInDirection_~tmp~13;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~13;~currentHeading~0 := continueInDirection_~dir; 189214#L2229 assume !(1 == ~currentHeading~0); 189215#L2239 assume !(0 == ~currentFloorID~0); 189753#L2239-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 189754#L2245-1 assume { :end_inline_continueInDirection } true; 221426#L2578-2 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret164, __utac_acc__Specification14_spec__1_#t~ret165, __utac_acc__Specification14_spec__1_#t~ret166, __utac_acc__Specification14_spec__1_#t~ret167, __utac_acc__Specification14_spec__1_~tmp~29, __utac_acc__Specification14_spec__1_~tmp___0~13, __utac_acc__Specification14_spec__1_~tmp___1~8, __utac_acc__Specification14_spec__1_~tmp___2~6;havoc __utac_acc__Specification14_spec__1_~tmp~29;havoc __utac_acc__Specification14_spec__1_~tmp___0~13;havoc __utac_acc__Specification14_spec__1_~tmp___1~8;havoc __utac_acc__Specification14_spec__1_~tmp___2~6;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret149, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 221425#L128-65 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 196756#L155-65 isExecutiveFloorCalling_#t~ret149 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret149;havoc isExecutiveFloorCalling_#t~ret149;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 221424#L2933-3 __utac_acc__Specification14_spec__1_#t~ret164 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~6 := __utac_acc__Specification14_spec__1_#t~ret164;havoc __utac_acc__Specification14_spec__1_#t~ret164; 221421#L3307 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~6); 221417#L3307-1 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 214883#L2593 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~18, timeShift_~tmp___0~9, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~18;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret75, stopRequestedAtCurrentFloor_#t~ret76, stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~16, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~16;havoc stopRequestedAtCurrentFloor_~tmp___0~7;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret149, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 214884#L128-66 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 200122#L155-66 isExecutiveFloorCalling_#t~ret149 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret149;havoc isExecutiveFloorCalling_#t~ret149;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 206098#L2933-4 stopRequestedAtCurrentFloor_#t~ret75 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~16 := stopRequestedAtCurrentFloor_#t~ret75;havoc stopRequestedAtCurrentFloor_#t~ret75; 221357#L2317-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~16;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 200305#L1580-6 stopRequestedAtCurrentFloor_#t~ret76 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret76;havoc stopRequestedAtCurrentFloor_#t~ret76; 200306#L2321-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~7);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 221350#L2334-1 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 221332#L2470-2 assume !(0 != timeShift_~tmp___9~2); 221333#L2561-3 assume !(1 == ~doorState~0); 229167#L2561-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~12, stopRequestedInDirection_~tmp___0~4, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~6;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~12;havoc stopRequestedInDirection_~tmp___0~4;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~6;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret149, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 229166#L128-69 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 229165#L155-69 isExecutiveFloorCalling_#t~ret149 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret149;havoc isExecutiveFloorCalling_#t~ret149;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 229164#L2933-5 stopRequestedInDirection_#t~ret66 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4 := stopRequestedInDirection_#t~ret66;havoc stopRequestedInDirection_#t~ret66; 229162#L2172-2 assume 0 != stopRequestedInDirection_~tmp___0~4;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 220303#L1580-9 stopRequestedInDirection_#t~ret67 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~12 := stopRequestedInDirection_#t~ret67;havoc stopRequestedInDirection_#t~ret67;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~6 := (if stopRequestedInDirection_~tmp~12 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~21 := (if stopRequestedInDirection_~__cil_tmp8~6 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 220301#L2185-2 timeShift_#t~ret98 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 220112#L2569-2 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret69, continueInDirection_~dir, continueInDirection_~tmp~13;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~13;~currentHeading~0 := continueInDirection_~dir; 189177#L2229-3 assume !(1 == ~currentHeading~0); 189178#L2239-9 assume !(0 == ~currentFloorID~0); 189704#L2239-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 189705#L2245-7 assume { :end_inline_continueInDirection } true; 221428#L2578-5 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret164, __utac_acc__Specification14_spec__1_#t~ret165, __utac_acc__Specification14_spec__1_#t~ret166, __utac_acc__Specification14_spec__1_#t~ret167, __utac_acc__Specification14_spec__1_~tmp~29, __utac_acc__Specification14_spec__1_~tmp___0~13, __utac_acc__Specification14_spec__1_~tmp___1~8, __utac_acc__Specification14_spec__1_~tmp___2~6;havoc __utac_acc__Specification14_spec__1_~tmp~29;havoc __utac_acc__Specification14_spec__1_~tmp___0~13;havoc __utac_acc__Specification14_spec__1_~tmp___1~8;havoc __utac_acc__Specification14_spec__1_~tmp___2~6;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret149, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 193810#L128-131 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 193811#L155-131 isExecutiveFloorCalling_#t~ret149 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret149;havoc isExecutiveFloorCalling_#t~ret149;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 188910#L2933-7 __utac_acc__Specification14_spec__1_#t~ret164 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~6 := __utac_acc__Specification14_spec__1_#t~ret164;havoc __utac_acc__Specification14_spec__1_#t~ret164; 188911#L3307-2 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~6); 192923#L3307-3 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 192924#L2593-1 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~18, timeShift_~tmp___0~9, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~18;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret75, stopRequestedAtCurrentFloor_#t~ret76, stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~16, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~16;havoc stopRequestedAtCurrentFloor_~tmp___0~7;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret149, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 193807#L128-132 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 193808#L155-132 isExecutiveFloorCalling_#t~ret149 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret149;havoc isExecutiveFloorCalling_#t~ret149;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 213739#L2933-8 stopRequestedAtCurrentFloor_#t~ret75 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~16 := stopRequestedAtCurrentFloor_#t~ret75;havoc stopRequestedAtCurrentFloor_#t~ret75; 203106#L2317-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~16;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 203108#L1580-12 stopRequestedAtCurrentFloor_#t~ret76 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret76;havoc stopRequestedAtCurrentFloor_#t~ret76; 203008#L2321-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~7);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 195692#L2334-2 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 218624#L2470-4 assume !(0 != timeShift_~tmp___9~2); 218625#L2561-6 assume !(1 == ~doorState~0); 222984#L2561-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~12, stopRequestedInDirection_~tmp___0~4, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~6;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~12;havoc stopRequestedInDirection_~tmp___0~4;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~6;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret149, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 222983#L128-135 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 222982#L155-135 isExecutiveFloorCalling_#t~ret149 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret149;havoc isExecutiveFloorCalling_#t~ret149;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 222981#L2933-9 stopRequestedInDirection_#t~ret66 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4 := stopRequestedInDirection_#t~ret66;havoc stopRequestedInDirection_#t~ret66; 222980#L2172-4 assume 0 != stopRequestedInDirection_~tmp___0~4;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 196122#L1580-15 stopRequestedInDirection_#t~ret67 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~12 := stopRequestedInDirection_#t~ret67;havoc stopRequestedInDirection_#t~ret67;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~6 := (if stopRequestedInDirection_~tmp~12 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~21 := (if stopRequestedInDirection_~__cil_tmp8~6 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 186122#L2185-4 timeShift_#t~ret98 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 186123#L2569-4 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret69, continueInDirection_~dir, continueInDirection_~tmp~13;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~13;~currentHeading~0 := continueInDirection_~dir; 189189#L2229-6 assume !(1 == ~currentHeading~0); 189190#L2239-18 assume !(0 == ~currentFloorID~0); 189689#L2239-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 189690#L2245-13 assume { :end_inline_continueInDirection } true; 189239#L2578-8 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret164, __utac_acc__Specification14_spec__1_#t~ret165, __utac_acc__Specification14_spec__1_#t~ret166, __utac_acc__Specification14_spec__1_#t~ret167, __utac_acc__Specification14_spec__1_~tmp~29, __utac_acc__Specification14_spec__1_~tmp___0~13, __utac_acc__Specification14_spec__1_~tmp___1~8, __utac_acc__Specification14_spec__1_~tmp___2~6;havoc __utac_acc__Specification14_spec__1_~tmp~29;havoc __utac_acc__Specification14_spec__1_~tmp___0~13;havoc __utac_acc__Specification14_spec__1_~tmp___1~8;havoc __utac_acc__Specification14_spec__1_~tmp___2~6;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret149, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 189240#L128-197 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 192649#L155-197 isExecutiveFloorCalling_#t~ret149 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret149;havoc isExecutiveFloorCalling_#t~ret149;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 188930#L2933-11 __utac_acc__Specification14_spec__1_#t~ret164 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~6 := __utac_acc__Specification14_spec__1_#t~ret164;havoc __utac_acc__Specification14_spec__1_#t~ret164; 188931#L3307-4 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~6); 192934#L3307-5 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 189872#L2593-2 assume { :end_inline_timeShift } true; 187411#L3075 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret151, bobCall_~tmp~20;havoc bobCall_~tmp~20;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~9;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~9; 187412#L1257-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~9 := 4;getOrigin_#res := getOrigin_~retValue_acc~9; 188121#L1282-1 bobCall_#t~ret151 := getOrigin_#res;assume { :end_inline_getOrigin } true;bobCall_~tmp~20 := bobCall_#t~ret151;havoc bobCall_#t~ret151;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~20;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 188122#L399-1 assume 0 == initPersonOnFloor_~floor; 187889#L400-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 186988#L507-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 196159#L191-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 194911#L203-5 assume { :end_inline_callOnFloor } true; 216092#L543-1 assume { :end_inline_initPersonOnFloor } true; 213741#L3008 assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret157, cleanup_#t~ret158, cleanup_~i~3, cleanup_~tmp~26, cleanup_~tmp___0~11, cleanup_~__cil_tmp4~3;havoc cleanup_~i~3;havoc cleanup_~tmp~26;havoc cleanup_~tmp___0~11;havoc cleanup_~__cil_tmp4~3;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~18, timeShift_~tmp___0~9, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~18;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret75, stopRequestedAtCurrentFloor_#t~ret76, stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~16, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~16;havoc stopRequestedAtCurrentFloor_~tmp___0~7;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret149, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 213742#L128-198 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 197021#L155-198 isExecutiveFloorCalling_#t~ret149 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret149;havoc isExecutiveFloorCalling_#t~ret149;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 213570#L2933-12 stopRequestedAtCurrentFloor_#t~ret75 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~16 := stopRequestedAtCurrentFloor_#t~ret75;havoc stopRequestedAtCurrentFloor_#t~ret75; 200365#L2317-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~16;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 200367#L1580-18 stopRequestedAtCurrentFloor_#t~ret76 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret76;havoc stopRequestedAtCurrentFloor_#t~ret76; 200356#L2321-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~7);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 195686#L2334-3 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 219420#L2470-6 assume !(0 != timeShift_~tmp___9~2); 219421#L2561-9 assume !(1 == ~doorState~0); 229733#L2561-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~12, stopRequestedInDirection_~tmp___0~4, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~6;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~12;havoc stopRequestedInDirection_~tmp___0~4;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~6;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret149, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 229732#L128-201 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 229731#L155-201 isExecutiveFloorCalling_#t~ret149 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret149;havoc isExecutiveFloorCalling_#t~ret149;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 229730#L2933-13 stopRequestedInDirection_#t~ret66 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4 := stopRequestedInDirection_#t~ret66;havoc stopRequestedInDirection_#t~ret66; 188624#L2172-6 assume 0 != stopRequestedInDirection_~tmp___0~4;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 188625#L1580-21 stopRequestedInDirection_#t~ret67 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~12 := stopRequestedInDirection_#t~ret67;havoc stopRequestedInDirection_#t~ret67;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~6 := (if stopRequestedInDirection_~tmp~12 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~21 := (if stopRequestedInDirection_~__cil_tmp8~6 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 186038#L2185-6 timeShift_#t~ret98 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 186039#L2569-6 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret69, continueInDirection_~dir, continueInDirection_~tmp~13;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~13;~currentHeading~0 := continueInDirection_~dir; 189161#L2229-9 assume !(1 == ~currentHeading~0); 189162#L2239-27 assume !(0 == ~currentFloorID~0); 189947#L2239-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 189951#L2245-19 assume { :end_inline_continueInDirection } true; 189306#L2578-11 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret164, __utac_acc__Specification14_spec__1_#t~ret165, __utac_acc__Specification14_spec__1_#t~ret166, __utac_acc__Specification14_spec__1_#t~ret167, __utac_acc__Specification14_spec__1_~tmp~29, __utac_acc__Specification14_spec__1_~tmp___0~13, __utac_acc__Specification14_spec__1_~tmp___1~8, __utac_acc__Specification14_spec__1_~tmp___2~6;havoc __utac_acc__Specification14_spec__1_~tmp~29;havoc __utac_acc__Specification14_spec__1_~tmp___0~13;havoc __utac_acc__Specification14_spec__1_~tmp___1~8;havoc __utac_acc__Specification14_spec__1_~tmp___2~6;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret149, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 189307#L128-263 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 192501#L155-263 isExecutiveFloorCalling_#t~ret149 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret149;havoc isExecutiveFloorCalling_#t~ret149;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 192502#L2933-15 __utac_acc__Specification14_spec__1_#t~ret164 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~6 := __utac_acc__Specification14_spec__1_#t~ret164;havoc __utac_acc__Specification14_spec__1_#t~ret164; 192950#L3307-6 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~6); 192952#L3307-7 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 189841#L2593-3 assume { :end_inline_timeShift } true;cleanup_~i~3 := 0; 189842#L3090-3 [2018-11-18 16:51:25,917 INFO L796 eck$LassoCheckResult]: Loop: 189842#L3090-3 assume true; 190873#L3090-1 assume !false; 190874#L3091 cleanup_~__cil_tmp4~3 := ~cleanupTimeShifts~0 - 1; 190852#L3094 assume cleanup_~i~3 < cleanup_~__cil_tmp4~3;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~11;havoc isBlocked_~retValue_acc~11;isBlocked_~retValue_acc~11 := 0;isBlocked_#res := isBlocked_~retValue_acc~11; 190853#L1407 cleanup_#t~ret157 := isBlocked_#res;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~11 := cleanup_#t~ret157;havoc cleanup_#t~ret157; 190712#L3098 assume 1 != cleanup_~tmp___0~11; 190713#L3098-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res;havoc isIdle_#t~ret50, isIdle_~retValue_acc~18, isIdle_~tmp~9;havoc isIdle_~retValue_acc~18;havoc isIdle_~tmp~9;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret45, anyStopRequested_#t~ret46, anyStopRequested_#t~ret47, anyStopRequested_#t~ret48, anyStopRequested_#t~ret49, anyStopRequested_~retValue_acc~17, anyStopRequested_~tmp~8, anyStopRequested_~tmp___0~2, anyStopRequested_~tmp___1~2, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~17;havoc anyStopRequested_~tmp~8;havoc anyStopRequested_~tmp___0~2;havoc anyStopRequested_~tmp___1~2;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 192860#L128-264 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 192861#L155-264 anyStopRequested_#t~ret45 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret45;havoc anyStopRequested_#t~ret45; 190740#L1688 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~17 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~17; 189082#L1752 isIdle_#t~ret50 := anyStopRequested_#res;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~9 := isIdle_#t~ret50;havoc isIdle_#t~ret50;isIdle_~retValue_acc~18 := (if 0 == isIdle_~tmp~9 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~18; 192338#L1765 cleanup_#t~ret158 := isIdle_#res;assume { :end_inline_isIdle } true;cleanup_~tmp~26 := cleanup_#t~ret158;havoc cleanup_#t~ret158; 189182#L3110 assume !(0 != cleanup_~tmp~26);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~18, timeShift_~tmp___0~9, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~18;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret75, stopRequestedAtCurrentFloor_#t~ret76, stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~16, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~16;havoc stopRequestedAtCurrentFloor_~tmp___0~7;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret149, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 189183#L128-269 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 192514#L155-269 isExecutiveFloorCalling_#t~ret149 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret149;havoc isExecutiveFloorCalling_#t~ret149;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 192515#L2933-16 stopRequestedAtCurrentFloor_#t~ret75 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~16 := stopRequestedAtCurrentFloor_#t~ret75;havoc stopRequestedAtCurrentFloor_#t~ret75; 194928#L2317-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~16;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 194930#L1580-24 stopRequestedAtCurrentFloor_#t~ret76 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret76;havoc stopRequestedAtCurrentFloor_#t~ret76; 207465#L2321-4 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~7);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 207467#L2334-4 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 219784#L2470-8 assume !(0 != timeShift_~tmp___9~2); 225892#L2561-12 assume !(1 == ~doorState~0); 225893#L2561-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~12, stopRequestedInDirection_~tmp___0~4, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~6;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~12;havoc stopRequestedInDirection_~tmp___0~4;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~6;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret149, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 193357#L128-272 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 193358#L155-272 isExecutiveFloorCalling_#t~ret149 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret149;havoc isExecutiveFloorCalling_#t~ret149;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 189196#L2933-17 stopRequestedInDirection_#t~ret66 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4 := stopRequestedInDirection_#t~ret66;havoc stopRequestedInDirection_#t~ret66; 189197#L2172-8 assume 0 != stopRequestedInDirection_~tmp___0~4;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 196111#L1580-27 stopRequestedInDirection_#t~ret67 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~12 := stopRequestedInDirection_#t~ret67;havoc stopRequestedInDirection_#t~ret67;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~6 := (if stopRequestedInDirection_~tmp~12 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~21 := (if stopRequestedInDirection_~__cil_tmp8~6 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 186068#L2185-8 timeShift_#t~ret98 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 186069#L2569-8 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret69, continueInDirection_~dir, continueInDirection_~tmp~13;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~13;~currentHeading~0 := continueInDirection_~dir; 190720#L2229-12 assume !(1 == ~currentHeading~0); 189939#L2239-36 assume !(0 == ~currentFloorID~0); 189904#L2239-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 189905#L2245-25 assume { :end_inline_continueInDirection } true; 189302#L2578-14 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret164, __utac_acc__Specification14_spec__1_#t~ret165, __utac_acc__Specification14_spec__1_#t~ret166, __utac_acc__Specification14_spec__1_#t~ret167, __utac_acc__Specification14_spec__1_~tmp~29, __utac_acc__Specification14_spec__1_~tmp___0~13, __utac_acc__Specification14_spec__1_~tmp___1~8, __utac_acc__Specification14_spec__1_~tmp___2~6;havoc __utac_acc__Specification14_spec__1_~tmp~29;havoc __utac_acc__Specification14_spec__1_~tmp___0~13;havoc __utac_acc__Specification14_spec__1_~tmp___1~8;havoc __utac_acc__Specification14_spec__1_~tmp___2~6;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret149, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 189303#L128-334 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 192442#L155-334 isExecutiveFloorCalling_#t~ret149 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret149;havoc isExecutiveFloorCalling_#t~ret149;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 192443#L2933-19 __utac_acc__Specification14_spec__1_#t~ret164 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~6 := __utac_acc__Specification14_spec__1_#t~ret164;havoc __utac_acc__Specification14_spec__1_#t~ret164; 192895#L3307-8 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~6); 192897#L3307-9 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 189844#L2593-4 assume { :end_inline_timeShift } true;cleanup_~i~3 := 1 + cleanup_~i~3; 189842#L3090-3 [2018-11-18 16:51:25,922 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 16:51:25,923 INFO L82 PathProgramCache]: Analyzing trace with hash -679166002, now seen corresponding path program 1 times [2018-11-18 16:51:25,923 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 16:51:25,923 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 16:51:25,923 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 16:51:25,924 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 16:51:25,924 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 16:51:25,949 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 16:51:26,663 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 16:51:26,663 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 16:51:26,663 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-18 16:51:26,665 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-18 16:51:26,665 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 16:51:26,665 INFO L82 PathProgramCache]: Analyzing trace with hash 56202088, now seen corresponding path program 1 times [2018-11-18 16:51:26,665 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 16:51:26,665 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 16:51:26,666 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 16:51:26,666 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 16:51:26,666 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 16:51:26,672 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 16:51:26,767 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 16:51:26,767 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 16:51:26,768 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2018-11-18 16:51:26,768 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-18 16:51:26,768 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2018-11-18 16:51:26,768 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=43, Unknown=0, NotChecked=0, Total=56 [2018-11-18 16:51:26,768 INFO L87 Difference]: Start difference. First operand 46371 states and 86273 transitions. cyclomatic complexity: 39904 Second operand 8 states. [2018-11-18 16:51:50,536 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 16:51:50,537 INFO L93 Difference]: Finished difference Result 410637 states and 763776 transitions. [2018-11-18 16:51:50,537 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 32 states. [2018-11-18 16:51:50,537 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 410637 states and 763776 transitions. [2018-11-18 16:51:51,692 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 117788 [2018-11-18 16:51:52,648 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 410637 states to 410637 states and 763776 transitions. [2018-11-18 16:51:52,648 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 410637 [2018-11-18 16:51:52,850 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 410637 [2018-11-18 16:51:52,850 INFO L73 IsDeterministic]: Start isDeterministic. Operand 410637 states and 763776 transitions. [2018-11-18 16:51:53,026 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-18 16:51:53,027 INFO L705 BuchiCegarLoop]: Abstraction has 410637 states and 763776 transitions. [2018-11-18 16:51:53,203 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 410637 states and 763776 transitions. [2018-11-18 16:52:00,735 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 410637 to 92563. [2018-11-18 16:52:00,736 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 92563 states. [2018-11-18 16:52:00,878 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 92563 states to 92563 states and 172184 transitions. [2018-11-18 16:52:00,879 INFO L728 BuchiCegarLoop]: Abstraction has 92563 states and 172184 transitions. [2018-11-18 16:52:00,879 INFO L608 BuchiCegarLoop]: Abstraction has 92563 states and 172184 transitions. [2018-11-18 16:52:00,879 INFO L442 BuchiCegarLoop]: ======== Iteration 4============ [2018-11-18 16:52:00,879 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 92563 states and 172184 transitions. [2018-11-18 16:52:01,049 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 20764 [2018-11-18 16:52:01,049 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-18 16:52:01,049 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-18 16:52:01,054 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 16:52:01,054 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 16:52:01,054 INFO L794 eck$LassoCheckResult]: Stem: 646582#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];call #t~string18.base, #t~string18.offset := #Ultimate.alloc(30);call #t~string19.base, #t~string19.offset := #Ultimate.alloc(9);call #t~string20.base, #t~string20.offset := #Ultimate.alloc(21);call #t~string21.base, #t~string21.offset := #Ultimate.alloc(30);call #t~string22.base, #t~string22.offset := #Ultimate.alloc(9);call #t~string23.base, #t~string23.offset := #Ultimate.alloc(21);call #t~string27.base, #t~string27.offset := #Ultimate.alloc(30);call #t~string28.base, #t~string28.offset := #Ultimate.alloc(9);call #t~string29.base, #t~string29.offset := #Ultimate.alloc(25);call #t~string30.base, #t~string30.offset := #Ultimate.alloc(30);call #t~string31.base, #t~string31.offset := #Ultimate.alloc(9);call #t~string32.base, #t~string32.offset := #Ultimate.alloc(25);call #t~string102.base, #t~string102.offset := #Ultimate.alloc(10);call #t~string104.base, #t~string104.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string104.base,#t~string104.offset := 91];#memory_int := #memory_int[#t~string104.base,1 + #t~string104.offset := 95];#memory_int := #memory_int[#t~string104.base,2 + #t~string104.offset := 93];#memory_int := #memory_int[#t~string104.base,3 + #t~string104.offset := 0];call #t~string106.base, #t~string106.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string106.base,#t~string106.offset := 91];#memory_int := #memory_int[#t~string106.base,1 + #t~string106.offset := 93];#memory_int := #memory_int[#t~string106.base,2 + #t~string106.offset := 32];#memory_int := #memory_int[#t~string106.base,3 + #t~string106.offset := 0];call #t~string108.base, #t~string108.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string108.base,#t~string108.offset := 32];#memory_int := #memory_int[#t~string108.base,1 + #t~string108.offset := 97];#memory_int := #memory_int[#t~string108.base,2 + #t~string108.offset := 116];#memory_int := #memory_int[#t~string108.base,3 + #t~string108.offset := 32];#memory_int := #memory_int[#t~string108.base,4 + #t~string108.offset := 0];call #t~string110.base, #t~string110.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string110.base,#t~string110.offset := 37];#memory_int := #memory_int[#t~string110.base,1 + #t~string110.offset := 105];#memory_int := #memory_int[#t~string110.base,2 + #t~string110.offset := 0];call #t~string112.base, #t~string112.offset := #Ultimate.alloc(10);call #t~string114.base, #t~string114.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string114.base,#t~string114.offset := 117];#memory_int := #memory_int[#t~string114.base,1 + #t~string114.offset := 112];#memory_int := #memory_int[#t~string114.base,2 + #t~string114.offset := 0];call #t~string116.base, #t~string116.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string116.base,#t~string116.offset := 100];#memory_int := #memory_int[#t~string116.base,1 + #t~string116.offset := 111];#memory_int := #memory_int[#t~string116.base,2 + #t~string116.offset := 119];#memory_int := #memory_int[#t~string116.base,3 + #t~string116.offset := 110];#memory_int := #memory_int[#t~string116.base,4 + #t~string116.offset := 0];call #t~string118.base, #t~string118.offset := #Ultimate.alloc(7);#memory_int := #memory_int[#t~string118.base,#t~string118.offset := 32];#memory_int := #memory_int[#t~string118.base,1 + #t~string118.offset := 73];#memory_int := #memory_int[#t~string118.base,2 + #t~string118.offset := 76];#memory_int := #memory_int[#t~string118.base,3 + #t~string118.offset := 95];#memory_int := #memory_int[#t~string118.base,4 + #t~string118.offset := 112];#memory_int := #memory_int[#t~string118.base,5 + #t~string118.offset := 58];#memory_int := #memory_int[#t~string118.base,6 + #t~string118.offset := 0];call #t~string120.base, #t~string120.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string120.base,#t~string120.offset := 32];#memory_int := #memory_int[#t~string120.base,1 + #t~string120.offset := 37];#memory_int := #memory_int[#t~string120.base,2 + #t~string120.offset := 105];#memory_int := #memory_int[#t~string120.base,3 + #t~string120.offset := 0];call #t~string122.base, #t~string122.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string122.base,#t~string122.offset := 32];#memory_int := #memory_int[#t~string122.base,1 + #t~string122.offset := 37];#memory_int := #memory_int[#t~string122.base,2 + #t~string122.offset := 105];#memory_int := #memory_int[#t~string122.base,3 + #t~string122.offset := 0];call #t~string124.base, #t~string124.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string124.base,#t~string124.offset := 32];#memory_int := #memory_int[#t~string124.base,1 + #t~string124.offset := 37];#memory_int := #memory_int[#t~string124.base,2 + #t~string124.offset := 105];#memory_int := #memory_int[#t~string124.base,3 + #t~string124.offset := 0];call #t~string126.base, #t~string126.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string126.base,#t~string126.offset := 32];#memory_int := #memory_int[#t~string126.base,1 + #t~string126.offset := 37];#memory_int := #memory_int[#t~string126.base,2 + #t~string126.offset := 105];#memory_int := #memory_int[#t~string126.base,3 + #t~string126.offset := 0];call #t~string128.base, #t~string128.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string128.base,#t~string128.offset := 32];#memory_int := #memory_int[#t~string128.base,1 + #t~string128.offset := 37];#memory_int := #memory_int[#t~string128.base,2 + #t~string128.offset := 105];#memory_int := #memory_int[#t~string128.base,3 + #t~string128.offset := 0];call #t~string130.base, #t~string130.offset := #Ultimate.alloc(6);#memory_int := #memory_int[#t~string130.base,#t~string130.offset := 32];#memory_int := #memory_int[#t~string130.base,1 + #t~string130.offset := 70];#memory_int := #memory_int[#t~string130.base,2 + #t~string130.offset := 95];#memory_int := #memory_int[#t~string130.base,3 + #t~string130.offset := 112];#memory_int := #memory_int[#t~string130.base,4 + #t~string130.offset := 58];#memory_int := #memory_int[#t~string130.base,5 + #t~string130.offset := 0];call #t~string133.base, #t~string133.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string133.base,#t~string133.offset := 32];#memory_int := #memory_int[#t~string133.base,1 + #t~string133.offset := 37];#memory_int := #memory_int[#t~string133.base,2 + #t~string133.offset := 105];#memory_int := #memory_int[#t~string133.base,3 + #t~string133.offset := 0];call #t~string136.base, #t~string136.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string136.base,#t~string136.offset := 32];#memory_int := #memory_int[#t~string136.base,1 + #t~string136.offset := 37];#memory_int := #memory_int[#t~string136.base,2 + #t~string136.offset := 105];#memory_int := #memory_int[#t~string136.base,3 + #t~string136.offset := 0];call #t~string139.base, #t~string139.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string139.base,#t~string139.offset := 32];#memory_int := #memory_int[#t~string139.base,1 + #t~string139.offset := 37];#memory_int := #memory_int[#t~string139.base,2 + #t~string139.offset := 105];#memory_int := #memory_int[#t~string139.base,3 + #t~string139.offset := 0];call #t~string142.base, #t~string142.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string142.base,#t~string142.offset := 32];#memory_int := #memory_int[#t~string142.base,1 + #t~string142.offset := 37];#memory_int := #memory_int[#t~string142.base,2 + #t~string142.offset := 105];#memory_int := #memory_int[#t~string142.base,3 + #t~string142.offset := 0];call #t~string145.base, #t~string145.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string145.base,#t~string145.offset := 32];#memory_int := #memory_int[#t~string145.base,1 + #t~string145.offset := 37];#memory_int := #memory_int[#t~string145.base,2 + #t~string145.offset := 105];#memory_int := #memory_int[#t~string145.base,3 + #t~string145.offset := 0];call #t~string147.base, #t~string147.offset := #Ultimate.alloc(2);#memory_int := #memory_int[#t~string147.base,#t~string147.offset := 10];#memory_int := #memory_int[#t~string147.base,1 + #t~string147.offset := 0];~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 646583#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res;havoc main_#t~ret163, main_~retValue_acc~31, main_~tmp~28;havoc main_~retValue_acc~31;havoc main_~tmp~28;assume { :begin_inline_select_helpers } true; 651727#L1199 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 650712#L1192 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res;havoc valid_product_~retValue_acc~7;havoc valid_product_~retValue_acc~7;valid_product_~retValue_acc~7 := 1;valid_product_#res := valid_product_~retValue_acc~7; 648903#L1207 main_#t~ret163 := valid_product_#res;assume { :end_inline_valid_product } true;main_~tmp~28 := main_#t~ret163;havoc main_#t~ret163; 646359#L3282 assume 0 != main_~tmp~28;assume { :begin_inline_setup } true; 646360#L3258 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret156, bigMacCall_~tmp~25;havoc bigMacCall_~tmp~25;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~9;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~9; 647682#L1257 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~9 := 4;getOrigin_#res := getOrigin_~retValue_acc~9; 645197#L1282 bigMacCall_#t~ret156 := getOrigin_#res;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~25 := bigMacCall_#t~ret156;havoc bigMacCall_#t~ret156;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~25;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 645198#L399 assume 0 == initPersonOnFloor_~floor; 645014#L400 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 644114#L507-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 648490#L191 assume !(0 == callOnFloor_~floorID); 652666#L194 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 652131#L203-2 assume { :end_inline_callOnFloor } true; 652132#L543 assume { :end_inline_initPersonOnFloor } true; 643605#L3063 assume { :end_inline_bigMacCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~18, timeShift_~tmp___0~9, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~18;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret75, stopRequestedAtCurrentFloor_#t~ret76, stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~16, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~16;havoc stopRequestedAtCurrentFloor_~tmp___0~7;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret149, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 643606#L128 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 648413#L155 isExecutiveFloorCalling_#t~ret149 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret149;havoc isExecutiveFloorCalling_#t~ret149;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 648414#L2933 stopRequestedAtCurrentFloor_#t~ret75 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~16 := stopRequestedAtCurrentFloor_#t~ret75;havoc stopRequestedAtCurrentFloor_#t~ret75; 653835#L2317 assume 0 != stopRequestedAtCurrentFloor_~tmp~16;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 653837#L1580 stopRequestedAtCurrentFloor_#t~ret76 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret76;havoc stopRequestedAtCurrentFloor_#t~ret76; 652952#L2321 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~7);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 652953#L2334 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 656609#L2470 assume !(0 != timeShift_~tmp___9~2); 656607#L2561 assume !(1 == ~doorState~0); 656608#L2561-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~12, stopRequestedInDirection_~tmp___0~4, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~6;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~12;havoc stopRequestedInDirection_~tmp___0~4;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~6;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret149, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 651039#L128-3 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 651040#L155-3 isExecutiveFloorCalling_#t~ret149 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret149;havoc isExecutiveFloorCalling_#t~ret149;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 646042#L2933-1 stopRequestedInDirection_#t~ret66 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4 := stopRequestedInDirection_#t~ret66;havoc stopRequestedInDirection_#t~ret66; 646043#L2172 assume 0 != stopRequestedInDirection_~tmp___0~4;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 649302#L1580-3 stopRequestedInDirection_#t~ret67 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~12 := stopRequestedInDirection_#t~ret67;havoc stopRequestedInDirection_#t~ret67;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~6 := (if stopRequestedInDirection_~tmp~12 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~21 := (if stopRequestedInDirection_~__cil_tmp8~6 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 643168#L2185 timeShift_#t~ret98 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 643169#L2569 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret69, continueInDirection_~dir, continueInDirection_~tmp~13;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~13;~currentHeading~0 := continueInDirection_~dir; 646317#L2229 assume !(1 == ~currentHeading~0); 646318#L2239 assume !(0 == ~currentFloorID~0); 646872#L2239-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 646873#L2245-1 assume { :end_inline_continueInDirection } true; 680441#L2578-2 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret164, __utac_acc__Specification14_spec__1_#t~ret165, __utac_acc__Specification14_spec__1_#t~ret166, __utac_acc__Specification14_spec__1_#t~ret167, __utac_acc__Specification14_spec__1_~tmp~29, __utac_acc__Specification14_spec__1_~tmp___0~13, __utac_acc__Specification14_spec__1_~tmp___1~8, __utac_acc__Specification14_spec__1_~tmp___2~6;havoc __utac_acc__Specification14_spec__1_~tmp~29;havoc __utac_acc__Specification14_spec__1_~tmp___0~13;havoc __utac_acc__Specification14_spec__1_~tmp___1~8;havoc __utac_acc__Specification14_spec__1_~tmp___2~6;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret149, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 650955#L128-65 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 650956#L155-65 isExecutiveFloorCalling_#t~ret149 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret149;havoc isExecutiveFloorCalling_#t~ret149;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 646049#L2933-3 __utac_acc__Specification14_spec__1_#t~ret164 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~6 := __utac_acc__Specification14_spec__1_#t~ret164;havoc __utac_acc__Specification14_spec__1_#t~ret164; 646050#L3307 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~6); 650140#L3307-1 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 650141#L2593 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~18, timeShift_~tmp___0~9, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~18;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret75, stopRequestedAtCurrentFloor_#t~ret76, stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~16, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~16;havoc stopRequestedAtCurrentFloor_~tmp___0~7;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret149, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 650943#L128-66 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 650944#L155-66 isExecutiveFloorCalling_#t~ret149 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret149;havoc isExecutiveFloorCalling_#t~ret149;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 646055#L2933-4 stopRequestedAtCurrentFloor_#t~ret75 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~16 := stopRequestedAtCurrentFloor_#t~ret75;havoc stopRequestedAtCurrentFloor_#t~ret75; 646056#L2317-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~16;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 649325#L1580-6 stopRequestedAtCurrentFloor_#t~ret76 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret76;havoc stopRequestedAtCurrentFloor_#t~ret76; 649326#L2321-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~7);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 680715#L2334-1 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 653101#L2470-2 assume !(0 != timeShift_~tmp___9~2); 648043#L2561-3 assume !(1 == ~doorState~0); 648044#L2561-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~12, stopRequestedInDirection_~tmp___0~4, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~6;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~12;havoc stopRequestedInDirection_~tmp___0~4;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~6;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret149, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 648048#L128-69 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 648505#L155-69 isExecutiveFloorCalling_#t~ret149 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret149;havoc isExecutiveFloorCalling_#t~ret149;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 648506#L2933-5 stopRequestedInDirection_#t~ret66 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4 := stopRequestedInDirection_#t~ret66;havoc stopRequestedInDirection_#t~ret66; 645756#L2172-2 assume 0 != stopRequestedInDirection_~tmp___0~4;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 645757#L1580-9 stopRequestedInDirection_#t~ret67 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~12 := stopRequestedInDirection_#t~ret67;havoc stopRequestedInDirection_#t~ret67;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~6 := (if stopRequestedInDirection_~tmp~12 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~21 := (if stopRequestedInDirection_~__cil_tmp8~6 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 643170#L2185-2 timeShift_#t~ret98 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 643171#L2569-2 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret69, continueInDirection_~dir, continueInDirection_~tmp~13;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~13;~currentHeading~0 := continueInDirection_~dir; 646280#L2229-3 assume !(1 == ~currentHeading~0); 646281#L2239-9 assume !(0 == ~currentFloorID~0); 646822#L2239-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 646823#L2245-7 assume { :end_inline_continueInDirection } true; 682698#L2578-5 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret164, __utac_acc__Specification14_spec__1_#t~ret165, __utac_acc__Specification14_spec__1_#t~ret166, __utac_acc__Specification14_spec__1_#t~ret167, __utac_acc__Specification14_spec__1_~tmp~29, __utac_acc__Specification14_spec__1_~tmp___0~13, __utac_acc__Specification14_spec__1_~tmp___1~8, __utac_acc__Specification14_spec__1_~tmp___2~6;havoc __utac_acc__Specification14_spec__1_~tmp~29;havoc __utac_acc__Specification14_spec__1_~tmp___0~13;havoc __utac_acc__Specification14_spec__1_~tmp___1~8;havoc __utac_acc__Specification14_spec__1_~tmp___2~6;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret149, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 650973#L128-131 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 650974#L155-131 isExecutiveFloorCalling_#t~ret149 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret149;havoc isExecutiveFloorCalling_#t~ret149;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 657114#L2933-7 __utac_acc__Specification14_spec__1_#t~ret164 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~6 := __utac_acc__Specification14_spec__1_#t~ret164;havoc __utac_acc__Specification14_spec__1_#t~ret164; 657115#L3307-2 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~6); 650080#L3307-3 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 650081#L2593-1 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~18, timeShift_~tmp___0~9, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~18;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret75, stopRequestedAtCurrentFloor_#t~ret76, stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~16, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~16;havoc stopRequestedAtCurrentFloor_~tmp___0~7;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret149, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 657054#L128-132 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 654341#L155-132 isExecutiveFloorCalling_#t~ret149 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret149;havoc isExecutiveFloorCalling_#t~ret149;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 657047#L2933-8 stopRequestedAtCurrentFloor_#t~ret75 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~16 := stopRequestedAtCurrentFloor_#t~ret75;havoc stopRequestedAtCurrentFloor_#t~ret75; 657048#L2317-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~16;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 662348#L1580-12 stopRequestedAtCurrentFloor_#t~ret76 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret76;havoc stopRequestedAtCurrentFloor_#t~ret76; 662349#L2321-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~7);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 682693#L2334-2 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 682691#L2470-4 assume !(0 != timeShift_~tmp___9~2); 682412#L2561-6 assume !(1 == ~doorState~0); 682407#L2561-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~12, stopRequestedInDirection_~tmp___0~4, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~6;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~12;havoc stopRequestedInDirection_~tmp___0~4;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~6;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret149, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 682406#L128-135 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 682405#L155-135 isExecutiveFloorCalling_#t~ret149 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret149;havoc isExecutiveFloorCalling_#t~ret149;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 682404#L2933-9 stopRequestedInDirection_#t~ret66 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4 := stopRequestedInDirection_#t~ret66;havoc stopRequestedInDirection_#t~ret66; 682402#L2172-4 assume 0 != stopRequestedInDirection_~tmp___0~4;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 682401#L1580-15 stopRequestedInDirection_#t~ret67 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~12 := stopRequestedInDirection_#t~ret67;havoc stopRequestedInDirection_#t~ret67;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~6 := (if stopRequestedInDirection_~tmp~12 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~21 := (if stopRequestedInDirection_~__cil_tmp8~6 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 682398#L2185-4 timeShift_#t~ret98 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 682395#L2569-4 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret69, continueInDirection_~dir, continueInDirection_~tmp~13;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~13;~currentHeading~0 := continueInDirection_~dir; 646292#L2229-6 assume !(1 == ~currentHeading~0); 646293#L2239-18 assume !(0 == ~currentFloorID~0); 646808#L2239-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 646809#L2245-13 assume { :end_inline_continueInDirection } true; 689711#L2578-8 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret164, __utac_acc__Specification14_spec__1_#t~ret165, __utac_acc__Specification14_spec__1_#t~ret166, __utac_acc__Specification14_spec__1_#t~ret167, __utac_acc__Specification14_spec__1_~tmp~29, __utac_acc__Specification14_spec__1_~tmp___0~13, __utac_acc__Specification14_spec__1_~tmp___1~8, __utac_acc__Specification14_spec__1_~tmp___2~6;havoc __utac_acc__Specification14_spec__1_~tmp~29;havoc __utac_acc__Specification14_spec__1_~tmp___0~13;havoc __utac_acc__Specification14_spec__1_~tmp___1~8;havoc __utac_acc__Specification14_spec__1_~tmp___2~6;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret149, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 657120#L128-197 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 657121#L155-197 isExecutiveFloorCalling_#t~ret149 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret149;havoc isExecutiveFloorCalling_#t~ret149;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 657112#L2933-11 __utac_acc__Specification14_spec__1_#t~ret164 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~6 := __utac_acc__Specification14_spec__1_#t~ret164;havoc __utac_acc__Specification14_spec__1_#t~ret164; 657113#L3307-4 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~6); 697663#L3307-5 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 697662#L2593-2 assume { :end_inline_timeShift } true; 697661#L3075 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret151, bobCall_~tmp~20;havoc bobCall_~tmp~20;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~9;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~9; 697660#L1257-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~9 := 4;getOrigin_#res := getOrigin_~retValue_acc~9; 697654#L1282-1 bobCall_#t~ret151 := getOrigin_#res;assume { :end_inline_getOrigin } true;bobCall_~tmp~20 := bobCall_#t~ret151;havoc bobCall_#t~ret151;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~20;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 697653#L399-1 assume 0 == initPersonOnFloor_~floor; 697638#L400-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 648464#L507-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 648465#L191-2 assume !(0 == callOnFloor_~floorID); 697620#L194-2 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 710240#L203-5 assume { :end_inline_callOnFloor } true; 710239#L543-1 assume { :end_inline_initPersonOnFloor } true; 662341#L3008 assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret157, cleanup_#t~ret158, cleanup_~i~3, cleanup_~tmp~26, cleanup_~tmp___0~11, cleanup_~__cil_tmp4~3;havoc cleanup_~i~3;havoc cleanup_~tmp~26;havoc cleanup_~tmp___0~11;havoc cleanup_~__cil_tmp4~3;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~18, timeShift_~tmp___0~9, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~18;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret75, stopRequestedAtCurrentFloor_#t~ret76, stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~16, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~16;havoc stopRequestedAtCurrentFloor_~tmp___0~7;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret149, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 662342#L128-198 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 654389#L155-198 isExecutiveFloorCalling_#t~ret149 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret149;havoc isExecutiveFloorCalling_#t~ret149;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 657049#L2933-12 stopRequestedAtCurrentFloor_#t~ret75 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~16 := stopRequestedAtCurrentFloor_#t~ret75;havoc stopRequestedAtCurrentFloor_#t~ret75; 657039#L2317-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~16;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 657041#L1580-18 stopRequestedAtCurrentFloor_#t~ret76 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret76;havoc stopRequestedAtCurrentFloor_#t~ret76; 657027#L2321-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~7);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 657029#L2334-3 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 700781#L2470-6 assume !(0 != timeShift_~tmp___9~2); 700783#L2561-9 assume !(1 == ~doorState~0); 698148#L2561-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~12, stopRequestedInDirection_~tmp___0~4, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~6;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~12;havoc stopRequestedInDirection_~tmp___0~4;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~6;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret149, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 698149#L128-201 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 698144#L155-201 isExecutiveFloorCalling_#t~ret149 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret149;havoc isExecutiveFloorCalling_#t~ret149;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 698145#L2933-13 stopRequestedInDirection_#t~ret66 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4 := stopRequestedInDirection_#t~ret66;havoc stopRequestedInDirection_#t~ret66; 645737#L2172-6 assume 0 != stopRequestedInDirection_~tmp___0~4;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 645738#L1580-21 stopRequestedInDirection_#t~ret67 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~12 := stopRequestedInDirection_#t~ret67;havoc stopRequestedInDirection_#t~ret67;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~6 := (if stopRequestedInDirection_~tmp~12 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~21 := (if stopRequestedInDirection_~__cil_tmp8~6 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 710538#L2185-6 timeShift_#t~ret98 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 710537#L2569-6 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret69, continueInDirection_~dir, continueInDirection_~tmp~13;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~13;~currentHeading~0 := continueInDirection_~dir; 710536#L2229-9 assume !(1 == ~currentHeading~0); 709723#L2239-27 assume !(0 == ~currentFloorID~0); 709722#L2239-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 651017#L2245-19 assume { :end_inline_continueInDirection } true; 648764#L2578-11 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret164, __utac_acc__Specification14_spec__1_#t~ret165, __utac_acc__Specification14_spec__1_#t~ret166, __utac_acc__Specification14_spec__1_#t~ret167, __utac_acc__Specification14_spec__1_~tmp~29, __utac_acc__Specification14_spec__1_~tmp___0~13, __utac_acc__Specification14_spec__1_~tmp___1~8, __utac_acc__Specification14_spec__1_~tmp___2~6;havoc __utac_acc__Specification14_spec__1_~tmp~29;havoc __utac_acc__Specification14_spec__1_~tmp___0~13;havoc __utac_acc__Specification14_spec__1_~tmp___1~8;havoc __utac_acc__Specification14_spec__1_~tmp___2~6;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret149, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 697271#L128-263 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 653929#L155-263 isExecutiveFloorCalling_#t~ret149 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret149;havoc isExecutiveFloorCalling_#t~ret149;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 697198#L2933-15 __utac_acc__Specification14_spec__1_#t~ret164 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~6 := __utac_acc__Specification14_spec__1_#t~ret164;havoc __utac_acc__Specification14_spec__1_#t~ret164; 697194#L3307-6 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~6); 651179#L3307-7 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 646963#L2593-3 assume { :end_inline_timeShift } true;cleanup_~i~3 := 0; 646964#L3090-3 [2018-11-18 16:52:01,055 INFO L796 eck$LassoCheckResult]: Loop: 646964#L3090-3 assume true; 648033#L3090-1 assume !false; 722620#L3091 cleanup_~__cil_tmp4~3 := ~cleanupTimeShifts~0 - 1; 722619#L3094 assume cleanup_~i~3 < cleanup_~__cil_tmp4~3;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~11;havoc isBlocked_~retValue_acc~11;isBlocked_~retValue_acc~11 := 0;isBlocked_#res := isBlocked_~retValue_acc~11; 653438#L1407 cleanup_#t~ret157 := isBlocked_#res;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~11 := cleanup_#t~ret157;havoc cleanup_#t~ret157; 653439#L3098 assume 1 != cleanup_~tmp___0~11; 722599#L3098-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res;havoc isIdle_#t~ret50, isIdle_~retValue_acc~18, isIdle_~tmp~9;havoc isIdle_~retValue_acc~18;havoc isIdle_~tmp~9;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret45, anyStopRequested_#t~ret46, anyStopRequested_#t~ret47, anyStopRequested_#t~ret48, anyStopRequested_#t~ret49, anyStopRequested_~retValue_acc~17, anyStopRequested_~tmp~8, anyStopRequested_~tmp___0~2, anyStopRequested_~tmp___1~2, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~17;havoc anyStopRequested_~tmp~8;havoc anyStopRequested_~tmp___0~2;havoc anyStopRequested_~tmp___1~2;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 650013#L128-264 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 650014#L155-264 anyStopRequested_#t~ret45 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret45;havoc anyStopRequested_#t~ret45; 690837#L1688 assume !(0 != anyStopRequested_~tmp___3~0); 690838#L1692 assume 0 != ~floorButtons_0~0;anyStopRequested_~retValue_acc~17 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~17; 730638#L1752 isIdle_#t~ret50 := anyStopRequested_#res;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~9 := isIdle_#t~ret50;havoc isIdle_#t~ret50;isIdle_~retValue_acc~18 := (if 0 == isIdle_~tmp~9 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~18; 730637#L1765 cleanup_#t~ret158 := isIdle_#res;assume { :end_inline_isIdle } true;cleanup_~tmp~26 := cleanup_#t~ret158;havoc cleanup_#t~ret158; 730636#L3110 assume !(0 != cleanup_~tmp~26);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~18, timeShift_~tmp___0~9, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~18;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret75, stopRequestedAtCurrentFloor_#t~ret76, stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~16, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~16;havoc stopRequestedAtCurrentFloor_~tmp___0~7;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret149, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 650528#L128-269 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 649706#L155-269 isExecutiveFloorCalling_#t~ret149 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret149;havoc isExecutiveFloorCalling_#t~ret149;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 646336#L2933-16 stopRequestedAtCurrentFloor_#t~ret75 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~16 := stopRequestedAtCurrentFloor_#t~ret75;havoc stopRequestedAtCurrentFloor_#t~ret75; 646337#L2317-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~16;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 730629#L1580-24 stopRequestedAtCurrentFloor_#t~ret76 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret76;havoc stopRequestedAtCurrentFloor_#t~ret76; 730628#L2321-4 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~7);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 645319#L2334-4 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 645320#L2470-8 assume !(0 != timeShift_~tmp___9~2); 648041#L2561-12 assume !(1 == ~doorState~0); 648029#L2561-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~12, stopRequestedInDirection_~tmp___0~4, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~6;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~12;havoc stopRequestedInDirection_~tmp___0~4;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~6;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret149, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 648030#L128-272 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 649699#L155-272 isExecutiveFloorCalling_#t~ret149 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret149;havoc isExecutiveFloorCalling_#t~ret149;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 646299#L2933-17 stopRequestedInDirection_#t~ret66 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4 := stopRequestedInDirection_#t~ret66;havoc stopRequestedInDirection_#t~ret66; 646300#L2172-8 assume 0 != stopRequestedInDirection_~tmp___0~4;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 731497#L1580-27 stopRequestedInDirection_#t~ret67 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~12 := stopRequestedInDirection_#t~ret67;havoc stopRequestedInDirection_#t~ret67;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~6 := (if stopRequestedInDirection_~tmp~12 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~21 := (if stopRequestedInDirection_~__cil_tmp8~6 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 731495#L2185-8 timeShift_#t~ret98 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 731338#L2569-8 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret69, continueInDirection_~dir, continueInDirection_~tmp~13;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~13;~currentHeading~0 := continueInDirection_~dir; 646239#L2229-12 assume !(1 == ~currentHeading~0); 646240#L2239-36 assume !(0 == ~currentFloorID~0); 647026#L2239-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 647027#L2245-25 assume { :end_inline_continueInDirection } true; 648730#L2578-14 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret164, __utac_acc__Specification14_spec__1_#t~ret165, __utac_acc__Specification14_spec__1_#t~ret166, __utac_acc__Specification14_spec__1_#t~ret167, __utac_acc__Specification14_spec__1_~tmp~29, __utac_acc__Specification14_spec__1_~tmp___0~13, __utac_acc__Specification14_spec__1_~tmp___1~8, __utac_acc__Specification14_spec__1_~tmp___2~6;havoc __utac_acc__Specification14_spec__1_~tmp~29;havoc __utac_acc__Specification14_spec__1_~tmp___0~13;havoc __utac_acc__Specification14_spec__1_~tmp___1~8;havoc __utac_acc__Specification14_spec__1_~tmp___2~6;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret149, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 651927#L128-334 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 651928#L155-334 isExecutiveFloorCalling_#t~ret149 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret149;havoc isExecutiveFloorCalling_#t~ret149;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 646304#L2933-19 __utac_acc__Specification14_spec__1_#t~ret164 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~6 := __utac_acc__Specification14_spec__1_#t~ret164;havoc __utac_acc__Specification14_spec__1_#t~ret164; 646305#L3307-8 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~6); 722632#L3307-9 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 646966#L2593-4 assume { :end_inline_timeShift } true;cleanup_~i~3 := 1 + cleanup_~i~3; 646964#L3090-3 [2018-11-18 16:52:01,062 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 16:52:01,062 INFO L82 PathProgramCache]: Analyzing trace with hash -631679951, now seen corresponding path program 1 times [2018-11-18 16:52:01,062 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 16:52:01,062 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 16:52:01,063 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 16:52:01,063 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 16:52:01,063 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 16:52:01,077 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 16:52:01,809 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 16:52:01,810 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 16:52:01,810 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-18 16:52:01,810 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-18 16:52:01,810 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 16:52:01,810 INFO L82 PathProgramCache]: Analyzing trace with hash -1910880877, now seen corresponding path program 1 times [2018-11-18 16:52:01,811 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 16:52:01,811 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 16:52:01,811 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 16:52:01,811 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 16:52:01,811 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 16:52:01,815 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 16:52:01,858 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 16:52:01,858 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 16:52:01,858 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2018-11-18 16:52:01,858 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-18 16:52:01,858 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2018-11-18 16:52:01,859 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=43, Unknown=0, NotChecked=0, Total=56 [2018-11-18 16:52:01,859 INFO L87 Difference]: Start difference. First operand 92563 states and 172184 transitions. cyclomatic complexity: 79623 Second operand 8 states. [2018-11-18 16:52:27,075 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 16:52:27,076 INFO L93 Difference]: Finished difference Result 571348 states and 1059611 transitions. [2018-11-18 16:52:27,076 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 41 states. [2018-11-18 16:52:27,076 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 571348 states and 1059611 transitions. [2018-11-18 16:52:29,227 INFO L131 ngComponentsAnalysis]: Automaton has 6 accepting balls. 158152 [2018-11-18 16:52:30,454 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 571348 states to 571348 states and 1059611 transitions. [2018-11-18 16:52:30,454 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 571348 [2018-11-18 16:52:30,734 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 571348 [2018-11-18 16:52:30,734 INFO L73 IsDeterministic]: Start isDeterministic. Operand 571348 states and 1059611 transitions. [2018-11-18 16:52:30,954 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-18 16:52:30,954 INFO L705 BuchiCegarLoop]: Abstraction has 571348 states and 1059611 transitions. [2018-11-18 16:52:31,189 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 571348 states and 1059611 transitions. [2018-11-18 16:52:32,883 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 571348 to 91749. [2018-11-18 16:52:32,883 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 91749 states. [2018-11-18 16:52:32,990 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 91749 states to 91749 states and 170663 transitions. [2018-11-18 16:52:32,990 INFO L728 BuchiCegarLoop]: Abstraction has 91749 states and 170663 transitions. [2018-11-18 16:52:32,990 INFO L608 BuchiCegarLoop]: Abstraction has 91749 states and 170663 transitions. [2018-11-18 16:52:32,990 INFO L442 BuchiCegarLoop]: ======== Iteration 5============ [2018-11-18 16:52:32,990 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 91749 states and 170663 transitions. [2018-11-18 16:52:33,155 INFO L131 ngComponentsAnalysis]: Automaton has 6 accepting balls. 20660 [2018-11-18 16:52:33,156 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-18 16:52:33,156 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-18 16:52:33,159 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 16:52:33,159 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 16:52:33,160 INFO L794 eck$LassoCheckResult]: Stem: 1310417#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];call #t~string18.base, #t~string18.offset := #Ultimate.alloc(30);call #t~string19.base, #t~string19.offset := #Ultimate.alloc(9);call #t~string20.base, #t~string20.offset := #Ultimate.alloc(21);call #t~string21.base, #t~string21.offset := #Ultimate.alloc(30);call #t~string22.base, #t~string22.offset := #Ultimate.alloc(9);call #t~string23.base, #t~string23.offset := #Ultimate.alloc(21);call #t~string27.base, #t~string27.offset := #Ultimate.alloc(30);call #t~string28.base, #t~string28.offset := #Ultimate.alloc(9);call #t~string29.base, #t~string29.offset := #Ultimate.alloc(25);call #t~string30.base, #t~string30.offset := #Ultimate.alloc(30);call #t~string31.base, #t~string31.offset := #Ultimate.alloc(9);call #t~string32.base, #t~string32.offset := #Ultimate.alloc(25);call #t~string102.base, #t~string102.offset := #Ultimate.alloc(10);call #t~string104.base, #t~string104.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string104.base,#t~string104.offset := 91];#memory_int := #memory_int[#t~string104.base,1 + #t~string104.offset := 95];#memory_int := #memory_int[#t~string104.base,2 + #t~string104.offset := 93];#memory_int := #memory_int[#t~string104.base,3 + #t~string104.offset := 0];call #t~string106.base, #t~string106.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string106.base,#t~string106.offset := 91];#memory_int := #memory_int[#t~string106.base,1 + #t~string106.offset := 93];#memory_int := #memory_int[#t~string106.base,2 + #t~string106.offset := 32];#memory_int := #memory_int[#t~string106.base,3 + #t~string106.offset := 0];call #t~string108.base, #t~string108.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string108.base,#t~string108.offset := 32];#memory_int := #memory_int[#t~string108.base,1 + #t~string108.offset := 97];#memory_int := #memory_int[#t~string108.base,2 + #t~string108.offset := 116];#memory_int := #memory_int[#t~string108.base,3 + #t~string108.offset := 32];#memory_int := #memory_int[#t~string108.base,4 + #t~string108.offset := 0];call #t~string110.base, #t~string110.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string110.base,#t~string110.offset := 37];#memory_int := #memory_int[#t~string110.base,1 + #t~string110.offset := 105];#memory_int := #memory_int[#t~string110.base,2 + #t~string110.offset := 0];call #t~string112.base, #t~string112.offset := #Ultimate.alloc(10);call #t~string114.base, #t~string114.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string114.base,#t~string114.offset := 117];#memory_int := #memory_int[#t~string114.base,1 + #t~string114.offset := 112];#memory_int := #memory_int[#t~string114.base,2 + #t~string114.offset := 0];call #t~string116.base, #t~string116.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string116.base,#t~string116.offset := 100];#memory_int := #memory_int[#t~string116.base,1 + #t~string116.offset := 111];#memory_int := #memory_int[#t~string116.base,2 + #t~string116.offset := 119];#memory_int := #memory_int[#t~string116.base,3 + #t~string116.offset := 110];#memory_int := #memory_int[#t~string116.base,4 + #t~string116.offset := 0];call #t~string118.base, #t~string118.offset := #Ultimate.alloc(7);#memory_int := #memory_int[#t~string118.base,#t~string118.offset := 32];#memory_int := #memory_int[#t~string118.base,1 + #t~string118.offset := 73];#memory_int := #memory_int[#t~string118.base,2 + #t~string118.offset := 76];#memory_int := #memory_int[#t~string118.base,3 + #t~string118.offset := 95];#memory_int := #memory_int[#t~string118.base,4 + #t~string118.offset := 112];#memory_int := #memory_int[#t~string118.base,5 + #t~string118.offset := 58];#memory_int := #memory_int[#t~string118.base,6 + #t~string118.offset := 0];call #t~string120.base, #t~string120.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string120.base,#t~string120.offset := 32];#memory_int := #memory_int[#t~string120.base,1 + #t~string120.offset := 37];#memory_int := #memory_int[#t~string120.base,2 + #t~string120.offset := 105];#memory_int := #memory_int[#t~string120.base,3 + #t~string120.offset := 0];call #t~string122.base, #t~string122.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string122.base,#t~string122.offset := 32];#memory_int := #memory_int[#t~string122.base,1 + #t~string122.offset := 37];#memory_int := #memory_int[#t~string122.base,2 + #t~string122.offset := 105];#memory_int := #memory_int[#t~string122.base,3 + #t~string122.offset := 0];call #t~string124.base, #t~string124.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string124.base,#t~string124.offset := 32];#memory_int := #memory_int[#t~string124.base,1 + #t~string124.offset := 37];#memory_int := #memory_int[#t~string124.base,2 + #t~string124.offset := 105];#memory_int := #memory_int[#t~string124.base,3 + #t~string124.offset := 0];call #t~string126.base, #t~string126.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string126.base,#t~string126.offset := 32];#memory_int := #memory_int[#t~string126.base,1 + #t~string126.offset := 37];#memory_int := #memory_int[#t~string126.base,2 + #t~string126.offset := 105];#memory_int := #memory_int[#t~string126.base,3 + #t~string126.offset := 0];call #t~string128.base, #t~string128.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string128.base,#t~string128.offset := 32];#memory_int := #memory_int[#t~string128.base,1 + #t~string128.offset := 37];#memory_int := #memory_int[#t~string128.base,2 + #t~string128.offset := 105];#memory_int := #memory_int[#t~string128.base,3 + #t~string128.offset := 0];call #t~string130.base, #t~string130.offset := #Ultimate.alloc(6);#memory_int := #memory_int[#t~string130.base,#t~string130.offset := 32];#memory_int := #memory_int[#t~string130.base,1 + #t~string130.offset := 70];#memory_int := #memory_int[#t~string130.base,2 + #t~string130.offset := 95];#memory_int := #memory_int[#t~string130.base,3 + #t~string130.offset := 112];#memory_int := #memory_int[#t~string130.base,4 + #t~string130.offset := 58];#memory_int := #memory_int[#t~string130.base,5 + #t~string130.offset := 0];call #t~string133.base, #t~string133.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string133.base,#t~string133.offset := 32];#memory_int := #memory_int[#t~string133.base,1 + #t~string133.offset := 37];#memory_int := #memory_int[#t~string133.base,2 + #t~string133.offset := 105];#memory_int := #memory_int[#t~string133.base,3 + #t~string133.offset := 0];call #t~string136.base, #t~string136.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string136.base,#t~string136.offset := 32];#memory_int := #memory_int[#t~string136.base,1 + #t~string136.offset := 37];#memory_int := #memory_int[#t~string136.base,2 + #t~string136.offset := 105];#memory_int := #memory_int[#t~string136.base,3 + #t~string136.offset := 0];call #t~string139.base, #t~string139.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string139.base,#t~string139.offset := 32];#memory_int := #memory_int[#t~string139.base,1 + #t~string139.offset := 37];#memory_int := #memory_int[#t~string139.base,2 + #t~string139.offset := 105];#memory_int := #memory_int[#t~string139.base,3 + #t~string139.offset := 0];call #t~string142.base, #t~string142.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string142.base,#t~string142.offset := 32];#memory_int := #memory_int[#t~string142.base,1 + #t~string142.offset := 37];#memory_int := #memory_int[#t~string142.base,2 + #t~string142.offset := 105];#memory_int := #memory_int[#t~string142.base,3 + #t~string142.offset := 0];call #t~string145.base, #t~string145.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string145.base,#t~string145.offset := 32];#memory_int := #memory_int[#t~string145.base,1 + #t~string145.offset := 37];#memory_int := #memory_int[#t~string145.base,2 + #t~string145.offset := 105];#memory_int := #memory_int[#t~string145.base,3 + #t~string145.offset := 0];call #t~string147.base, #t~string147.offset := #Ultimate.alloc(2);#memory_int := #memory_int[#t~string147.base,#t~string147.offset := 10];#memory_int := #memory_int[#t~string147.base,1 + #t~string147.offset := 0];~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 1310418#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res;havoc main_#t~ret163, main_~retValue_acc~31, main_~tmp~28;havoc main_~retValue_acc~31;havoc main_~tmp~28;assume { :begin_inline_select_helpers } true; 1315222#L1199 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1314318#L1192 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res;havoc valid_product_~retValue_acc~7;havoc valid_product_~retValue_acc~7;valid_product_~retValue_acc~7 := 1;valid_product_#res := valid_product_~retValue_acc~7; 1312587#L1207 main_#t~ret163 := valid_product_#res;assume { :end_inline_valid_product } true;main_~tmp~28 := main_#t~ret163;havoc main_#t~ret163; 1310204#L3282 assume 0 != main_~tmp~28;assume { :begin_inline_setup } true; 1310205#L3258 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret156, bigMacCall_~tmp~25;havoc bigMacCall_~tmp~25;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~9;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~9; 1311448#L1257 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~9 := 4;getOrigin_#res := getOrigin_~retValue_acc~9; 1309143#L1282 bigMacCall_#t~ret156 := getOrigin_#res;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~25 := bigMacCall_#t~ret156;havoc bigMacCall_#t~ret156;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~25;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 1309144#L399 assume 0 == initPersonOnFloor_~floor; 1308970#L400 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 1308097#L507-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 1312187#L191 assume !(0 == callOnFloor_~floorID); 1316146#L194 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 1315624#L203-2 assume { :end_inline_callOnFloor } true; 1315625#L543 assume { :end_inline_initPersonOnFloor } true; 1307602#L3063 assume { :end_inline_bigMacCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~18, timeShift_~tmp___0~9, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~18;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret75, stopRequestedAtCurrentFloor_#t~ret76, stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~16, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~16;havoc stopRequestedAtCurrentFloor_~tmp___0~7;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret149, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1307603#L128 assume !(0 == isFloorCalling_~floorID); 1314561#L132 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1313702#L155 isExecutiveFloorCalling_#t~ret149 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret149;havoc isExecutiveFloorCalling_#t~ret149;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 1317024#L2933 stopRequestedAtCurrentFloor_#t~ret75 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~16 := stopRequestedAtCurrentFloor_#t~ret75;havoc stopRequestedAtCurrentFloor_#t~ret75; 1317025#L2317 assume 0 != stopRequestedAtCurrentFloor_~tmp~16;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 1313023#L1580 stopRequestedAtCurrentFloor_#t~ret76 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret76;havoc stopRequestedAtCurrentFloor_#t~ret76; 1313024#L2321 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~7);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 1321154#L2334 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 1321151#L2470 assume !(0 != timeShift_~tmp___9~2); 1321150#L2561 assume !(1 == ~doorState~0); 1317037#L2561-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~12, stopRequestedInDirection_~tmp___0~4, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~6;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~12;havoc stopRequestedInDirection_~tmp___0~4;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~6;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret149, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1317038#L128-3 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1320712#L155-3 isExecutiveFloorCalling_#t~ret149 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret149;havoc isExecutiveFloorCalling_#t~ret149;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 1320711#L2933-1 stopRequestedInDirection_#t~ret66 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4 := stopRequestedInDirection_#t~ret66;havoc stopRequestedInDirection_#t~ret66; 1320709#L2172 assume 0 != stopRequestedInDirection_~tmp___0~4;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 1320710#L1580-3 stopRequestedInDirection_#t~ret67 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~12 := stopRequestedInDirection_#t~ret67;havoc stopRequestedInDirection_#t~ret67;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~6 := (if stopRequestedInDirection_~tmp~12 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~21 := (if stopRequestedInDirection_~__cil_tmp8~6 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 1330160#L2185 timeShift_#t~ret98 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 1329759#L2569 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret69, continueInDirection_~dir, continueInDirection_~tmp~13;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~13;~currentHeading~0 := continueInDirection_~dir; 1329760#L2229 assume !(1 == ~currentHeading~0); 1330394#L2239 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1330390#L2239-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1328834#L2245-1 assume { :end_inline_continueInDirection } true; 1310195#L2578-2 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret164, __utac_acc__Specification14_spec__1_#t~ret165, __utac_acc__Specification14_spec__1_#t~ret166, __utac_acc__Specification14_spec__1_#t~ret167, __utac_acc__Specification14_spec__1_~tmp~29, __utac_acc__Specification14_spec__1_~tmp___0~13, __utac_acc__Specification14_spec__1_~tmp___1~8, __utac_acc__Specification14_spec__1_~tmp___2~6;havoc __utac_acc__Specification14_spec__1_~tmp~29;havoc __utac_acc__Specification14_spec__1_~tmp___0~13;havoc __utac_acc__Specification14_spec__1_~tmp___1~8;havoc __utac_acc__Specification14_spec__1_~tmp___2~6;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret149, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1310196#L128-65 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1343517#L155-65 isExecutiveFloorCalling_#t~ret149 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret149;havoc isExecutiveFloorCalling_#t~ret149;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 1343515#L2933-3 __utac_acc__Specification14_spec__1_#t~ret164 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~6 := __utac_acc__Specification14_spec__1_#t~ret164;havoc __utac_acc__Specification14_spec__1_#t~ret164; 1343503#L3307 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~6); 1343499#L3307-1 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 1343495#L2593 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~18, timeShift_~tmp___0~9, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~18;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret75, stopRequestedAtCurrentFloor_#t~ret76, stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~16, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~16;havoc stopRequestedAtCurrentFloor_~tmp___0~7;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret149, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1314508#L128-66 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1314509#L155-66 isExecutiveFloorCalling_#t~ret149 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret149;havoc isExecutiveFloorCalling_#t~ret149;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 1346030#L2933-4 stopRequestedAtCurrentFloor_#t~ret75 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~16 := stopRequestedAtCurrentFloor_#t~ret75;havoc stopRequestedAtCurrentFloor_#t~ret75; 1346029#L2317-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~16);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret72, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret73, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret74, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~24, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~15, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~6, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~24;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~15;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~6;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4 := (if stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2 < 0 && 0 != stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2 % 3 then 1 + stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2 / 3 else stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2 / 3); 1346027#L2291-3 assume ~weight~0 > stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 1346026#L1580-8 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret72 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~15 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret72;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret72;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~15;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~14;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~14; 1346025#L1597-6 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~14 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~14; 1346019#L1618-6 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret73 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~6 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret73;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret73;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~24 := (if 1 == stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~6 then 1 else 0);stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~24; 1346018#L2302-3 stopRequestedAtCurrentFloor_#t~ret78 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;stopRequestedAtCurrentFloor_~retValue_acc~25 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 1346017#L2334-1 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 1346015#L2470-2 assume !(0 != timeShift_~tmp___9~2); 1346014#L2561-3 assume !(1 == ~doorState~0); 1346012#L2561-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~12, stopRequestedInDirection_~tmp___0~4, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~6;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~12;havoc stopRequestedInDirection_~tmp___0~4;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~6;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret149, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1346011#L128-69 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1346008#L155-69 isExecutiveFloorCalling_#t~ret149 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret149;havoc isExecutiveFloorCalling_#t~ret149;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 1346007#L2933-5 stopRequestedInDirection_#t~ret66 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4 := stopRequestedInDirection_#t~ret66;havoc stopRequestedInDirection_#t~ret66; 1346005#L2172-2 assume 0 != stopRequestedInDirection_~tmp___0~4;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 1346004#L1580-9 stopRequestedInDirection_#t~ret67 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~12 := stopRequestedInDirection_#t~ret67;havoc stopRequestedInDirection_#t~ret67;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~6 := (if stopRequestedInDirection_~tmp~12 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~21 := (if stopRequestedInDirection_~__cil_tmp8~6 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 1345996#L2185-2 timeShift_#t~ret98 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 1343766#L2569-2 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret69, continueInDirection_~dir, continueInDirection_~tmp~13;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~13;~currentHeading~0 := continueInDirection_~dir; 1343457#L2229-3 assume !(1 == ~currentHeading~0); 1343323#L2239-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1343309#L2239-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1343292#L2245-7 assume { :end_inline_continueInDirection } true; 1342930#L2578-5 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret164, __utac_acc__Specification14_spec__1_#t~ret165, __utac_acc__Specification14_spec__1_#t~ret166, __utac_acc__Specification14_spec__1_#t~ret167, __utac_acc__Specification14_spec__1_~tmp~29, __utac_acc__Specification14_spec__1_~tmp___0~13, __utac_acc__Specification14_spec__1_~tmp___1~8, __utac_acc__Specification14_spec__1_~tmp___2~6;havoc __utac_acc__Specification14_spec__1_~tmp~29;havoc __utac_acc__Specification14_spec__1_~tmp___0~13;havoc __utac_acc__Specification14_spec__1_~tmp___1~8;havoc __utac_acc__Specification14_spec__1_~tmp___2~6;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret149, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1342926#L128-131 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1342925#L155-131 isExecutiveFloorCalling_#t~ret149 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret149;havoc isExecutiveFloorCalling_#t~ret149;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 1342924#L2933-7 __utac_acc__Specification14_spec__1_#t~ret164 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~6 := __utac_acc__Specification14_spec__1_#t~ret164;havoc __utac_acc__Specification14_spec__1_#t~ret164; 1342919#L3307-2 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~6); 1342918#L3307-3 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 1342917#L2593-1 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~18, timeShift_~tmp___0~9, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~18;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret75, stopRequestedAtCurrentFloor_#t~ret76, stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~16, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~16;havoc stopRequestedAtCurrentFloor_~tmp___0~7;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret149, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1314531#L128-132 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1314532#L155-132 isExecutiveFloorCalling_#t~ret149 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret149;havoc isExecutiveFloorCalling_#t~ret149;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 1343392#L2933-8 stopRequestedAtCurrentFloor_#t~ret75 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~16 := stopRequestedAtCurrentFloor_#t~ret75;havoc stopRequestedAtCurrentFloor_#t~ret75; 1343391#L2317-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~16);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret72, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret73, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret74, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~24, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~15, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~6, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~24;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~15;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~6;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4 := (if stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2 < 0 && 0 != stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2 % 3 then 1 + stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2 / 3 else stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~2 / 3); 1343389#L2291-5 assume ~weight~0 > stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 1343388#L1580-14 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret72 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~15 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret72;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret72;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~15;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~14;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~14; 1343387#L1597-10 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~14 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~14; 1343381#L1618-10 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret73 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~6 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret73;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret73;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~24 := (if 1 == stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~6 then 1 else 0);stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~24; 1343380#L2302-5 stopRequestedAtCurrentFloor_#t~ret78 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;stopRequestedAtCurrentFloor_~retValue_acc~25 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 1343379#L2334-2 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 1343377#L2470-4 assume !(0 != timeShift_~tmp___9~2); 1343376#L2561-6 assume !(1 == ~doorState~0); 1343374#L2561-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~12, stopRequestedInDirection_~tmp___0~4, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~6;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~12;havoc stopRequestedInDirection_~tmp___0~4;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~6;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret149, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1343373#L128-135 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1343371#L155-135 isExecutiveFloorCalling_#t~ret149 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret149;havoc isExecutiveFloorCalling_#t~ret149;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 1343370#L2933-9 stopRequestedInDirection_#t~ret66 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4 := stopRequestedInDirection_#t~ret66;havoc stopRequestedInDirection_#t~ret66; 1343368#L2172-4 assume 0 != stopRequestedInDirection_~tmp___0~4;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 1343367#L1580-15 stopRequestedInDirection_#t~ret67 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~12 := stopRequestedInDirection_#t~ret67;havoc stopRequestedInDirection_#t~ret67;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~6 := (if stopRequestedInDirection_~tmp~12 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~21 := (if stopRequestedInDirection_~__cil_tmp8~6 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 1343363#L2185-4 timeShift_#t~ret98 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 1343359#L2569-4 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret69, continueInDirection_~dir, continueInDirection_~tmp~13;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~13;~currentHeading~0 := continueInDirection_~dir; 1343342#L2229-6 assume !(1 == ~currentHeading~0); 1343330#L2239-18 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1343315#L2239-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1342363#L2245-13 assume { :end_inline_continueInDirection } true; 1334941#L2578-8 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret164, __utac_acc__Specification14_spec__1_#t~ret165, __utac_acc__Specification14_spec__1_#t~ret166, __utac_acc__Specification14_spec__1_#t~ret167, __utac_acc__Specification14_spec__1_~tmp~29, __utac_acc__Specification14_spec__1_~tmp___0~13, __utac_acc__Specification14_spec__1_~tmp___1~8, __utac_acc__Specification14_spec__1_~tmp___2~6;havoc __utac_acc__Specification14_spec__1_~tmp~29;havoc __utac_acc__Specification14_spec__1_~tmp___0~13;havoc __utac_acc__Specification14_spec__1_~tmp___1~8;havoc __utac_acc__Specification14_spec__1_~tmp___2~6;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret149, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1334940#L128-197 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1320262#L155-197 isExecutiveFloorCalling_#t~ret149 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret149;havoc isExecutiveFloorCalling_#t~ret149;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 1334939#L2933-11 __utac_acc__Specification14_spec__1_#t~ret164 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~6 := __utac_acc__Specification14_spec__1_#t~ret164;havoc __utac_acc__Specification14_spec__1_#t~ret164; 1334933#L3307-4 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~6); 1334932#L3307-5 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 1334931#L2593-2 assume { :end_inline_timeShift } true; 1334930#L3075 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret151, bobCall_~tmp~20;havoc bobCall_~tmp~20;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~9;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~9; 1334929#L1257-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~9 := 4;getOrigin_#res := getOrigin_~retValue_acc~9; 1334923#L1282-1 bobCall_#t~ret151 := getOrigin_#res;assume { :end_inline_getOrigin } true;bobCall_~tmp~20 := bobCall_#t~ret151;havoc bobCall_#t~ret151;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~20;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 1334922#L399-1 assume 0 == initPersonOnFloor_~floor; 1334886#L400-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 1320198#L507-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 1320199#L191-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 1334399#L203-5 assume { :end_inline_callOnFloor } true; 1331108#L543-1 assume { :end_inline_initPersonOnFloor } true; 1330992#L3008 assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret157, cleanup_#t~ret158, cleanup_~i~3, cleanup_~tmp~26, cleanup_~tmp___0~11, cleanup_~__cil_tmp4~3;havoc cleanup_~i~3;havoc cleanup_~tmp~26;havoc cleanup_~tmp___0~11;havoc cleanup_~__cil_tmp4~3;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~18, timeShift_~tmp___0~9, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~18;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret75, stopRequestedAtCurrentFloor_#t~ret76, stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~16, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~16;havoc stopRequestedAtCurrentFloor_~tmp___0~7;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret149, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1318974#L128-198 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1318975#L155-198 isExecutiveFloorCalling_#t~ret149 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret149;havoc isExecutiveFloorCalling_#t~ret149;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 1323770#L2933-12 stopRequestedAtCurrentFloor_#t~ret75 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~16 := stopRequestedAtCurrentFloor_#t~ret75;havoc stopRequestedAtCurrentFloor_#t~ret75; 1323771#L2317-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~16;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 1323765#L1580-18 stopRequestedAtCurrentFloor_#t~ret76 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret76;havoc stopRequestedAtCurrentFloor_#t~ret76; 1323766#L2321-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~7);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 1323755#L2334-3 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 1323756#L2470-6 assume !(0 != timeShift_~tmp___9~2); 1330987#L2561-9 assume !(1 == ~doorState~0); 1330986#L2561-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~12, stopRequestedInDirection_~tmp___0~4, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~6;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~12;havoc stopRequestedInDirection_~tmp___0~4;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~6;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret149, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1330985#L128-201 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1330984#L155-201 isExecutiveFloorCalling_#t~ret149 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret149;havoc isExecutiveFloorCalling_#t~ret149;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 1330983#L2933-13 stopRequestedInDirection_#t~ret66 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4 := stopRequestedInDirection_#t~ret66;havoc stopRequestedInDirection_#t~ret66; 1330981#L2172-6 assume 0 != stopRequestedInDirection_~tmp___0~4;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 1330979#L1580-21 stopRequestedInDirection_#t~ret67 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~12 := stopRequestedInDirection_#t~ret67;havoc stopRequestedInDirection_#t~ret67;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~6 := (if stopRequestedInDirection_~tmp~12 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~21 := (if stopRequestedInDirection_~__cil_tmp8~6 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 1330962#L2185-6 timeShift_#t~ret98 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 1330943#L2569-6 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret69, continueInDirection_~dir, continueInDirection_~tmp~13;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~13;~currentHeading~0 := continueInDirection_~dir; 1330925#L2229-9 assume !(1 == ~currentHeading~0); 1330922#L2239-27 assume !(0 == ~currentFloorID~0); 1330919#L2239-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1330918#L2245-19 assume { :end_inline_continueInDirection } true; 1375718#L2578-11 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret164, __utac_acc__Specification14_spec__1_#t~ret165, __utac_acc__Specification14_spec__1_#t~ret166, __utac_acc__Specification14_spec__1_#t~ret167, __utac_acc__Specification14_spec__1_~tmp~29, __utac_acc__Specification14_spec__1_~tmp___0~13, __utac_acc__Specification14_spec__1_~tmp___1~8, __utac_acc__Specification14_spec__1_~tmp___2~6;havoc __utac_acc__Specification14_spec__1_~tmp~29;havoc __utac_acc__Specification14_spec__1_~tmp___0~13;havoc __utac_acc__Specification14_spec__1_~tmp___1~8;havoc __utac_acc__Specification14_spec__1_~tmp___2~6;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret149, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1322960#L128-263 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1322961#L155-263 isExecutiveFloorCalling_#t~ret149 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret149;havoc isExecutiveFloorCalling_#t~ret149;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 1322956#L2933-15 __utac_acc__Specification14_spec__1_#t~ret164 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~6 := __utac_acc__Specification14_spec__1_#t~ret164;havoc __utac_acc__Specification14_spec__1_#t~ret164; 1322957#L3307-6 assume 0 != __utac_acc__Specification14_spec__1_~tmp___2~6;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 1322952#L1580-23 __utac_acc__Specification14_spec__1_#t~ret165 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification14_spec__1_~tmp~29 := __utac_acc__Specification14_spec__1_#t~ret165;havoc __utac_acc__Specification14_spec__1_#t~ret165;assume { :begin_inline_isExecutiveFloor } true;isExecutiveFloor_#in~floorID := __utac_acc__Specification14_spec__1_~tmp~29;havoc isExecutiveFloor_#res;havoc isExecutiveFloor_~floorID, isExecutiveFloor_~retValue_acc~29;isExecutiveFloor_~floorID := isExecutiveFloor_#in~floorID;havoc isExecutiveFloor_~retValue_acc~29;isExecutiveFloor_~retValue_acc~29 := (if ~executiveFloor~0 == isExecutiveFloor_~floorID then 1 else 0);isExecutiveFloor_#res := isExecutiveFloor_~retValue_acc~29; 1322953#L2942-3 __utac_acc__Specification14_spec__1_#t~ret166 := isExecutiveFloor_#res;assume { :end_inline_isExecutiveFloor } true;__utac_acc__Specification14_spec__1_~tmp___0~13 := __utac_acc__Specification14_spec__1_#t~ret166;havoc __utac_acc__Specification14_spec__1_#t~ret166; 1322946#L3312-6 assume 0 != __utac_acc__Specification14_spec__1_~tmp___0~13; 1322945#L3307-7 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 1322941#L2593-3 assume { :end_inline_timeShift } true;cleanup_~i~3 := 0; 1322891#L3090-3 [2018-11-18 16:52:33,160 INFO L796 eck$LassoCheckResult]: Loop: 1322891#L3090-3 assume true; 1322892#L3090-1 assume !false; 1322883#L3091 cleanup_~__cil_tmp4~3 := ~cleanupTimeShifts~0 - 1; 1322884#L3094 assume cleanup_~i~3 < cleanup_~__cil_tmp4~3;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~11;havoc isBlocked_~retValue_acc~11;isBlocked_~retValue_acc~11 := 0;isBlocked_#res := isBlocked_~retValue_acc~11; 1322875#L1407 cleanup_#t~ret157 := isBlocked_#res;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~11 := cleanup_#t~ret157;havoc cleanup_#t~ret157; 1322876#L3098 assume 1 != cleanup_~tmp___0~11; 1321757#L3098-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res;havoc isIdle_#t~ret50, isIdle_~retValue_acc~18, isIdle_~tmp~9;havoc isIdle_~retValue_acc~18;havoc isIdle_~tmp~9;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret45, anyStopRequested_#t~ret46, anyStopRequested_#t~ret47, anyStopRequested_#t~ret48, anyStopRequested_#t~ret49, anyStopRequested_~retValue_acc~17, anyStopRequested_~tmp~8, anyStopRequested_~tmp___0~2, anyStopRequested_~tmp___1~2, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~17;havoc anyStopRequested_~tmp~8;havoc anyStopRequested_~tmp___0~2;havoc anyStopRequested_~tmp___1~2;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1321758#L128-264 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1321749#L155-264 anyStopRequested_#t~ret45 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret45;havoc anyStopRequested_#t~ret45; 1321750#L1688 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~17 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~17; 1321741#L1752 isIdle_#t~ret50 := anyStopRequested_#res;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~9 := isIdle_#t~ret50;havoc isIdle_#t~ret50;isIdle_~retValue_acc~18 := (if 0 == isIdle_~tmp~9 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~18; 1321742#L1765 cleanup_#t~ret158 := isIdle_#res;assume { :end_inline_isIdle } true;cleanup_~tmp~26 := cleanup_#t~ret158;havoc cleanup_#t~ret158; 1321715#L3110 assume !(0 != cleanup_~tmp~26);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~18, timeShift_~tmp___0~9, timeShift_~tmp___1~5, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~18;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~5;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret75, stopRequestedAtCurrentFloor_#t~ret76, stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~16, stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~16;havoc stopRequestedAtCurrentFloor_~tmp___0~7;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret149, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1321716#L128-269 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1324646#L155-269 isExecutiveFloorCalling_#t~ret149 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret149;havoc isExecutiveFloorCalling_#t~ret149;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 1324647#L2933-16 stopRequestedAtCurrentFloor_#t~ret75 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~16 := stopRequestedAtCurrentFloor_#t~ret75;havoc stopRequestedAtCurrentFloor_#t~ret75; 1324641#L2317-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~16;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 1324643#L1580-24 stopRequestedAtCurrentFloor_#t~ret76 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret76;havoc stopRequestedAtCurrentFloor_#t~ret76; 1324637#L2321-4 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~7);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 1316332#L2334-4 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 1324626#L2470-8 assume !(0 != timeShift_~tmp___9~2); 1324628#L2561-12 assume !(1 == ~doorState~0); 1382535#L2561-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~12, stopRequestedInDirection_~tmp___0~4, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~6;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~12;havoc stopRequestedInDirection_~tmp___0~4;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~6;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret149, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1382534#L128-272 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1382533#L155-272 isExecutiveFloorCalling_#t~ret149 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret149;havoc isExecutiveFloorCalling_#t~ret149;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 1382532#L2933-17 stopRequestedInDirection_#t~ret66 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4 := stopRequestedInDirection_#t~ret66;havoc stopRequestedInDirection_#t~ret66; 1382530#L2172-8 assume 0 != stopRequestedInDirection_~tmp___0~4;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 1382528#L1580-27 stopRequestedInDirection_#t~ret67 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~12 := stopRequestedInDirection_#t~ret67;havoc stopRequestedInDirection_#t~ret67;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~6 := (if stopRequestedInDirection_~tmp~12 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~21 := (if stopRequestedInDirection_~__cil_tmp8~6 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 1382527#L2185-8 timeShift_#t~ret98 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 1382494#L2569-8 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret69, continueInDirection_~dir, continueInDirection_~tmp~13;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~13;~currentHeading~0 := continueInDirection_~dir; 1375645#L2229-12 assume !(1 == ~currentHeading~0); 1375638#L2239-36 assume !(0 == ~currentFloorID~0); 1375628#L2239-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1375627#L2245-25 assume { :end_inline_continueInDirection } true; 1370632#L2578-14 assume { :begin_inline___utac_acc__Specification14_spec__1 } true;havoc __utac_acc__Specification14_spec__1_#t~ret164, __utac_acc__Specification14_spec__1_#t~ret165, __utac_acc__Specification14_spec__1_#t~ret166, __utac_acc__Specification14_spec__1_#t~ret167, __utac_acc__Specification14_spec__1_~tmp~29, __utac_acc__Specification14_spec__1_~tmp___0~13, __utac_acc__Specification14_spec__1_~tmp___1~8, __utac_acc__Specification14_spec__1_~tmp___2~6;havoc __utac_acc__Specification14_spec__1_~tmp~29;havoc __utac_acc__Specification14_spec__1_~tmp___0~13;havoc __utac_acc__Specification14_spec__1_~tmp___1~8;havoc __utac_acc__Specification14_spec__1_~tmp___2~6;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret149, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1370633#L128-334 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1323004#L155-334 isExecutiveFloorCalling_#t~ret149 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret149;havoc isExecutiveFloorCalling_#t~ret149;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 1323005#L2933-19 __utac_acc__Specification14_spec__1_#t~ret164 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;__utac_acc__Specification14_spec__1_~tmp___2~6 := __utac_acc__Specification14_spec__1_#t~ret164;havoc __utac_acc__Specification14_spec__1_#t~ret164; 1322995#L3307-8 assume 0 != __utac_acc__Specification14_spec__1_~tmp___2~6;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 1322996#L1580-29 __utac_acc__Specification14_spec__1_#t~ret165 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification14_spec__1_~tmp~29 := __utac_acc__Specification14_spec__1_#t~ret165;havoc __utac_acc__Specification14_spec__1_#t~ret165;assume { :begin_inline_isExecutiveFloor } true;isExecutiveFloor_#in~floorID := __utac_acc__Specification14_spec__1_~tmp~29;havoc isExecutiveFloor_#res;havoc isExecutiveFloor_~floorID, isExecutiveFloor_~retValue_acc~29;isExecutiveFloor_~floorID := isExecutiveFloor_#in~floorID;havoc isExecutiveFloor_~retValue_acc~29;isExecutiveFloor_~retValue_acc~29 := (if ~executiveFloor~0 == isExecutiveFloor_~floorID then 1 else 0);isExecutiveFloor_#res := isExecutiveFloor_~retValue_acc~29; 1322984#L2942-4 __utac_acc__Specification14_spec__1_#t~ret166 := isExecutiveFloor_#res;assume { :end_inline_isExecutiveFloor } true;__utac_acc__Specification14_spec__1_~tmp___0~13 := __utac_acc__Specification14_spec__1_#t~ret166;havoc __utac_acc__Specification14_spec__1_#t~ret166; 1322985#L3312-8 assume 0 != __utac_acc__Specification14_spec__1_~tmp___0~13; 1322969#L3307-9 assume { :end_inline___utac_acc__Specification14_spec__1 } true; 1322940#L2593-4 assume { :end_inline_timeShift } true;cleanup_~i~3 := 1 + cleanup_~i~3; 1322891#L3090-3 [2018-11-18 16:52:33,166 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 16:52:33,166 INFO L82 PathProgramCache]: Analyzing trace with hash 1406789946, now seen corresponding path program 1 times [2018-11-18 16:52:33,166 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 16:52:33,167 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 16:52:33,167 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 16:52:33,167 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 16:52:33,167 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 16:52:33,179 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 16:52:33,951 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 16:52:33,951 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 16:52:33,951 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-18 16:52:33,952 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-18 16:52:33,952 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 16:52:33,952 INFO L82 PathProgramCache]: Analyzing trace with hash -1360095927, now seen corresponding path program 1 times [2018-11-18 16:52:33,952 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 16:52:33,952 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 16:52:33,953 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 16:52:33,953 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 16:52:33,953 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 16:52:33,959 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2018-11-18 16:52:33,966 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2018-11-18 16:52:35,429 WARN L180 SmtUtils]: Spent 1.44 s on a formula simplification. DAG size of input: 191 DAG size of output: 171 [2018-11-18 16:52:35,911 WARN L180 SmtUtils]: Spent 450.00 ms on a formula simplification. DAG size of input: 151 DAG size of output: 121 [2018-11-18 16:52:35,918 INFO L216 LassoAnalysis]: Preferences: [2018-11-18 16:52:35,919 INFO L124 ssoRankerPreferences]: Compute integeral hull: false [2018-11-18 16:52:35,919 INFO L125 ssoRankerPreferences]: Enable LassoPartitioneer: true [2018-11-18 16:52:35,919 INFO L126 ssoRankerPreferences]: Term annotations enabled: false [2018-11-18 16:52:35,920 INFO L127 ssoRankerPreferences]: Use exernal solver: true [2018-11-18 16:52:35,920 INFO L128 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 16:52:35,920 INFO L129 ssoRankerPreferences]: Dump SMT script to file: false [2018-11-18 16:52:35,920 INFO L130 ssoRankerPreferences]: Path of dumped script: [2018-11-18 16:52:35,920 INFO L131 ssoRankerPreferences]: Filename of dumped script: elevator_spec14_product31_true-unreach-call_true-termination.cil.c_Iteration5_Loop [2018-11-18 16:52:35,920 INFO L132 ssoRankerPreferences]: MapElimAlgo: Frank [2018-11-18 16:52:35,920 INFO L282 LassoAnalysis]: Starting lasso preprocessing... [2018-11-18 16:52:35,938 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 16:52:35,946 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 16:52:35,947 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 16:52:35,949 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 16:52:35,951 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 16:52:35,953 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 16:52:35,954 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 16:52:35,956 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 16:52:35,959 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 16:52:35,961 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 16:52:35,963 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 16:52:35,964 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 16:52:35,965 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 16:52:35,971 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 16:52:35,977 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 16:52:35,980 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 16:52:35,981 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 16:52:35,982 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 16:52:35,983 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 16:52:35,984 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 16:52:35,985 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 16:52:35,992 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 16:52:35,993 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 16:52:35,995 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 16:52:35,998 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 16:52:36,006 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 16:52:36,008 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 16:52:36,010 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 16:52:36,012 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 16:52:36,014 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 16:52:36,016 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 16:52:36,017 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 16:52:36,019 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 16:52:36,021 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 16:52:36,030 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 16:52:36,031 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 16:52:36,036 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 16:52:36,037 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 16:52:36,039 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 16:52:36,040 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 16:52:36,044 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 16:52:36,055 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 16:52:36,056 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 16:52:36,058 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 16:52:36,062 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 16:52:36,063 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 16:52:36,065 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 16:52:36,066 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 16:52:36,067 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 16:52:36,070 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 16:52:36,073 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 16:52:36,075 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 16:52:36,076 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 16:52:36,077 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 16:52:36,082 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 16:52:36,083 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 16:52:36,089 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 16:52:36,091 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 16:52:36,092 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 16:52:36,094 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 16:52:36,105 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 16:52:36,109 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 16:52:36,110 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 16:52:36,111 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 16:52:36,476 INFO L300 LassoAnalysis]: Preprocessing complete. [2018-11-18 16:52:36,477 INFO L412 LassoAnalysis]: Checking for nontermination... No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_2f012cc8-9a3e-4900-b054-f09b41e9aa8b/bin-2019/uautomizer/z3 Starting monitored process 2 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 2 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 16:52:36,483 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 16:52:36,483 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 16:52:36,488 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 16:52:36,488 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_cleanup_#t~ret157=0} Honda state: {ULTIMATE.start_cleanup_#t~ret157=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_2f012cc8-9a3e-4900-b054-f09b41e9aa8b/bin-2019/uautomizer/z3 Starting monitored process 3 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 3 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 16:52:36,505 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 16:52:36,506 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 16:52:36,508 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 16:52:36,508 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification14_spec__1_#t~ret167=0} Honda state: {ULTIMATE.start___utac_acc__Specification14_spec__1_#t~ret167=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_2f012cc8-9a3e-4900-b054-f09b41e9aa8b/bin-2019/uautomizer/z3 Starting monitored process 4 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 4 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 16:52:36,527 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 16:52:36,527 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 16:52:36,529 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 16:52:36,529 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedAtCurrentFloor_#t~ret78=0} Honda state: {ULTIMATE.start_stopRequestedAtCurrentFloor_#t~ret78=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_2f012cc8-9a3e-4900-b054-f09b41e9aa8b/bin-2019/uautomizer/z3 Starting monitored process 5 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 5 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 16:52:36,554 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 16:52:36,555 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 16:52:36,557 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 16:52:36,557 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_#t~ret66=0} Honda state: {ULTIMATE.start_stopRequestedInDirection_#t~ret66=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_2f012cc8-9a3e-4900-b054-f09b41e9aa8b/bin-2019/uautomizer/z3 Starting monitored process 6 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 6 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 16:52:36,583 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 16:52:36,583 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 16:52:36,586 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 16:52:36,586 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_anyStopRequested_~tmp___1~2=0} Honda state: {ULTIMATE.start_anyStopRequested_~tmp___1~2=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_2f012cc8-9a3e-4900-b054-f09b41e9aa8b/bin-2019/uautomizer/z3 Starting monitored process 7 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 7 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 16:52:36,604 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 16:52:36,604 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 16:52:36,606 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 16:52:36,607 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret100=0} Honda state: {ULTIMATE.start_timeShift_#t~ret100=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_2f012cc8-9a3e-4900-b054-f09b41e9aa8b/bin-2019/uautomizer/z3 Starting monitored process 8 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 8 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 16:52:36,631 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 16:52:36,631 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 16:52:36,633 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 16:52:36,633 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_isFloorCalling_~floorID=0} Honda state: {ULTIMATE.start_isFloorCalling_~floorID=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_2f012cc8-9a3e-4900-b054-f09b41e9aa8b/bin-2019/uautomizer/z3 Starting monitored process 9 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 9 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 16:52:36,662 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 16:52:36,662 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 16:52:36,664 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 16:52:36,664 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret99=0} Honda state: {ULTIMATE.start_timeShift_#t~ret99=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_2f012cc8-9a3e-4900-b054-f09b41e9aa8b/bin-2019/uautomizer/z3 Starting monitored process 10 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 10 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 16:52:36,681 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 16:52:36,681 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 16:52:36,683 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 16:52:36,683 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification14_spec__1_~tmp___1~8=0} Honda state: {ULTIMATE.start___utac_acc__Specification14_spec__1_~tmp___1~8=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_2f012cc8-9a3e-4900-b054-f09b41e9aa8b/bin-2019/uautomizer/z3 Starting monitored process 11 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 11 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 16:52:36,701 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 16:52:36,701 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 16:52:36,703 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 16:52:36,703 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_anyStopRequested_~tmp___2~0=0} Honda state: {ULTIMATE.start_anyStopRequested_~tmp___2~0=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_2f012cc8-9a3e-4900-b054-f09b41e9aa8b/bin-2019/uautomizer/z3 Starting monitored process 12 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 12 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 16:52:36,720 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 16:52:36,720 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 16:52:36,725 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 16:52:36,725 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret91=0} Honda state: {ULTIMATE.start_timeShift_#t~ret91=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_2f012cc8-9a3e-4900-b054-f09b41e9aa8b/bin-2019/uautomizer/z3 Starting monitored process 13 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 13 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 16:52:36,741 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 16:52:36,741 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 16:52:36,743 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 16:52:36,743 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_anyStopRequested_#t~ret45=0} Honda state: {ULTIMATE.start_anyStopRequested_#t~ret45=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_2f012cc8-9a3e-4900-b054-f09b41e9aa8b/bin-2019/uautomizer/z3 Starting monitored process 14 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 14 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 16:52:36,760 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 16:52:36,760 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 16:52:36,762 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 16:52:36,762 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___9~2=0} Honda state: {ULTIMATE.start_timeShift_~tmp___9~2=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_2f012cc8-9a3e-4900-b054-f09b41e9aa8b/bin-2019/uautomizer/z3 Starting monitored process 15 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 15 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 16:52:36,782 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 16:52:36,783 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 16:52:36,786 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 16:52:36,786 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_#in~respectFloorCalls=1, ULTIMATE.start_stopRequestedInDirection_~respectFloorCalls=1} Honda state: {ULTIMATE.start_stopRequestedInDirection_#in~respectFloorCalls=1, ULTIMATE.start_stopRequestedInDirection_~respectFloorCalls=1} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_2f012cc8-9a3e-4900-b054-f09b41e9aa8b/bin-2019/uautomizer/z3 Starting monitored process 16 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 16 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 16:52:36,802 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 16:52:36,802 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 16:52:36,805 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 16:52:36,805 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedAtCurrentFloor_#res=0, ULTIMATE.start_stopRequestedAtCurrentFloor_~retValue_acc~25=0} Honda state: {ULTIMATE.start_stopRequestedAtCurrentFloor_#res=0, ULTIMATE.start_stopRequestedAtCurrentFloor_~retValue_acc~25=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_2f012cc8-9a3e-4900-b054-f09b41e9aa8b/bin-2019/uautomizer/z3 Starting monitored process 17 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 17 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 16:52:36,821 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 16:52:36,821 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 16:52:36,823 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 16:52:36,823 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_continueInDirection_~tmp~13=0} Honda state: {ULTIMATE.start_continueInDirection_~tmp~13=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_2f012cc8-9a3e-4900-b054-f09b41e9aa8b/bin-2019/uautomizer/z3 Starting monitored process 18 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 18 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 16:52:36,839 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 16:52:36,839 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 16:52:36,841 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 16:52:36,841 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_anyStopRequested_#t~ret49=0} Honda state: {ULTIMATE.start_anyStopRequested_#t~ret49=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_2f012cc8-9a3e-4900-b054-f09b41e9aa8b/bin-2019/uautomizer/z3 Starting monitored process 19 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 19 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 16:52:36,857 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 16:52:36,857 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 16:52:36,859 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 16:52:36,859 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_anyStopRequested_#t~ret47=0} Honda state: {ULTIMATE.start_anyStopRequested_#t~ret47=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_2f012cc8-9a3e-4900-b054-f09b41e9aa8b/bin-2019/uautomizer/z3 Starting monitored process 20 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 20 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 16:52:36,877 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 16:52:36,877 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 16:52:36,879 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 16:52:36,879 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret95=0} Honda state: {ULTIMATE.start_timeShift_#t~ret95=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_2f012cc8-9a3e-4900-b054-f09b41e9aa8b/bin-2019/uautomizer/z3 Starting monitored process 21 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 21 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 16:52:36,907 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 16:52:36,907 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 16:52:36,909 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 16:52:36,909 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedAtCurrentFloor_#t~ret77=0} Honda state: {ULTIMATE.start_stopRequestedAtCurrentFloor_#t~ret77=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_2f012cc8-9a3e-4900-b054-f09b41e9aa8b/bin-2019/uautomizer/z3 Starting monitored process 22 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 22 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 16:52:36,926 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 16:52:36,926 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 16:52:36,929 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 16:52:36,929 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_~__cil_tmp8~6=0, ULTIMATE.start_stopRequestedInDirection_~__cil_tmp7~5=0} Honda state: {ULTIMATE.start_stopRequestedInDirection_~__cil_tmp8~6=0, ULTIMATE.start_stopRequestedInDirection_~__cil_tmp7~5=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_2f012cc8-9a3e-4900-b054-f09b41e9aa8b/bin-2019/uautomizer/z3 Starting monitored process 23 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 23 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 16:52:36,946 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 16:52:36,946 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 16:52:36,948 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 16:52:36,948 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___7~2=0} Honda state: {ULTIMATE.start_timeShift_~tmp___7~2=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_2f012cc8-9a3e-4900-b054-f09b41e9aa8b/bin-2019/uautomizer/z3 Starting monitored process 24 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 24 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 16:52:36,966 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 16:52:36,966 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 16:52:36,970 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 16:52:36,970 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___4~2=0} Honda state: {ULTIMATE.start_timeShift_~tmp___4~2=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_2f012cc8-9a3e-4900-b054-f09b41e9aa8b/bin-2019/uautomizer/z3 Starting monitored process 25 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 25 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 16:52:36,986 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 16:52:36,986 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 16:52:36,990 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 16:52:36,990 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_#t~ret67=0} Honda state: {ULTIMATE.start_stopRequestedInDirection_#t~ret67=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_2f012cc8-9a3e-4900-b054-f09b41e9aa8b/bin-2019/uautomizer/z3 Starting monitored process 26 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 26 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 16:52:37,007 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 16:52:37,007 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 16:52:37,008 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 16:52:37,009 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___6~2=0} Honda state: {ULTIMATE.start_timeShift_~tmp___6~2=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_2f012cc8-9a3e-4900-b054-f09b41e9aa8b/bin-2019/uautomizer/z3 Starting monitored process 27 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 27 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 16:52:37,026 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 16:52:37,026 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 16:52:37,030 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 16:52:37,030 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret101=0} Honda state: {ULTIMATE.start_timeShift_#t~ret101=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_2f012cc8-9a3e-4900-b054-f09b41e9aa8b/bin-2019/uautomizer/z3 Starting monitored process 28 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 28 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 16:52:37,045 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 16:52:37,045 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 16:52:37,050 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 16:52:37,050 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp~18=0} Honda state: {ULTIMATE.start_timeShift_~tmp~18=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_2f012cc8-9a3e-4900-b054-f09b41e9aa8b/bin-2019/uautomizer/z3 Starting monitored process 29 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 29 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 16:52:37,070 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 16:52:37,070 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 16:52:37,078 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 16:52:37,078 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret94=0} Honda state: {ULTIMATE.start_timeShift_#t~ret94=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_2f012cc8-9a3e-4900-b054-f09b41e9aa8b/bin-2019/uautomizer/z3 Starting monitored process 30 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 30 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 16:52:37,096 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 16:52:37,096 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 16:52:37,102 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 16:52:37,102 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___3~3=0} Honda state: {ULTIMATE.start_timeShift_~tmp___3~3=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_2f012cc8-9a3e-4900-b054-f09b41e9aa8b/bin-2019/uautomizer/z3 Starting monitored process 31 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 31 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 16:52:37,119 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 16:52:37,119 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 16:52:37,121 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 16:52:37,121 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_anyStopRequested_~tmp~8=0} Honda state: {ULTIMATE.start_anyStopRequested_~tmp~8=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_2f012cc8-9a3e-4900-b054-f09b41e9aa8b/bin-2019/uautomizer/z3 Starting monitored process 32 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 32 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 16:52:37,137 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 16:52:37,137 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 16:52:37,140 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 16:52:37,140 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret98=0} Honda state: {ULTIMATE.start_timeShift_#t~ret98=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_2f012cc8-9a3e-4900-b054-f09b41e9aa8b/bin-2019/uautomizer/z3 Starting monitored process 33 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 33 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 16:52:37,159 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 16:52:37,159 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 16:52:37,161 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 16:52:37,162 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_cleanup_#t~ret158=0} Honda state: {ULTIMATE.start_cleanup_#t~ret158=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_2f012cc8-9a3e-4900-b054-f09b41e9aa8b/bin-2019/uautomizer/z3 Starting monitored process 34 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 34 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 16:52:37,185 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 16:52:37,185 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 16:52:37,188 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 16:52:37,188 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedAtCurrentFloor_#t~ret76=0} Honda state: {ULTIMATE.start_stopRequestedAtCurrentFloor_#t~ret76=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_2f012cc8-9a3e-4900-b054-f09b41e9aa8b/bin-2019/uautomizer/z3 Starting monitored process 35 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 35 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 16:52:37,209 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 16:52:37,209 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 16:52:37,211 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 16:52:37,211 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_isExecutiveFloorCalling_#t~ret149=0} Honda state: {ULTIMATE.start_isExecutiveFloorCalling_#t~ret149=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_2f012cc8-9a3e-4900-b054-f09b41e9aa8b/bin-2019/uautomizer/z3 Starting monitored process 36 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 36 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 16:52:37,229 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 16:52:37,229 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 16:52:37,232 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 16:52:37,232 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_isIdle_~retValue_acc~18=0} Honda state: {ULTIMATE.start_isIdle_~retValue_acc~18=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_2f012cc8-9a3e-4900-b054-f09b41e9aa8b/bin-2019/uautomizer/z3 Starting monitored process 37 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 37 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 16:52:37,250 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 16:52:37,250 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 16:52:37,254 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 16:52:37,254 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_cleanup_~tmp___0~11=0, ULTIMATE.start_isBlocked_~retValue_acc~11=0, ULTIMATE.start_isBlocked_#res=0} Honda state: {ULTIMATE.start_cleanup_~tmp___0~11=0, ULTIMATE.start_isBlocked_~retValue_acc~11=0, ULTIMATE.start_isBlocked_#res=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_2f012cc8-9a3e-4900-b054-f09b41e9aa8b/bin-2019/uautomizer/z3 Starting monitored process 38 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 38 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 16:52:37,272 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 16:52:37,272 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 16:52:37,274 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 16:52:37,274 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_isIdle_#t~ret50=0} Honda state: {ULTIMATE.start_isIdle_#t~ret50=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_2f012cc8-9a3e-4900-b054-f09b41e9aa8b/bin-2019/uautomizer/z3 Starting monitored process 39 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 39 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 16:52:37,291 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 16:52:37,291 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 16:52:37,293 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 16:52:37,293 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification14_spec__1_#t~ret165=0} Honda state: {ULTIMATE.start___utac_acc__Specification14_spec__1_#t~ret165=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_2f012cc8-9a3e-4900-b054-f09b41e9aa8b/bin-2019/uautomizer/z3 Starting monitored process 40 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 40 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 16:52:37,310 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 16:52:37,310 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 16:52:37,312 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 16:52:37,312 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_#t~ret68=0} Honda state: {ULTIMATE.start_stopRequestedInDirection_#t~ret68=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_2f012cc8-9a3e-4900-b054-f09b41e9aa8b/bin-2019/uautomizer/z3 Starting monitored process 41 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 41 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 16:52:37,333 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 16:52:37,333 INFO L163 nArgumentSynthesizer]: Using integer mode. No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_2f012cc8-9a3e-4900-b054-f09b41e9aa8b/bin-2019/uautomizer/z3 Starting monitored process 42 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 42 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 16:52:37,351 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 3 Nilpotent components: true [2018-11-18 16:52:37,351 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 16:52:37,789 INFO L452 LassoAnalysis]: Proving nontermination failed: No geometric nontermination argument exists. [2018-11-18 16:52:37,791 INFO L216 LassoAnalysis]: Preferences: [2018-11-18 16:52:37,791 INFO L124 ssoRankerPreferences]: Compute integeral hull: false [2018-11-18 16:52:37,791 INFO L125 ssoRankerPreferences]: Enable LassoPartitioneer: true [2018-11-18 16:52:37,791 INFO L126 ssoRankerPreferences]: Term annotations enabled: false [2018-11-18 16:52:37,791 INFO L127 ssoRankerPreferences]: Use exernal solver: false [2018-11-18 16:52:37,791 INFO L128 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 16:52:37,791 INFO L129 ssoRankerPreferences]: Dump SMT script to file: false [2018-11-18 16:52:37,791 INFO L130 ssoRankerPreferences]: Path of dumped script: [2018-11-18 16:52:37,791 INFO L131 ssoRankerPreferences]: Filename of dumped script: elevator_spec14_product31_true-unreach-call_true-termination.cil.c_Iteration5_Loop [2018-11-18 16:52:37,791 INFO L132 ssoRankerPreferences]: MapElimAlgo: Frank [2018-11-18 16:52:37,791 INFO L282 LassoAnalysis]: Starting lasso preprocessing... [2018-11-18 16:52:37,795 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 16:52:37,796 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 16:52:37,797 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 16:52:37,798 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 16:52:37,799 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 16:52:37,800 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 16:52:37,801 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 16:52:37,803 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 16:52:37,804 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 16:52:37,805 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 16:52:37,807 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 16:52:37,808 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 16:52:37,811 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 16:52:37,814 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 16:52:37,815 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 16:52:37,816 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 16:52:37,818 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 16:52:37,819 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 16:52:37,820 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 16:52:37,820 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 16:52:37,822 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 16:52:37,823 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 16:52:37,826 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 16:52:37,838 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 16:52:37,839 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 16:52:37,846 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 16:52:37,850 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 16:52:37,851 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 16:52:37,852 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 16:52:37,853 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 16:52:37,854 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 16:52:37,855 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 16:52:37,865 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 16:52:37,866 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 16:52:37,867 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 16:52:37,868 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 16:52:37,870 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 16:52:37,871 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 16:52:37,874 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 16:52:37,876 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 16:52:37,877 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 16:52:37,881 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 16:52:37,882 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 16:52:37,883 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 16:52:37,884 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 16:52:37,885 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 16:52:37,886 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 16:52:37,887 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 16:52:37,888 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 16:52:37,889 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 16:52:37,892 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 16:52:37,893 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 16:52:37,894 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 16:52:37,909 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 16:52:37,910 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 16:52:37,917 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 16:52:37,929 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 16:52:37,934 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 16:52:37,941 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 16:52:37,943 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 16:52:37,944 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 16:52:37,948 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 16:52:37,949 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 16:52:37,953 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 16:52:38,339 INFO L300 LassoAnalysis]: Preprocessing complete. [2018-11-18 16:52:38,342 INFO L497 LassoAnalysis]: Using template 'affine'. [2018-11-18 16:52:38,343 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 16:52:38,344 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 16:52:38,345 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 16:52:38,345 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 16:52:38,345 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 16:52:38,345 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 16:52:38,347 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 16:52:38,347 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 16:52:38,349 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 16:52:38,350 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 16:52:38,350 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 16:52:38,350 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 16:52:38,350 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 16:52:38,351 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 16:52:38,351 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 16:52:38,351 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 16:52:38,351 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 16:52:38,352 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 16:52:38,352 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 16:52:38,352 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 16:52:38,352 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 16:52:38,352 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 16:52:38,353 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 16:52:38,353 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 16:52:38,353 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 16:52:38,353 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 16:52:38,354 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 16:52:38,354 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 16:52:38,354 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 16:52:38,354 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 16:52:38,354 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 16:52:38,354 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 16:52:38,355 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 16:52:38,355 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 16:52:38,355 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 16:52:38,356 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 16:52:38,356 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 16:52:38,356 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 16:52:38,356 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 16:52:38,356 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 16:52:38,356 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 16:52:38,357 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 16:52:38,357 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 16:52:38,357 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 16:52:38,358 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 16:52:38,358 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 16:52:38,358 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 16:52:38,358 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 16:52:38,358 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 16:52:38,359 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 16:52:38,359 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 16:52:38,359 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 16:52:38,359 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 16:52:38,360 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 16:52:38,360 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 16:52:38,360 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 16:52:38,360 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 16:52:38,360 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 16:52:38,361 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 16:52:38,361 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 16:52:38,361 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 16:52:38,361 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 16:52:38,362 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 16:52:38,362 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 16:52:38,362 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 16:52:38,362 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 16:52:38,363 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 16:52:38,363 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 16:52:38,363 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 16:52:38,363 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 16:52:38,363 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 16:52:38,364 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 16:52:38,364 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 16:52:38,364 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 16:52:38,364 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 16:52:38,364 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 16:52:38,364 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 16:52:38,365 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 16:52:38,365 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 16:52:38,365 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 16:52:38,370 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 16:52:38,370 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 16:52:38,370 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 16:52:38,371 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 16:52:38,371 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 16:52:38,371 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 16:52:38,371 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 16:52:38,371 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 16:52:38,371 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 16:52:38,372 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 16:52:38,372 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 16:52:38,372 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 16:52:38,373 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 16:52:38,373 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 16:52:38,373 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 16:52:38,373 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 16:52:38,373 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 16:52:38,373 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 16:52:38,374 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 16:52:38,375 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 16:52:38,375 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 16:52:38,375 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 16:52:38,375 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 16:52:38,375 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 16:52:38,375 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 16:52:38,376 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 16:52:38,376 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 16:52:38,377 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 16:52:38,377 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 16:52:38,377 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 16:52:38,378 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 16:52:38,382 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 16:52:38,382 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 16:52:38,382 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 16:52:38,382 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 16:52:38,383 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 16:52:38,384 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 16:52:38,385 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 16:52:38,385 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 16:52:38,385 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 16:52:38,385 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 16:52:38,385 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 16:52:38,385 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 16:52:38,386 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 16:52:38,386 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 16:52:38,387 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 16:52:38,387 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 16:52:38,387 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 16:52:38,387 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 16:52:38,387 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 16:52:38,388 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 16:52:38,388 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 16:52:38,388 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 16:52:38,388 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 16:52:38,389 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 16:52:38,389 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 16:52:38,389 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 16:52:38,389 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 16:52:38,389 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 16:52:38,390 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 16:52:38,390 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 16:52:38,390 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 16:52:38,390 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 16:52:38,391 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 16:52:38,391 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 16:52:38,392 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 16:52:38,392 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 16:52:38,392 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 16:52:38,392 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 16:52:38,392 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 16:52:38,392 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 16:52:38,392 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 16:52:38,393 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 16:52:38,393 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 16:52:38,393 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 16:52:38,394 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 16:52:38,394 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 16:52:38,394 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 16:52:38,394 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 16:52:38,394 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 16:52:38,394 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 16:52:38,395 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 16:52:38,395 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 16:52:38,395 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 16:52:38,395 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 16:52:38,396 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 16:52:38,396 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 16:52:38,396 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 16:52:38,396 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 16:52:38,396 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 16:52:38,397 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 16:52:38,397 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 16:52:38,397 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 16:52:38,397 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 16:52:38,397 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 16:52:38,398 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 16:52:38,398 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 16:52:38,398 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 16:52:38,398 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 16:52:38,399 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 16:52:38,399 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 16:52:38,399 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 16:52:38,399 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 16:52:38,399 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 16:52:38,400 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 16:52:38,400 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 16:52:38,400 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 16:52:38,400 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 16:52:38,401 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 16:52:38,401 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 16:52:38,401 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 16:52:38,401 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 16:52:38,401 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 16:52:38,402 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 16:52:38,402 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 16:52:38,402 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 16:52:38,402 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 16:52:38,403 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 16:52:38,403 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 16:52:38,403 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 16:52:38,403 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 16:52:38,403 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 16:52:38,404 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 16:52:38,404 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 16:52:38,404 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 16:52:38,404 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 16:52:38,405 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 16:52:38,405 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 16:52:38,405 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 16:52:38,405 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 16:52:38,405 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 16:52:38,406 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 16:52:38,406 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 16:52:38,406 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 16:52:38,406 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 16:52:38,407 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 16:52:38,407 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 16:52:38,407 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 16:52:38,407 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 16:52:38,408 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 16:52:38,408 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 16:52:38,408 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 16:52:38,408 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 16:52:38,408 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 16:52:38,409 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 16:52:38,409 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 16:52:38,409 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 16:52:38,409 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 16:52:38,409 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 16:52:38,409 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 16:52:38,409 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 16:52:38,410 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 16:52:38,410 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 16:52:38,411 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 16:52:38,411 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 16:52:38,411 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 16:52:38,411 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 16:52:38,412 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 16:52:38,412 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 16:52:38,412 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 16:52:38,412 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 16:52:38,412 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 16:52:38,413 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 16:52:38,413 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 16:52:38,413 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 16:52:38,413 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 16:52:38,413 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 16:52:38,413 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 16:52:38,414 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 16:52:38,414 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 16:52:38,414 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 16:52:38,414 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 16:52:38,415 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 16:52:38,415 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 16:52:38,415 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 16:52:38,415 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 16:52:38,416 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 16:52:38,416 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 16:52:38,416 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 16:52:38,416 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 16:52:38,416 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 16:52:38,417 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 16:52:38,417 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 16:52:38,417 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 16:52:38,417 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 16:52:38,417 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 16:52:38,418 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 16:52:38,418 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 16:52:38,418 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 16:52:38,418 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 16:52:38,419 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 16:52:38,419 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 16:52:38,419 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 16:52:38,419 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 16:52:38,419 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 16:52:38,419 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 16:52:38,420 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 16:52:38,420 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 16:52:38,420 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 16:52:38,421 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 16:52:38,421 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 16:52:38,421 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 16:52:38,421 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 16:52:38,421 INFO L206 nArgumentSynthesizer]: 2 loop disjuncts [2018-11-18 16:52:38,421 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 16:52:38,424 INFO L402 nArgumentSynthesizer]: We have 4 Motzkin's Theorem applications. [2018-11-18 16:52:38,424 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 16:52:38,432 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 16:52:38,432 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 16:52:38,433 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 16:52:38,433 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 16:52:38,433 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 16:52:38,433 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 16:52:38,433 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 16:52:38,433 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 16:52:38,434 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 16:52:38,434 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 16:52:38,434 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 16:52:38,435 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 16:52:38,435 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 16:52:38,435 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 16:52:38,435 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 16:52:38,435 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 16:52:38,435 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 16:52:38,435 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 16:52:38,436 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 16:52:38,436 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 16:52:38,436 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 16:52:38,436 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 16:52:38,436 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 16:52:38,436 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 16:52:38,436 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 16:52:38,437 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 16:52:38,437 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 16:52:38,437 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 16:52:38,437 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 16:52:38,438 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 16:52:38,438 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 16:52:38,438 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 16:52:38,438 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 16:52:38,438 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 16:52:38,438 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 16:52:38,438 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 16:52:38,439 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 16:52:38,439 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 16:52:38,439 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 16:52:38,439 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 16:52:38,439 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 16:52:38,440 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 16:52:38,440 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 16:52:38,440 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 16:52:38,440 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 16:52:38,440 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 16:52:38,440 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 16:52:38,441 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 16:52:38,441 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 16:52:38,441 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 16:52:38,441 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 16:52:38,441 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 16:52:38,441 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 16:52:38,441 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 16:52:38,442 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 16:52:38,442 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 16:52:38,443 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 16:52:38,443 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 16:52:38,443 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 16:52:38,443 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 16:52:38,443 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 16:52:38,443 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 16:52:38,443 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 16:52:38,444 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 16:52:38,444 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 16:52:38,445 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 16:52:38,445 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 16:52:38,445 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 16:52:38,445 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 16:52:38,445 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 16:52:38,445 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 16:52:38,445 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 16:52:38,446 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 16:52:38,447 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 16:52:38,447 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 16:52:38,447 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 16:52:38,447 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 16:52:38,447 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 16:52:38,448 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 16:52:38,448 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 16:52:38,448 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 16:52:38,450 INFO L421 nArgumentSynthesizer]: Found a termination argument, trying to simplify. [2018-11-18 16:52:38,454 INFO L443 ModelExtractionUtils]: Simplification made 4 calls to the SMT solver. [2018-11-18 16:52:38,454 INFO L444 ModelExtractionUtils]: 1 out of 5 variables were initially zero. Simplification set additionally 1 variables to zero. [2018-11-18 16:52:38,455 INFO L437 nArgumentSynthesizer]: Simplifying supporting invariants... [2018-11-18 16:52:38,455 INFO L440 nArgumentSynthesizer]: Removed 0 redundant supporting invariants from a total of 0. [2018-11-18 16:52:38,456 INFO L518 LassoAnalysis]: Proved termination. [2018-11-18 16:52:38,456 INFO L520 LassoAnalysis]: Termination argument consisting of: Ranking function f(~cleanupTimeShifts~0, ULTIMATE.start_cleanup_~i~3) = 1*~cleanupTimeShifts~0 - 1*ULTIMATE.start_cleanup_~i~3 Supporting invariants [] [2018-11-18 16:52:38,456 INFO L297 tatePredicateManager]: 0 out of 0 supporting invariants were superfluous and have been removed [2018-11-18 16:52:38,474 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 16:52:38,613 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 16:52:38,625 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-18 16:52:38,686 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 16:52:38,688 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-18 16:52:38,763 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 16:52:38,767 INFO L152 lantAutomatonBouncer]: Defining deterministic Buchi interpolant automaton with honda bouncer for stem and without honda bouncer for loop.1 stem predicates 3 loop predicates [2018-11-18 16:52:38,767 INFO L72 iDifferenceNCSBLazy3]: Start buchiDifferenceNCSBLazy3. First operand 91749 states and 170663 transitions. cyclomatic complexity: 78920 Second operand 5 states. [2018-11-18 16:52:39,614 INFO L76 iDifferenceNCSBLazy3]: Finished buchiDifferenceNCSBLazy3. First operand 91749 states and 170663 transitions. cyclomatic complexity: 78920. Second operand 5 states. Result 112469 states and 209117 transitions. Complement of second has 8 states. [2018-11-18 16:52:39,615 INFO L142 InterpolantAutomaton]: Switched to read-only mode: Buchi interpolant automaton has 5 states 1 stem states 3 non-accepting loop states 1 accepting loop states [2018-11-18 16:52:39,615 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2018-11-18 16:52:39,627 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 16787 transitions. [2018-11-18 16:52:39,628 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 5 states and 16787 transitions. Stem has 149 letters. Loop has 44 letters. [2018-11-18 16:52:39,630 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2018-11-18 16:52:39,630 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 5 states and 16787 transitions. Stem has 193 letters. Loop has 44 letters. [2018-11-18 16:52:39,632 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2018-11-18 16:52:39,632 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 5 states and 16787 transitions. Stem has 149 letters. Loop has 88 letters. [2018-11-18 16:52:39,633 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2018-11-18 16:52:39,633 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 112469 states and 209117 transitions. [2018-11-18 16:52:40,006 INFO L131 ngComponentsAnalysis]: Automaton has 0 accepting balls. 0 [2018-11-18 16:52:40,006 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 112469 states to 0 states and 0 transitions. [2018-11-18 16:52:40,006 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 0 [2018-11-18 16:52:40,006 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 0 [2018-11-18 16:52:40,006 INFO L73 IsDeterministic]: Start isDeterministic. Operand 0 states and 0 transitions. [2018-11-18 16:52:40,006 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-18 16:52:40,006 INFO L705 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2018-11-18 16:52:40,007 INFO L728 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2018-11-18 16:52:40,007 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-18 16:52:40,007 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-18 16:52:40,007 INFO L87 Difference]: Start difference. First operand 0 states and 0 transitions. Second operand 3 states. [2018-11-18 16:52:40,007 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 16:52:40,007 INFO L93 Difference]: Finished difference Result 0 states and 0 transitions. [2018-11-18 16:52:40,007 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2018-11-18 16:52:40,007 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 0 states and 0 transitions. [2018-11-18 16:52:40,007 INFO L131 ngComponentsAnalysis]: Automaton has 0 accepting balls. 0 [2018-11-18 16:52:40,007 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 0 states to 0 states and 0 transitions. [2018-11-18 16:52:40,008 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 0 [2018-11-18 16:52:40,008 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 0 [2018-11-18 16:52:40,008 INFO L73 IsDeterministic]: Start isDeterministic. Operand 0 states and 0 transitions. [2018-11-18 16:52:40,008 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-18 16:52:40,008 INFO L705 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2018-11-18 16:52:40,008 INFO L728 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2018-11-18 16:52:40,008 INFO L608 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2018-11-18 16:52:40,008 INFO L442 BuchiCegarLoop]: ======== Iteration 6============ [2018-11-18 16:52:40,008 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 0 states and 0 transitions. [2018-11-18 16:52:40,008 INFO L131 ngComponentsAnalysis]: Automaton has 0 accepting balls. 0 [2018-11-18 16:52:40,008 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is true [2018-11-18 16:52:40,014 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer CFG 18.11 04:52:40 BoogieIcfgContainer [2018-11-18 16:52:40,014 INFO L132 PluginConnector]: ------------------------ END BuchiAutomizer---------------------------- [2018-11-18 16:52:40,015 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2018-11-18 16:52:40,015 INFO L271 PluginConnector]: Initializing Witness Printer... [2018-11-18 16:52:40,015 INFO L276 PluginConnector]: Witness Printer initialized [2018-11-18 16:52:40,016 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 18.11 04:51:00" (3/4) ... [2018-11-18 16:52:40,019 INFO L147 WitnessPrinter]: No result that supports witness generation found [2018-11-18 16:52:40,019 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2018-11-18 16:52:40,020 INFO L168 Benchmark]: Toolchain (without parser) took 109402.90 ms. Allocated memory was 1.0 GB in the beginning and 5.6 GB in the end (delta: 4.5 GB). Free memory was 956.6 MB in the beginning and 3.5 GB in the end (delta: -2.6 GB). Peak memory consumption was 2.0 GB. Max. memory is 11.5 GB. [2018-11-18 16:52:40,020 INFO L168 Benchmark]: CDTParser took 0.12 ms. Allocated memory is still 1.0 GB. Free memory is still 985.6 MB. There was no memory consumed. Max. memory is 11.5 GB. [2018-11-18 16:52:40,021 INFO L168 Benchmark]: CACSL2BoogieTranslator took 585.14 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 162.0 MB). Free memory was 956.6 MB in the beginning and 1.1 GB in the end (delta: -172.3 MB). Peak memory consumption was 49.6 MB. Max. memory is 11.5 GB. [2018-11-18 16:52:40,021 INFO L168 Benchmark]: Boogie Procedure Inliner took 271.48 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.0 GB in the end (delta: 99.9 MB). Peak memory consumption was 99.9 MB. Max. memory is 11.5 GB. [2018-11-18 16:52:40,021 INFO L168 Benchmark]: Boogie Preprocessor took 335.69 ms. Allocated memory is still 1.2 GB. Free memory was 1.0 GB in the beginning and 946.0 MB in the end (delta: 83.0 MB). Peak memory consumption was 83.0 MB. Max. memory is 11.5 GB. [2018-11-18 16:52:40,022 INFO L168 Benchmark]: RCFGBuilder took 9035.50 ms. Allocated memory was 1.2 GB in the beginning and 1.7 GB in the end (delta: 500.2 MB). Free memory was 946.0 MB in the beginning and 1.5 GB in the end (delta: -526.2 MB). Peak memory consumption was 677.6 MB. Max. memory is 11.5 GB. [2018-11-18 16:52:40,022 INFO L168 Benchmark]: BuchiAutomizer took 99167.69 ms. Allocated memory was 1.7 GB in the beginning and 5.6 GB in the end (delta: 3.9 GB). Free memory was 1.5 GB in the beginning and 3.5 GB in the end (delta: -2.1 GB). Peak memory consumption was 1.8 GB. Max. memory is 11.5 GB. [2018-11-18 16:52:40,023 INFO L168 Benchmark]: Witness Printer took 4.12 ms. Allocated memory is still 5.6 GB. Free memory is still 3.5 GB. There was no memory consumed. Max. memory is 11.5 GB. [2018-11-18 16:52:40,025 INFO L336 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.12 ms. Allocated memory is still 1.0 GB. Free memory is still 985.6 MB. There was no memory consumed. Max. memory is 11.5 GB. * CACSL2BoogieTranslator took 585.14 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 162.0 MB). Free memory was 956.6 MB in the beginning and 1.1 GB in the end (delta: -172.3 MB). Peak memory consumption was 49.6 MB. Max. memory is 11.5 GB. * Boogie Procedure Inliner took 271.48 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.0 GB in the end (delta: 99.9 MB). Peak memory consumption was 99.9 MB. Max. memory is 11.5 GB. * Boogie Preprocessor took 335.69 ms. Allocated memory is still 1.2 GB. Free memory was 1.0 GB in the beginning and 946.0 MB in the end (delta: 83.0 MB). Peak memory consumption was 83.0 MB. Max. memory is 11.5 GB. * RCFGBuilder took 9035.50 ms. Allocated memory was 1.2 GB in the beginning and 1.7 GB in the end (delta: 500.2 MB). Free memory was 946.0 MB in the beginning and 1.5 GB in the end (delta: -526.2 MB). Peak memory consumption was 677.6 MB. Max. memory is 11.5 GB. * BuchiAutomizer took 99167.69 ms. Allocated memory was 1.7 GB in the beginning and 5.6 GB in the end (delta: 3.9 GB). Free memory was 1.5 GB in the beginning and 3.5 GB in the end (delta: -2.1 GB). Peak memory consumption was 1.8 GB. Max. memory is 11.5 GB. * Witness Printer took 4.12 ms. Allocated memory is still 5.6 GB. Free memory is still 3.5 GB. There was no memory consumed. Max. memory is 11.5 GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: Constructed decomposition of program Your program was decomposed into 6 terminating modules (5 trivial, 1 deterministic, 0 nondeterministic). One deterministic module has affine ranking function cleanupTimeShifts + -1 * i and consists of 5 locations. 5 modules have a trivial ranking function, the largest among these consists of 8 locations. - StatisticsResult: Timing statistics BüchiAutomizer plugin needed 99.1s and 6 iterations. TraceHistogramMax:1. Analysis of lassos took 8.8s. Construction of modules took 53.3s. Büchi inclusion checks took 17.4s. Highest rank in rank-based complementation 3. Minimization of det autom 6. Minimization of nondet autom 0. Automata minimization 10.8s AutomataMinimizationTime, 4 MinimizatonAttempts, 896003 StatesRemovedByMinimization, 4 NontrivialMinimizations. Non-live state removal took 6.8s Buchi closure took 0.5s. Biggest automaton had 92563 states and ocurred in iteration 3. Nontrivial modules had stage [1, 0, 0, 0, 0]. InterpolantCoveringCapabilityFinite: 0/0 InterpolantCoveringCapabilityBuchi: 0/0 HoareTripleCheckerStatistics: 144952 SDtfs, 818867 SDslu, 814678 SDs, 0 SdLazy, 61577 SolverSat, 8635 SolverUnsat, 0 SolverUnknown, 0 SolverNotchecked, 53.3s Time LassoAnalysisResults: nont0 unkn0 SFLI0 SFLT0 conc0 concLT0 SILN0 SILU0 SILI4 SILT1 lasso0 LassoPreprocessingBenchmarks: Lassos: inital176 mio100 ax100 hnf100 lsp21 ukn100 mio100 lsp100 div100 bol100 ite100 ukn100 eq224 hnf86 smp100 dnf150 smp100 tf101 neg98 sie103 LassoTerminationAnalysisBenchmarks: ConstraintsSatisfiability: unsat Degree: 0 Time: 11ms VariablesStem: 0 VariablesLoop: 9 DisjunctsStem: 1 DisjunctsLoop: 2 SupportingInvariants: 0 MotzkinApplications: 4 LassoTerminationAnalysisBenchmarks: LassoNonterminationAnalysisSatFixpoint: 39 LassoNonterminationAnalysisSatUnbounded: 0 LassoNonterminationAnalysisUnsat: 1 LassoNonterminationAnalysisUnknown: 0 LassoNonterminationAnalysisTime: 0.7s - TerminationAnalysisResult: Termination proven Buchi Automizer proved that your program is terminating RESULT: Ultimate proved your program to be correct! Received shutdown request...