./Ultimate.py --spec ../../sv-benchmarks/c/Termination.prp --file ../../sv-benchmarks/c/product-lines/elevator_spec3_product31_false-unreach-call_true-termination.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for termination Using default analysis Version 5842f4b8 Calling Ultimate with: java -Dosgi.configuration.area=/tmp/vcloud-vcloud-master/worker/working_dir_d47f2f59-b6b2-4706-88d5-8e224a45e142/bin-2019/uautomizer/data/config -Xmx12G -Xms1G -jar /tmp/vcloud-vcloud-master/worker/working_dir_d47f2f59-b6b2-4706-88d5-8e224a45e142/bin-2019/uautomizer/plugins/org.eclipse.equinox.launcher_1.3.100.v20150511-1540.jar -data @noDefault -ultimatedata /tmp/vcloud-vcloud-master/worker/working_dir_d47f2f59-b6b2-4706-88d5-8e224a45e142/bin-2019/uautomizer/data -tc /tmp/vcloud-vcloud-master/worker/working_dir_d47f2f59-b6b2-4706-88d5-8e224a45e142/bin-2019/uautomizer/config/AutomizerTermination.xml -i ../../sv-benchmarks/c/product-lines/elevator_spec3_product31_false-unreach-call_true-termination.cil.c -s /tmp/vcloud-vcloud-master/worker/working_dir_d47f2f59-b6b2-4706-88d5-8e224a45e142/bin-2019/uautomizer/config/svcomp-Termination-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud-vcloud-master/worker/working_dir_d47f2f59-b6b2-4706-88d5-8e224a45e142/bin-2019/uautomizer --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(F end) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash e4c8b021dd10e17f75bc3f05209475156561c2f7 ........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................... Execution finished normally Writing output log to file Ultimate.log Result: TRUE --- Real Ultimate output --- This is Ultimate 0.1.23-5842f4b [2018-11-18 13:53:16,859 INFO L170 SettingsManager]: Resetting all preferences to default values... [2018-11-18 13:53:16,860 INFO L174 SettingsManager]: Resetting UltimateCore preferences to default values [2018-11-18 13:53:16,867 INFO L177 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2018-11-18 13:53:16,867 INFO L174 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2018-11-18 13:53:16,867 INFO L174 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2018-11-18 13:53:16,868 INFO L174 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2018-11-18 13:53:16,870 INFO L174 SettingsManager]: Resetting LassoRanker preferences to default values [2018-11-18 13:53:16,871 INFO L174 SettingsManager]: Resetting Reaching Definitions preferences to default values [2018-11-18 13:53:16,871 INFO L174 SettingsManager]: Resetting SyntaxChecker preferences to default values [2018-11-18 13:53:16,872 INFO L177 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2018-11-18 13:53:16,872 INFO L174 SettingsManager]: Resetting LTL2Aut preferences to default values [2018-11-18 13:53:16,873 INFO L174 SettingsManager]: Resetting PEA to Boogie preferences to default values [2018-11-18 13:53:16,873 INFO L174 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2018-11-18 13:53:16,874 INFO L174 SettingsManager]: Resetting ChcToBoogie preferences to default values [2018-11-18 13:53:16,875 INFO L174 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2018-11-18 13:53:16,876 INFO L174 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2018-11-18 13:53:16,877 INFO L174 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2018-11-18 13:53:16,878 INFO L174 SettingsManager]: Resetting CodeCheck preferences to default values [2018-11-18 13:53:16,880 INFO L174 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2018-11-18 13:53:16,880 INFO L174 SettingsManager]: Resetting RCFGBuilder preferences to default values [2018-11-18 13:53:16,881 INFO L174 SettingsManager]: Resetting TraceAbstraction preferences to default values [2018-11-18 13:53:16,883 INFO L177 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2018-11-18 13:53:16,883 INFO L177 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2018-11-18 13:53:16,883 INFO L174 SettingsManager]: Resetting TreeAutomizer preferences to default values [2018-11-18 13:53:16,884 INFO L174 SettingsManager]: Resetting IcfgTransformer preferences to default values [2018-11-18 13:53:16,885 INFO L174 SettingsManager]: Resetting Boogie Printer preferences to default values [2018-11-18 13:53:16,885 INFO L174 SettingsManager]: Resetting ReqPrinter preferences to default values [2018-11-18 13:53:16,886 INFO L174 SettingsManager]: Resetting Witness Printer preferences to default values [2018-11-18 13:53:16,886 INFO L177 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2018-11-18 13:53:16,887 INFO L174 SettingsManager]: Resetting CDTParser preferences to default values [2018-11-18 13:53:16,887 INFO L177 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2018-11-18 13:53:16,887 INFO L177 SettingsManager]: ReqParser provides no preferences, ignoring... [2018-11-18 13:53:16,887 INFO L174 SettingsManager]: Resetting SmtParser preferences to default values [2018-11-18 13:53:16,888 INFO L174 SettingsManager]: Resetting Witness Parser preferences to default values [2018-11-18 13:53:16,888 INFO L181 SettingsManager]: Finished resetting all preferences to default values... [2018-11-18 13:53:16,888 INFO L98 SettingsManager]: Beginning loading settings from /tmp/vcloud-vcloud-master/worker/working_dir_d47f2f59-b6b2-4706-88d5-8e224a45e142/bin-2019/uautomizer/config/svcomp-Termination-32bit-Automizer_Default.epf [2018-11-18 13:53:16,900 INFO L110 SettingsManager]: Loading preferences was successful [2018-11-18 13:53:16,900 INFO L112 SettingsManager]: Preferences different from defaults after loading the file: [2018-11-18 13:53:16,901 INFO L131 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2018-11-18 13:53:16,901 INFO L133 SettingsManager]: * Create parallel compositions if possible=false [2018-11-18 13:53:16,901 INFO L133 SettingsManager]: * Use SBE=true [2018-11-18 13:53:16,901 INFO L131 SettingsManager]: Preferences of BuchiAutomizer differ from their defaults: [2018-11-18 13:53:16,901 INFO L133 SettingsManager]: * NCSB implementation=INTSET_LAZY3 [2018-11-18 13:53:16,901 INFO L133 SettingsManager]: * Use old map elimination=false [2018-11-18 13:53:16,902 INFO L133 SettingsManager]: * Use external solver (rank synthesis)=false [2018-11-18 13:53:16,902 INFO L133 SettingsManager]: * Use only trivial implications for array writes=true [2018-11-18 13:53:16,902 INFO L133 SettingsManager]: * Rank analysis=LINEAR_WITH_GUESSES [2018-11-18 13:53:16,902 INFO L131 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2018-11-18 13:53:16,902 INFO L133 SettingsManager]: * sizeof long=4 [2018-11-18 13:53:16,902 INFO L133 SettingsManager]: * Check unreachability of error function in SV-COMP mode=false [2018-11-18 13:53:16,902 INFO L133 SettingsManager]: * Overapproximate operations on floating types=true [2018-11-18 13:53:16,902 INFO L133 SettingsManager]: * sizeof POINTER=4 [2018-11-18 13:53:16,902 INFO L133 SettingsManager]: * Check division by zero=IGNORE [2018-11-18 13:53:16,903 INFO L133 SettingsManager]: * Pointer to allocated memory at dereference=ASSUME [2018-11-18 13:53:16,903 INFO L133 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=ASSUME [2018-11-18 13:53:16,903 INFO L133 SettingsManager]: * Check array bounds for arrays that are off heap=ASSUME [2018-11-18 13:53:16,903 INFO L133 SettingsManager]: * sizeof long double=12 [2018-11-18 13:53:16,903 INFO L133 SettingsManager]: * Check if freed pointer was valid=false [2018-11-18 13:53:16,903 INFO L133 SettingsManager]: * Assume nondeterminstic values are in range=false [2018-11-18 13:53:16,903 INFO L133 SettingsManager]: * Use constant arrays=true [2018-11-18 13:53:16,903 INFO L133 SettingsManager]: * Pointer base address is valid at dereference=ASSUME [2018-11-18 13:53:16,903 INFO L131 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2018-11-18 13:53:16,904 INFO L133 SettingsManager]: * Size of a code block=SequenceOfStatements [2018-11-18 13:53:16,904 INFO L133 SettingsManager]: * To the following directory=/home/matthias/ultimate/dump [2018-11-18 13:53:16,904 INFO L131 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2018-11-18 13:53:16,904 INFO L133 SettingsManager]: * Trace refinement strategy=CAMEL [2018-11-18 13:53:16,904 INFO L133 SettingsManager]: * Dump automata to the following directory=/home/matthias/ultimate/dump/auto [2018-11-18 13:53:16,904 INFO L131 SettingsManager]: Preferences of IcfgTransformer differ from their defaults: [2018-11-18 13:53:16,904 INFO L133 SettingsManager]: * TransformationType=MODULO_NEIGHBOR Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud-vcloud-master/worker/working_dir_d47f2f59-b6b2-4706-88d5-8e224a45e142/bin-2019/uautomizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(F end) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> e4c8b021dd10e17f75bc3f05209475156561c2f7 [2018-11-18 13:53:16,926 INFO L81 nceAwareModelManager]: Repository-Root is: /tmp [2018-11-18 13:53:16,934 INFO L258 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2018-11-18 13:53:16,936 INFO L214 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2018-11-18 13:53:16,937 INFO L271 PluginConnector]: Initializing CDTParser... [2018-11-18 13:53:16,937 INFO L276 PluginConnector]: CDTParser initialized [2018-11-18 13:53:16,937 INFO L418 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud-vcloud-master/worker/working_dir_d47f2f59-b6b2-4706-88d5-8e224a45e142/bin-2019/uautomizer/../../sv-benchmarks/c/product-lines/elevator_spec3_product31_false-unreach-call_true-termination.cil.c [2018-11-18 13:53:16,973 INFO L221 CDTParser]: Created temporary CDT project at /tmp/vcloud-vcloud-master/worker/working_dir_d47f2f59-b6b2-4706-88d5-8e224a45e142/bin-2019/uautomizer/data/497872dc5/1e6f53fd37c84acab49d70a85c7e17bf/FLAG15923830d [2018-11-18 13:53:17,470 INFO L307 CDTParser]: Found 1 translation units. [2018-11-18 13:53:17,471 INFO L161 CDTParser]: Scanning /tmp/vcloud-vcloud-master/worker/working_dir_d47f2f59-b6b2-4706-88d5-8e224a45e142/sv-benchmarks/c/product-lines/elevator_spec3_product31_false-unreach-call_true-termination.cil.c [2018-11-18 13:53:17,484 INFO L355 CDTParser]: About to delete temporary CDT project at /tmp/vcloud-vcloud-master/worker/working_dir_d47f2f59-b6b2-4706-88d5-8e224a45e142/bin-2019/uautomizer/data/497872dc5/1e6f53fd37c84acab49d70a85c7e17bf/FLAG15923830d [2018-11-18 13:53:17,957 INFO L363 CDTParser]: Successfully deleted /tmp/vcloud-vcloud-master/worker/working_dir_d47f2f59-b6b2-4706-88d5-8e224a45e142/bin-2019/uautomizer/data/497872dc5/1e6f53fd37c84acab49d70a85c7e17bf [2018-11-18 13:53:17,959 INFO L296 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2018-11-18 13:53:17,961 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2018-11-18 13:53:17,961 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2018-11-18 13:53:17,961 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2018-11-18 13:53:17,964 INFO L276 PluginConnector]: CACSL2BoogieTranslator initialized [2018-11-18 13:53:17,965 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 18.11 01:53:17" (1/1) ... [2018-11-18 13:53:17,967 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@4c8ce82e and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 01:53:17, skipping insertion in model container [2018-11-18 13:53:17,968 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 18.11 01:53:17" (1/1) ... [2018-11-18 13:53:17,976 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2018-11-18 13:53:18,032 INFO L176 MainTranslator]: Built tables and reachable declarations [2018-11-18 13:53:18,370 INFO L201 PostProcessor]: Analyzing one entry point: main [2018-11-18 13:53:18,379 INFO L191 MainTranslator]: Completed pre-run [2018-11-18 13:53:18,517 INFO L201 PostProcessor]: Analyzing one entry point: main [2018-11-18 13:53:18,547 INFO L195 MainTranslator]: Completed translation [2018-11-18 13:53:18,548 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 01:53:18 WrapperNode [2018-11-18 13:53:18,548 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2018-11-18 13:53:18,548 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2018-11-18 13:53:18,549 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2018-11-18 13:53:18,549 INFO L276 PluginConnector]: Boogie Procedure Inliner initialized [2018-11-18 13:53:18,554 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 01:53:18" (1/1) ... [2018-11-18 13:53:18,578 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 01:53:18" (1/1) ... [2018-11-18 13:53:18,834 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2018-11-18 13:53:18,835 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2018-11-18 13:53:18,835 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2018-11-18 13:53:18,835 INFO L276 PluginConnector]: Boogie Preprocessor initialized [2018-11-18 13:53:18,843 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 01:53:18" (1/1) ... [2018-11-18 13:53:18,843 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 01:53:18" (1/1) ... [2018-11-18 13:53:18,880 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 01:53:18" (1/1) ... [2018-11-18 13:53:18,881 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 01:53:18" (1/1) ... [2018-11-18 13:53:18,971 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 01:53:18" (1/1) ... [2018-11-18 13:53:19,069 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 01:53:18" (1/1) ... [2018-11-18 13:53:19,114 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 01:53:18" (1/1) ... [2018-11-18 13:53:19,178 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2018-11-18 13:53:19,178 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2018-11-18 13:53:19,178 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2018-11-18 13:53:19,179 INFO L276 PluginConnector]: RCFGBuilder initialized [2018-11-18 13:53:19,179 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 01:53:18" (1/1) ... No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_d47f2f59-b6b2-4706-88d5-8e224a45e142/bin-2019/uautomizer/z3 Starting monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 13:53:19,230 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.alloc [2018-11-18 13:53:19,230 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2018-11-18 13:53:19,231 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2018-11-18 13:53:29,195 INFO L278 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2018-11-18 13:53:29,195 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 18.11 01:53:29 BoogieIcfgContainer [2018-11-18 13:53:29,196 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2018-11-18 13:53:29,196 INFO L113 PluginConnector]: ------------------------BuchiAutomizer---------------------------- [2018-11-18 13:53:29,196 INFO L271 PluginConnector]: Initializing BuchiAutomizer... [2018-11-18 13:53:29,199 INFO L276 PluginConnector]: BuchiAutomizer initialized [2018-11-18 13:53:29,200 INFO L102 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2018-11-18 13:53:29,200 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "CDTParser AST 18.11 01:53:17" (1/3) ... [2018-11-18 13:53:29,201 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@2ffb16ee and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 18.11 01:53:29, skipping insertion in model container [2018-11-18 13:53:29,201 INFO L102 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2018-11-18 13:53:29,201 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 01:53:18" (2/3) ... [2018-11-18 13:53:29,201 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@2ffb16ee and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 18.11 01:53:29, skipping insertion in model container [2018-11-18 13:53:29,201 INFO L102 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2018-11-18 13:53:29,201 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 18.11 01:53:29" (3/3) ... [2018-11-18 13:53:29,202 INFO L375 chiAutomizerObserver]: Analyzing ICFG elevator_spec3_product31_false-unreach-call_true-termination.cil.c [2018-11-18 13:53:29,235 INFO L133 ementStrategyFactory]: Using default assertion order modulation [2018-11-18 13:53:29,235 INFO L374 BuchiCegarLoop]: Interprodecural is true [2018-11-18 13:53:29,235 INFO L375 BuchiCegarLoop]: Hoare is false [2018-11-18 13:53:29,236 INFO L376 BuchiCegarLoop]: Compute interpolants for ForwardPredicates [2018-11-18 13:53:29,236 INFO L377 BuchiCegarLoop]: Backedges is STRAIGHT_LINE [2018-11-18 13:53:29,236 INFO L378 BuchiCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2018-11-18 13:53:29,236 INFO L379 BuchiCegarLoop]: Difference is false [2018-11-18 13:53:29,236 INFO L380 BuchiCegarLoop]: Minimize is MINIMIZE_SEVPA [2018-11-18 13:53:29,236 INFO L383 BuchiCegarLoop]: ======== Iteration 0==of CEGAR loop == BuchiCegarLoop======== [2018-11-18 13:53:29,322 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 9384 states. [2018-11-18 13:53:29,449 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1893 [2018-11-18 13:53:29,449 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-18 13:53:29,449 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-18 13:53:29,465 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 13:53:29,466 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 13:53:29,466 INFO L442 BuchiCegarLoop]: ======== Iteration 1============ [2018-11-18 13:53:29,466 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 9384 states. [2018-11-18 13:53:29,532 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1893 [2018-11-18 13:53:29,532 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-18 13:53:29,532 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-18 13:53:29,537 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 13:53:29,537 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 13:53:29,545 INFO L794 eck$LassoCheckResult]: Stem: 2305#ULTIMATE.startENTRYtrue assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];call #t~string33.base, #t~string33.offset := #Ultimate.alloc(30);call #t~string34.base, #t~string34.offset := #Ultimate.alloc(9);call #t~string35.base, #t~string35.offset := #Ultimate.alloc(21);call #t~string36.base, #t~string36.offset := #Ultimate.alloc(30);call #t~string37.base, #t~string37.offset := #Ultimate.alloc(9);call #t~string38.base, #t~string38.offset := #Ultimate.alloc(21);call #t~string42.base, #t~string42.offset := #Ultimate.alloc(30);call #t~string43.base, #t~string43.offset := #Ultimate.alloc(9);call #t~string44.base, #t~string44.offset := #Ultimate.alloc(25);call #t~string45.base, #t~string45.offset := #Ultimate.alloc(30);call #t~string46.base, #t~string46.offset := #Ultimate.alloc(9);call #t~string47.base, #t~string47.offset := #Ultimate.alloc(25);call #t~string116.base, #t~string116.offset := #Ultimate.alloc(10);call #t~string118.base, #t~string118.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string118.base,#t~string118.offset := 91];#memory_int := #memory_int[#t~string118.base,1 + #t~string118.offset := 95];#memory_int := #memory_int[#t~string118.base,2 + #t~string118.offset := 93];#memory_int := #memory_int[#t~string118.base,3 + #t~string118.offset := 0];call #t~string120.base, #t~string120.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string120.base,#t~string120.offset := 91];#memory_int := #memory_int[#t~string120.base,1 + #t~string120.offset := 93];#memory_int := #memory_int[#t~string120.base,2 + #t~string120.offset := 32];#memory_int := #memory_int[#t~string120.base,3 + #t~string120.offset := 0];call #t~string122.base, #t~string122.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string122.base,#t~string122.offset := 32];#memory_int := #memory_int[#t~string122.base,1 + #t~string122.offset := 97];#memory_int := #memory_int[#t~string122.base,2 + #t~string122.offset := 116];#memory_int := #memory_int[#t~string122.base,3 + #t~string122.offset := 32];#memory_int := #memory_int[#t~string122.base,4 + #t~string122.offset := 0];call #t~string124.base, #t~string124.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string124.base,#t~string124.offset := 37];#memory_int := #memory_int[#t~string124.base,1 + #t~string124.offset := 105];#memory_int := #memory_int[#t~string124.base,2 + #t~string124.offset := 0];call #t~string126.base, #t~string126.offset := #Ultimate.alloc(10);call #t~string128.base, #t~string128.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string128.base,#t~string128.offset := 117];#memory_int := #memory_int[#t~string128.base,1 + #t~string128.offset := 112];#memory_int := #memory_int[#t~string128.base,2 + #t~string128.offset := 0];call #t~string130.base, #t~string130.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string130.base,#t~string130.offset := 100];#memory_int := #memory_int[#t~string130.base,1 + #t~string130.offset := 111];#memory_int := #memory_int[#t~string130.base,2 + #t~string130.offset := 119];#memory_int := #memory_int[#t~string130.base,3 + #t~string130.offset := 110];#memory_int := #memory_int[#t~string130.base,4 + #t~string130.offset := 0];call #t~string132.base, #t~string132.offset := #Ultimate.alloc(7);#memory_int := #memory_int[#t~string132.base,#t~string132.offset := 32];#memory_int := #memory_int[#t~string132.base,1 + #t~string132.offset := 73];#memory_int := #memory_int[#t~string132.base,2 + #t~string132.offset := 76];#memory_int := #memory_int[#t~string132.base,3 + #t~string132.offset := 95];#memory_int := #memory_int[#t~string132.base,4 + #t~string132.offset := 112];#memory_int := #memory_int[#t~string132.base,5 + #t~string132.offset := 58];#memory_int := #memory_int[#t~string132.base,6 + #t~string132.offset := 0];call #t~string134.base, #t~string134.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string134.base,#t~string134.offset := 32];#memory_int := #memory_int[#t~string134.base,1 + #t~string134.offset := 37];#memory_int := #memory_int[#t~string134.base,2 + #t~string134.offset := 105];#memory_int := #memory_int[#t~string134.base,3 + #t~string134.offset := 0];call #t~string136.base, #t~string136.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string136.base,#t~string136.offset := 32];#memory_int := #memory_int[#t~string136.base,1 + #t~string136.offset := 37];#memory_int := #memory_int[#t~string136.base,2 + #t~string136.offset := 105];#memory_int := #memory_int[#t~string136.base,3 + #t~string136.offset := 0];call #t~string138.base, #t~string138.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string138.base,#t~string138.offset := 32];#memory_int := #memory_int[#t~string138.base,1 + #t~string138.offset := 37];#memory_int := #memory_int[#t~string138.base,2 + #t~string138.offset := 105];#memory_int := #memory_int[#t~string138.base,3 + #t~string138.offset := 0];call #t~string140.base, #t~string140.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string140.base,#t~string140.offset := 32];#memory_int := #memory_int[#t~string140.base,1 + #t~string140.offset := 37];#memory_int := #memory_int[#t~string140.base,2 + #t~string140.offset := 105];#memory_int := #memory_int[#t~string140.base,3 + #t~string140.offset := 0];call #t~string142.base, #t~string142.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string142.base,#t~string142.offset := 32];#memory_int := #memory_int[#t~string142.base,1 + #t~string142.offset := 37];#memory_int := #memory_int[#t~string142.base,2 + #t~string142.offset := 105];#memory_int := #memory_int[#t~string142.base,3 + #t~string142.offset := 0];call #t~string144.base, #t~string144.offset := #Ultimate.alloc(6);#memory_int := #memory_int[#t~string144.base,#t~string144.offset := 32];#memory_int := #memory_int[#t~string144.base,1 + #t~string144.offset := 70];#memory_int := #memory_int[#t~string144.base,2 + #t~string144.offset := 95];#memory_int := #memory_int[#t~string144.base,3 + #t~string144.offset := 112];#memory_int := #memory_int[#t~string144.base,4 + #t~string144.offset := 58];#memory_int := #memory_int[#t~string144.base,5 + #t~string144.offset := 0];call #t~string147.base, #t~string147.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string147.base,#t~string147.offset := 32];#memory_int := #memory_int[#t~string147.base,1 + #t~string147.offset := 37];#memory_int := #memory_int[#t~string147.base,2 + #t~string147.offset := 105];#memory_int := #memory_int[#t~string147.base,3 + #t~string147.offset := 0];call #t~string150.base, #t~string150.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string150.base,#t~string150.offset := 32];#memory_int := #memory_int[#t~string150.base,1 + #t~string150.offset := 37];#memory_int := #memory_int[#t~string150.base,2 + #t~string150.offset := 105];#memory_int := #memory_int[#t~string150.base,3 + #t~string150.offset := 0];call #t~string153.base, #t~string153.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string153.base,#t~string153.offset := 32];#memory_int := #memory_int[#t~string153.base,1 + #t~string153.offset := 37];#memory_int := #memory_int[#t~string153.base,2 + #t~string153.offset := 105];#memory_int := #memory_int[#t~string153.base,3 + #t~string153.offset := 0];call #t~string156.base, #t~string156.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string156.base,#t~string156.offset := 32];#memory_int := #memory_int[#t~string156.base,1 + #t~string156.offset := 37];#memory_int := #memory_int[#t~string156.base,2 + #t~string156.offset := 105];#memory_int := #memory_int[#t~string156.base,3 + #t~string156.offset := 0];call #t~string159.base, #t~string159.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string159.base,#t~string159.offset := 32];#memory_int := #memory_int[#t~string159.base,1 + #t~string159.offset := 37];#memory_int := #memory_int[#t~string159.base,2 + #t~string159.offset := 105];#memory_int := #memory_int[#t~string159.base,3 + #t~string159.offset := 0];call #t~string161.base, #t~string161.offset := #Ultimate.alloc(2);#memory_int := #memory_int[#t~string161.base,#t~string161.offset := 10];#memory_int := #memory_int[#t~string161.base,1 + #t~string161.offset := 0];~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~expectedDirection~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 8527#L-1true assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res;havoc main_#t~ret177, main_~retValue_acc~31, main_~tmp~30;havoc main_~retValue_acc~31;havoc main_~tmp~30;assume { :begin_inline_select_helpers } true; 855#L73true assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 384#L66true assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res;havoc valid_product_~retValue_acc~1;havoc valid_product_~retValue_acc~1;valid_product_~retValue_acc~1 := 1;valid_product_#res := valid_product_~retValue_acc~1; 558#L81true main_#t~ret177 := valid_product_#res;assume { :end_inline_valid_product } true;main_~tmp~30 := main_#t~ret177;havoc main_#t~ret177; 7211#L3495true assume 0 != main_~tmp~30;assume { :begin_inline_setup } true; 2563#L3472true assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 6517#L842true assume { :end_inline_initFloors } true; 8220#L1590true assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret165, bobCall_~tmp~22;havoc bobCall_~tmp~22;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~9;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~9; 493#L1473true assume 0 == getOrigin_~person;getOrigin_~retValue_acc~9 := 4;getOrigin_#res := getOrigin_~retValue_acc~9; 3353#L1498true bobCall_#t~ret165 := getOrigin_#res;assume { :end_inline_getOrigin } true;bobCall_~tmp~22 := bobCall_#t~ret165;havoc bobCall_#t~ret165;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~22;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 524#L1120true assume 0 == initPersonOnFloor_~floor; 350#L1121true assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 5477#L1228-1true assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 7971#L912true assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 1302#L924-2true assume { :end_inline_callOnFloor } true; 7974#L1264true assume { :end_inline_initPersonOnFloor } true; 1902#L3222true assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_~tmp~20, timeShift_~tmp___0~11, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~20;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_#t~ret3, __utac_acc__Specification3_spec__1_#t~ret4, __utac_acc__Specification3_spec__1_#t~ret5, __utac_acc__Specification3_spec__1_#t~ret6, __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_#t~ret12, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 8050#L1794true __utac_acc__Specification3_spec__1_#t~ret1 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~15;havoc getCurrentHeading_~retValue_acc~15;getCurrentHeading_~retValue_acc~15 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~15; 3485#L1846true __utac_acc__Specification3_spec__1_#t~ret2 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret2;havoc __utac_acc__Specification3_spec__1_#t~ret2; 2091#L115true assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 8432#L177true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~14;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~14; 1037#L1811-5true assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~14 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~14; 4#L1832-5true __utac_acc__Specification3_spec__1_#t~ret8 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret8;havoc __utac_acc__Specification3_spec__1_#t~ret8; 8394#L181true assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 1116#L221true assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_#t~ret90, stopRequestedAtCurrentFloor_#t~ret91, stopRequestedAtCurrentFloor_#t~ret92, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~18, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~18;havoc stopRequestedAtCurrentFloor_~tmp___0~9;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret163, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 7248#L849true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 8811#L876true isExecutiveFloorCalling_#t~ret163 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret163;havoc isExecutiveFloorCalling_#t~ret163;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 4992#L3147true stopRequestedAtCurrentFloor_#t~ret89 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~18 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 284#L2531true assume 0 != stopRequestedAtCurrentFloor_~tmp~18;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 8053#L1794-1true stopRequestedAtCurrentFloor_#t~ret90 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret90;havoc stopRequestedAtCurrentFloor_#t~ret90; 231#L2535true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 633#L2548true timeShift_#t~ret105 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3 := timeShift_#t~ret105;havoc timeShift_#t~ret105; 1340#L2684true assume !(0 != timeShift_~tmp___9~3); 6768#L2775true assume !(1 == ~doorState~0); 6773#L2775-2true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~14, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~6;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~14;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~6;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret163, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 7242#L849-3true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 8797#L876-3true isExecutiveFloorCalling_#t~ret163 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret163;havoc isExecutiveFloorCalling_#t~ret163;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 4989#L3147-1true stopRequestedInDirection_#t~ret80 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~6 := stopRequestedInDirection_#t~ret80;havoc stopRequestedInDirection_#t~ret80; 4121#L2386true assume 0 != stopRequestedInDirection_~tmp___0~6;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 8038#L1794-4true stopRequestedInDirection_#t~ret81 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~14 := stopRequestedInDirection_#t~ret81;havoc stopRequestedInDirection_#t~ret81;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~6 := (if stopRequestedInDirection_~tmp~14 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~21 := (if stopRequestedInDirection_~__cil_tmp8~6 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 2247#L2399true timeShift_#t~ret112 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 7505#L2783true assume 0 != timeShift_~tmp___8~3;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret83, continueInDirection_~dir, continueInDirection_~tmp~15;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~15;~currentHeading~0 := continueInDirection_~dir; 4901#L2443true assume !(1 == ~currentHeading~0); 6263#L2453true assume !(0 == ~currentFloorID~0); 5898#L2453-2true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 5459#L2459-1true assume { :end_inline_continueInDirection } true; 5245#L2792-2true assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret13, __utac_acc__Specification3_spec__2_#t~ret14, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 48#L246true assume !(-1 == ~expectedDirection~0); 638#L258true assume !(1 == ~expectedDirection~0); 620#L259true assume { :end_inline___utac_acc__Specification3_spec__2 } true; 6032#L2807true assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_~tmp~20, timeShift_~tmp___0~11, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~20;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_#t~ret3, __utac_acc__Specification3_spec__1_#t~ret4, __utac_acc__Specification3_spec__1_#t~ret5, __utac_acc__Specification3_spec__1_#t~ret6, __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_#t~ret12, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 8045#L1794-6true __utac_acc__Specification3_spec__1_#t~ret1 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~15;havoc getCurrentHeading_~retValue_acc~15;getCurrentHeading_~retValue_acc~15 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~15; 3527#L1846-3true __utac_acc__Specification3_spec__1_#t~ret2 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret2;havoc __utac_acc__Specification3_spec__1_#t~ret2; 2090#L115-1true assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 8430#L177-1true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~14;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~14; 1015#L1811-19true assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~14 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~14; 139#L1832-19true __utac_acc__Specification3_spec__1_#t~ret8 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret8;havoc __utac_acc__Specification3_spec__1_#t~ret8; 8369#L181-2true assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 1113#L221-1true assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_#t~ret90, stopRequestedAtCurrentFloor_#t~ret91, stopRequestedAtCurrentFloor_#t~ret92, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~18, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~18;havoc stopRequestedAtCurrentFloor_~tmp___0~9;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret163, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 7118#L849-65true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 8834#L876-65true isExecutiveFloorCalling_#t~ret163 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret163;havoc isExecutiveFloorCalling_#t~ret163;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 4961#L3147-3true stopRequestedAtCurrentFloor_#t~ret89 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~18 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 291#L2531-1true assume 0 != stopRequestedAtCurrentFloor_~tmp~18;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 8044#L1794-7true stopRequestedAtCurrentFloor_#t~ret90 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret90;havoc stopRequestedAtCurrentFloor_#t~ret90; 234#L2535-1true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 631#L2548-1true timeShift_#t~ret105 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3 := timeShift_#t~ret105;havoc timeShift_#t~ret105; 1341#L2684-2true assume !(0 != timeShift_~tmp___9~3); 6598#L2775-3true assume !(1 == ~doorState~0); 6601#L2775-5true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~14, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~6;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~14;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~6;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret163, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 7087#L849-68true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 8827#L876-68true isExecutiveFloorCalling_#t~ret163 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret163;havoc isExecutiveFloorCalling_#t~ret163;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 4965#L3147-4true stopRequestedInDirection_#t~ret80 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~6 := stopRequestedInDirection_#t~ret80;havoc stopRequestedInDirection_#t~ret80; 4130#L2386-2true assume 0 != stopRequestedInDirection_~tmp___0~6;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 8028#L1794-10true stopRequestedInDirection_#t~ret81 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~14 := stopRequestedInDirection_#t~ret81;havoc stopRequestedInDirection_#t~ret81;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~6 := (if stopRequestedInDirection_~tmp~14 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~21 := (if stopRequestedInDirection_~__cil_tmp8~6 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 2233#L2399-2true timeShift_#t~ret112 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 7502#L2783-2true assume 0 != timeShift_~tmp___8~3;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret83, continueInDirection_~dir, continueInDirection_~tmp~15;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~15;~currentHeading~0 := continueInDirection_~dir; 4877#L2443-3true assume !(1 == ~currentHeading~0); 5890#L2453-9true assume !(0 == ~currentFloorID~0); 5893#L2453-11true assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 5440#L2459-7true assume { :end_inline_continueInDirection } true; 5224#L2792-5true assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret13, __utac_acc__Specification3_spec__2_#t~ret14, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 46#L246-1true assume !(-1 == ~expectedDirection~0); 636#L258-1true assume !(1 == ~expectedDirection~0); 618#L259-1true assume { :end_inline___utac_acc__Specification3_spec__2 } true; 6042#L2807-1true assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_~tmp~20, timeShift_~tmp___0~11, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~20;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_#t~ret3, __utac_acc__Specification3_spec__1_#t~ret4, __utac_acc__Specification3_spec__1_#t~ret5, __utac_acc__Specification3_spec__1_#t~ret6, __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_#t~ret12, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 8031#L1794-12true __utac_acc__Specification3_spec__1_#t~ret1 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~15;havoc getCurrentHeading_~retValue_acc~15;getCurrentHeading_~retValue_acc~15 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~15; 3532#L1846-6true __utac_acc__Specification3_spec__1_#t~ret2 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret2;havoc __utac_acc__Specification3_spec__1_#t~ret2; 2087#L115-2true assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 2998#L116-2true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~14;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~14; 1949#L1811-28true assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~14 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~14; 116#L1832-28true __utac_acc__Specification3_spec__1_#t~ret3 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~0 := __utac_acc__Specification3_spec__1_#t~ret3;havoc __utac_acc__Specification3_spec__1_#t~ret3; 2923#L120-4true assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0;~expectedDirection~0 := 1; 1110#L221-2true assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_#t~ret90, stopRequestedAtCurrentFloor_#t~ret91, stopRequestedAtCurrentFloor_#t~ret92, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~18, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~18;havoc stopRequestedAtCurrentFloor_~tmp___0~9;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret163, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 7173#L849-130true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 8724#L876-130true isExecutiveFloorCalling_#t~ret163 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret163;havoc isExecutiveFloorCalling_#t~ret163;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 4971#L3147-6true stopRequestedAtCurrentFloor_#t~ret89 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~18 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 296#L2531-2true assume 0 != stopRequestedAtCurrentFloor_~tmp~18;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 8036#L1794-13true stopRequestedAtCurrentFloor_#t~ret90 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret90;havoc stopRequestedAtCurrentFloor_#t~ret90; 237#L2535-2true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 635#L2548-2true timeShift_#t~ret105 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3 := timeShift_#t~ret105;havoc timeShift_#t~ret105; 1331#L2684-4true assume !(0 != timeShift_~tmp___9~3); 6602#L2775-6true assume !(1 == ~doorState~0); 6605#L2775-8true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~14, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~6;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~14;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~6;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret163, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 7152#L849-133true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 8701#L876-133true isExecutiveFloorCalling_#t~ret163 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret163;havoc isExecutiveFloorCalling_#t~ret163;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 4944#L3147-7true stopRequestedInDirection_#t~ret80 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~6 := stopRequestedInDirection_#t~ret80;havoc stopRequestedInDirection_#t~ret80; 4112#L2386-4true assume 0 != stopRequestedInDirection_~tmp___0~6;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 8011#L1794-16true stopRequestedInDirection_#t~ret81 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~14 := stopRequestedInDirection_#t~ret81;havoc stopRequestedInDirection_#t~ret81;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~6 := (if stopRequestedInDirection_~tmp~14 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~21 := (if stopRequestedInDirection_~__cil_tmp8~6 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 2235#L2399-4true timeShift_#t~ret112 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 7503#L2783-4true assume 0 != timeShift_~tmp___8~3;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret83, continueInDirection_~dir, continueInDirection_~tmp~15;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~15;~currentHeading~0 := continueInDirection_~dir; 4893#L2443-6true assume !(1 == ~currentHeading~0); 5821#L2453-18true assume !(0 == ~currentFloorID~0); 5839#L2453-20true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 5431#L2459-13true assume { :end_inline_continueInDirection } true; 5237#L2792-8true assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret13, __utac_acc__Specification3_spec__2_#t~ret14, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 37#L246-2true assume !(-1 == ~expectedDirection~0); 634#L258-2true assume !(1 == ~expectedDirection~0); 617#L259-2true assume { :end_inline___utac_acc__Specification3_spec__2 } true; 6048#L2807-2true assume { :end_inline_timeShift } true; 3056#L3289true assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret165, bobCall_~tmp~22;havoc bobCall_~tmp~22;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~9;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~9; 494#L1473-1true assume 0 == getOrigin_~person;getOrigin_~retValue_acc~9 := 4;getOrigin_#res := getOrigin_~retValue_acc~9; 3336#L1498-1true bobCall_#t~ret165 := getOrigin_#res;assume { :end_inline_getOrigin } true;bobCall_~tmp~22 := bobCall_#t~ret165;havoc bobCall_#t~ret165;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~22;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 525#L1120-1true assume 0 == initPersonOnFloor_~floor; 354#L1121-2true assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 8816#L1228-3true assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 7970#L912-2true assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 1292#L924-5true assume { :end_inline_callOnFloor } true; 7975#L1264-1true assume { :end_inline_initPersonOnFloor } true; 1895#L3222-1true assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret171, cleanup_#t~ret172, cleanup_~i~3, cleanup_~tmp~28, cleanup_~tmp___0~13, cleanup_~__cil_tmp4~3;havoc cleanup_~i~3;havoc cleanup_~tmp~28;havoc cleanup_~tmp___0~13;havoc cleanup_~__cil_tmp4~3;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_~tmp~20, timeShift_~tmp___0~11, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~20;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_#t~ret3, __utac_acc__Specification3_spec__1_#t~ret4, __utac_acc__Specification3_spec__1_#t~ret5, __utac_acc__Specification3_spec__1_#t~ret6, __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_#t~ret12, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 8022#L1794-18true __utac_acc__Specification3_spec__1_#t~ret1 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~15;havoc getCurrentHeading_~retValue_acc~15;getCurrentHeading_~retValue_acc~15 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~15; 3523#L1846-9true __utac_acc__Specification3_spec__1_#t~ret2 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret2;havoc __utac_acc__Specification3_spec__1_#t~ret2; 2086#L115-3true assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 2994#L116-3true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~14;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~14; 1907#L1811-42true assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~14 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~14; 71#L1832-42true __utac_acc__Specification3_spec__1_#t~ret3 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~0 := __utac_acc__Specification3_spec__1_#t~ret3;havoc __utac_acc__Specification3_spec__1_#t~ret3; 2919#L120-6true assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0;~expectedDirection~0 := 1; 1108#L221-3true assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_#t~ret90, stopRequestedAtCurrentFloor_#t~ret91, stopRequestedAtCurrentFloor_#t~ret92, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~18, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~18;havoc stopRequestedAtCurrentFloor_~tmp___0~9;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret163, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 5389#L849-195true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 8411#L876-195true isExecutiveFloorCalling_#t~ret163 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret163;havoc isExecutiveFloorCalling_#t~ret163;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 4941#L3147-9true stopRequestedAtCurrentFloor_#t~ret89 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~18 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 304#L2531-3true assume 0 != stopRequestedAtCurrentFloor_~tmp~18;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 8021#L1794-19true stopRequestedAtCurrentFloor_#t~ret90 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret90;havoc stopRequestedAtCurrentFloor_#t~ret90; 223#L2535-3true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 639#L2548-3true timeShift_#t~ret105 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3 := timeShift_#t~ret105;havoc timeShift_#t~ret105; 1333#L2684-6true assume !(0 != timeShift_~tmp___9~3); 6587#L2775-9true assume !(1 == ~doorState~0); 6593#L2775-11true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~14, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~6;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~14;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~6;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret163, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 5397#L849-198true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 8414#L876-198true isExecutiveFloorCalling_#t~ret163 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret163;havoc isExecutiveFloorCalling_#t~ret163;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 4959#L3147-10true stopRequestedInDirection_#t~ret80 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~6 := stopRequestedInDirection_#t~ret80;havoc stopRequestedInDirection_#t~ret80; 4118#L2386-6true assume 0 != stopRequestedInDirection_~tmp___0~6;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 8002#L1794-22true stopRequestedInDirection_#t~ret81 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~14 := stopRequestedInDirection_#t~ret81;havoc stopRequestedInDirection_#t~ret81;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~6 := (if stopRequestedInDirection_~tmp~14 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~21 := (if stopRequestedInDirection_~__cil_tmp8~6 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 2221#L2399-6true timeShift_#t~ret112 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 7500#L2783-6true assume 0 != timeShift_~tmp___8~3;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret83, continueInDirection_~dir, continueInDirection_~tmp~15;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~15;~currentHeading~0 := continueInDirection_~dir; 4846#L2443-9true assume !(1 == ~currentHeading~0); 5813#L2453-27true assume !(0 == ~currentFloorID~0); 5772#L2453-29true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 5426#L2459-19true assume { :end_inline_continueInDirection } true; 5214#L2792-11true assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret13, __utac_acc__Specification3_spec__2_#t~ret14, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 35#L246-3true assume !(-1 == ~expectedDirection~0); 632#L258-3true assume !(1 == ~expectedDirection~0); 616#L259-3true assume { :end_inline___utac_acc__Specification3_spec__2 } true; 6010#L2807-3true assume { :end_inline_timeShift } true;cleanup_~i~3 := 0; 6582#L3304-3true [2018-11-18 13:53:29,557 INFO L796 eck$LassoCheckResult]: Loop: 6582#L3304-3true assume true; 6579#L3304-1true assume !false; 6686#L3305true cleanup_~__cil_tmp4~3 := ~cleanupTimeShifts~0 - 1; 6531#L3308true assume cleanup_~i~3 < cleanup_~__cil_tmp4~3;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~11;havoc isBlocked_~retValue_acc~11;isBlocked_~retValue_acc~11 := 0;isBlocked_#res := isBlocked_~retValue_acc~11; 7966#L1621true cleanup_#t~ret171 := isBlocked_#res;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~13 := cleanup_#t~ret171;havoc cleanup_#t~ret171; 7407#L3312true assume 1 != cleanup_~tmp___0~13; 7408#L3312-1true assume { :begin_inline_isIdle } true;havoc isIdle_#res;havoc isIdle_#t~ret64, isIdle_~retValue_acc~18, isIdle_~tmp~11;havoc isIdle_~retValue_acc~18;havoc isIdle_~tmp~11;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret59, anyStopRequested_#t~ret60, anyStopRequested_#t~ret61, anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_~retValue_acc~17, anyStopRequested_~tmp~10, anyStopRequested_~tmp___0~4, anyStopRequested_~tmp___1~3, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~1;havoc anyStopRequested_~retValue_acc~17;havoc anyStopRequested_~tmp~10;havoc anyStopRequested_~tmp___0~4;havoc anyStopRequested_~tmp___1~3;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 4900#L849-260true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 8290#L876-260true anyStopRequested_#t~ret59 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1 := anyStopRequested_#t~ret59;havoc anyStopRequested_#t~ret59; 7504#L1902true assume 0 != anyStopRequested_~tmp___3~1;anyStopRequested_~retValue_acc~17 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~17; 8126#L1966true isIdle_#t~ret64 := anyStopRequested_#res;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~11 := isIdle_#t~ret64;havoc isIdle_#t~ret64;isIdle_~retValue_acc~18 := (if 0 == isIdle_~tmp~11 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~18; 1352#L1979true cleanup_#t~ret172 := isIdle_#res;assume { :end_inline_isIdle } true;cleanup_~tmp~28 := cleanup_#t~ret172;havoc cleanup_#t~ret172; 4888#L3324true assume !(0 != cleanup_~tmp~28);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_~tmp~20, timeShift_~tmp___0~11, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~20;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_#t~ret3, __utac_acc__Specification3_spec__1_#t~ret4, __utac_acc__Specification3_spec__1_#t~ret5, __utac_acc__Specification3_spec__1_#t~ret6, __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_#t~ret12, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 8005#L1794-24true __utac_acc__Specification3_spec__1_#t~ret1 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~15;havoc getCurrentHeading_~retValue_acc~15;getCurrentHeading_~retValue_acc~15 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~15; 3526#L1846-12true __utac_acc__Specification3_spec__1_#t~ret2 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret2;havoc __utac_acc__Specification3_spec__1_#t~ret2; 2083#L115-4true assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 2992#L116-4true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~14;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~14; 1879#L1811-56true assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~14 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~14; 927#L1832-56true __utac_acc__Specification3_spec__1_#t~ret3 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~0 := __utac_acc__Specification3_spec__1_#t~ret3;havoc __utac_acc__Specification3_spec__1_#t~ret3; 2915#L120-8true assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0;~expectedDirection~0 := 1; 1130#L221-4true assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_#t~ret90, stopRequestedAtCurrentFloor_#t~ret91, stopRequestedAtCurrentFloor_#t~ret92, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~18, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~18;havoc stopRequestedAtCurrentFloor_~tmp___0~9;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret163, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 4874#L849-265true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 8273#L876-265true isExecutiveFloorCalling_#t~ret163 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret163;havoc isExecutiveFloorCalling_#t~ret163;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 4956#L3147-12true stopRequestedAtCurrentFloor_#t~ret89 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~18 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 300#L2531-4true assume 0 != stopRequestedAtCurrentFloor_~tmp~18;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 7983#L1794-25true stopRequestedAtCurrentFloor_#t~ret90 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret90;havoc stopRequestedAtCurrentFloor_#t~ret90; 222#L2535-4true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 640#L2548-4true timeShift_#t~ret105 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3 := timeShift_#t~ret105;havoc timeShift_#t~ret105; 1236#L2684-8true assume !(0 != timeShift_~tmp___9~3); 6590#L2775-12true assume 1 == ~doorState~0;~doorState~0 := 0; 6578#L2775-14true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~14, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~6;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~14;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~6;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret163, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 4891#L849-268true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 8282#L876-268true isExecutiveFloorCalling_#t~ret163 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret163;havoc isExecutiveFloorCalling_#t~ret163;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 4927#L3147-13true stopRequestedInDirection_#t~ret80 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~6 := stopRequestedInDirection_#t~ret80;havoc stopRequestedInDirection_#t~ret80; 4119#L2386-8true assume 0 != stopRequestedInDirection_~tmp___0~6;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 7988#L1794-28true stopRequestedInDirection_#t~ret81 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~14 := stopRequestedInDirection_#t~ret81;havoc stopRequestedInDirection_#t~ret81;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~6 := (if stopRequestedInDirection_~tmp~14 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~21 := (if stopRequestedInDirection_~__cil_tmp8~6 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 2224#L2399-8true timeShift_#t~ret112 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 7501#L2783-8true assume 0 != timeShift_~tmp___8~3;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret83, continueInDirection_~dir, continueInDirection_~tmp~15;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~15;~currentHeading~0 := continueInDirection_~dir; 4858#L2443-12true assume !(1 == ~currentHeading~0); 5751#L2453-36true assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 5755#L2453-38true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 5418#L2459-25true assume { :end_inline_continueInDirection } true; 5223#L2792-14true assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret13, __utac_acc__Specification3_spec__2_#t~ret14, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 34#L246-4true assume !(-1 == ~expectedDirection~0); 626#L258-4true assume !(1 == ~expectedDirection~0); 615#L259-4true assume { :end_inline___utac_acc__Specification3_spec__2 } true; 6004#L2807-4true assume { :end_inline_timeShift } true;cleanup_~i~3 := 1 + cleanup_~i~3; 6582#L3304-3true [2018-11-18 13:53:29,564 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 13:53:29,565 INFO L82 PathProgramCache]: Analyzing trace with hash -1810120676, now seen corresponding path program 1 times [2018-11-18 13:53:29,567 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 13:53:29,567 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 13:53:29,607 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 13:53:29,607 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 13:53:29,607 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 13:53:29,687 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 13:53:30,525 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 13:53:30,527 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 13:53:30,527 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-18 13:53:30,530 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-18 13:53:30,530 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 13:53:30,530 INFO L82 PathProgramCache]: Analyzing trace with hash 1600045610, now seen corresponding path program 1 times [2018-11-18 13:53:30,530 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 13:53:30,530 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 13:53:30,531 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 13:53:30,531 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 13:53:30,531 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 13:53:30,541 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 13:53:30,582 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 13:53:30,582 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 13:53:30,582 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-18 13:53:30,583 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-18 13:53:30,592 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-11-18 13:53:30,593 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-18 13:53:30,594 INFO L87 Difference]: Start difference. First operand 9384 states. Second operand 5 states. [2018-11-18 13:53:35,596 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 13:53:35,597 INFO L93 Difference]: Finished difference Result 18859 states and 35069 transitions. [2018-11-18 13:53:35,597 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2018-11-18 13:53:35,598 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 18859 states and 35069 transitions. [2018-11-18 13:53:35,674 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 3922 [2018-11-18 13:53:35,734 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 18859 states to 18777 states and 34974 transitions. [2018-11-18 13:53:35,735 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 18777 [2018-11-18 13:53:35,751 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 18777 [2018-11-18 13:53:35,752 INFO L73 IsDeterministic]: Start isDeterministic. Operand 18777 states and 34974 transitions. [2018-11-18 13:53:35,773 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-18 13:53:35,773 INFO L705 BuchiCegarLoop]: Abstraction has 18777 states and 34974 transitions. [2018-11-18 13:53:35,799 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 18777 states and 34974 transitions. [2018-11-18 13:53:36,001 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 18777 to 18191. [2018-11-18 13:53:36,001 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 18191 states. [2018-11-18 13:53:36,021 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 18191 states to 18191 states and 34019 transitions. [2018-11-18 13:53:36,022 INFO L728 BuchiCegarLoop]: Abstraction has 18191 states and 34019 transitions. [2018-11-18 13:53:36,022 INFO L608 BuchiCegarLoop]: Abstraction has 18191 states and 34019 transitions. [2018-11-18 13:53:36,023 INFO L442 BuchiCegarLoop]: ======== Iteration 2============ [2018-11-18 13:53:36,023 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 18191 states and 34019 transitions. [2018-11-18 13:53:36,173 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 3686 [2018-11-18 13:53:36,173 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-18 13:53:36,173 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-18 13:53:36,177 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 13:53:36,177 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 13:53:36,178 INFO L794 eck$LassoCheckResult]: Stem: 31434#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];call #t~string33.base, #t~string33.offset := #Ultimate.alloc(30);call #t~string34.base, #t~string34.offset := #Ultimate.alloc(9);call #t~string35.base, #t~string35.offset := #Ultimate.alloc(21);call #t~string36.base, #t~string36.offset := #Ultimate.alloc(30);call #t~string37.base, #t~string37.offset := #Ultimate.alloc(9);call #t~string38.base, #t~string38.offset := #Ultimate.alloc(21);call #t~string42.base, #t~string42.offset := #Ultimate.alloc(30);call #t~string43.base, #t~string43.offset := #Ultimate.alloc(9);call #t~string44.base, #t~string44.offset := #Ultimate.alloc(25);call #t~string45.base, #t~string45.offset := #Ultimate.alloc(30);call #t~string46.base, #t~string46.offset := #Ultimate.alloc(9);call #t~string47.base, #t~string47.offset := #Ultimate.alloc(25);call #t~string116.base, #t~string116.offset := #Ultimate.alloc(10);call #t~string118.base, #t~string118.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string118.base,#t~string118.offset := 91];#memory_int := #memory_int[#t~string118.base,1 + #t~string118.offset := 95];#memory_int := #memory_int[#t~string118.base,2 + #t~string118.offset := 93];#memory_int := #memory_int[#t~string118.base,3 + #t~string118.offset := 0];call #t~string120.base, #t~string120.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string120.base,#t~string120.offset := 91];#memory_int := #memory_int[#t~string120.base,1 + #t~string120.offset := 93];#memory_int := #memory_int[#t~string120.base,2 + #t~string120.offset := 32];#memory_int := #memory_int[#t~string120.base,3 + #t~string120.offset := 0];call #t~string122.base, #t~string122.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string122.base,#t~string122.offset := 32];#memory_int := #memory_int[#t~string122.base,1 + #t~string122.offset := 97];#memory_int := #memory_int[#t~string122.base,2 + #t~string122.offset := 116];#memory_int := #memory_int[#t~string122.base,3 + #t~string122.offset := 32];#memory_int := #memory_int[#t~string122.base,4 + #t~string122.offset := 0];call #t~string124.base, #t~string124.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string124.base,#t~string124.offset := 37];#memory_int := #memory_int[#t~string124.base,1 + #t~string124.offset := 105];#memory_int := #memory_int[#t~string124.base,2 + #t~string124.offset := 0];call #t~string126.base, #t~string126.offset := #Ultimate.alloc(10);call #t~string128.base, #t~string128.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string128.base,#t~string128.offset := 117];#memory_int := #memory_int[#t~string128.base,1 + #t~string128.offset := 112];#memory_int := #memory_int[#t~string128.base,2 + #t~string128.offset := 0];call #t~string130.base, #t~string130.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string130.base,#t~string130.offset := 100];#memory_int := #memory_int[#t~string130.base,1 + #t~string130.offset := 111];#memory_int := #memory_int[#t~string130.base,2 + #t~string130.offset := 119];#memory_int := #memory_int[#t~string130.base,3 + #t~string130.offset := 110];#memory_int := #memory_int[#t~string130.base,4 + #t~string130.offset := 0];call #t~string132.base, #t~string132.offset := #Ultimate.alloc(7);#memory_int := #memory_int[#t~string132.base,#t~string132.offset := 32];#memory_int := #memory_int[#t~string132.base,1 + #t~string132.offset := 73];#memory_int := #memory_int[#t~string132.base,2 + #t~string132.offset := 76];#memory_int := #memory_int[#t~string132.base,3 + #t~string132.offset := 95];#memory_int := #memory_int[#t~string132.base,4 + #t~string132.offset := 112];#memory_int := #memory_int[#t~string132.base,5 + #t~string132.offset := 58];#memory_int := #memory_int[#t~string132.base,6 + #t~string132.offset := 0];call #t~string134.base, #t~string134.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string134.base,#t~string134.offset := 32];#memory_int := #memory_int[#t~string134.base,1 + #t~string134.offset := 37];#memory_int := #memory_int[#t~string134.base,2 + #t~string134.offset := 105];#memory_int := #memory_int[#t~string134.base,3 + #t~string134.offset := 0];call #t~string136.base, #t~string136.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string136.base,#t~string136.offset := 32];#memory_int := #memory_int[#t~string136.base,1 + #t~string136.offset := 37];#memory_int := #memory_int[#t~string136.base,2 + #t~string136.offset := 105];#memory_int := #memory_int[#t~string136.base,3 + #t~string136.offset := 0];call #t~string138.base, #t~string138.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string138.base,#t~string138.offset := 32];#memory_int := #memory_int[#t~string138.base,1 + #t~string138.offset := 37];#memory_int := #memory_int[#t~string138.base,2 + #t~string138.offset := 105];#memory_int := #memory_int[#t~string138.base,3 + #t~string138.offset := 0];call #t~string140.base, #t~string140.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string140.base,#t~string140.offset := 32];#memory_int := #memory_int[#t~string140.base,1 + #t~string140.offset := 37];#memory_int := #memory_int[#t~string140.base,2 + #t~string140.offset := 105];#memory_int := #memory_int[#t~string140.base,3 + #t~string140.offset := 0];call #t~string142.base, #t~string142.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string142.base,#t~string142.offset := 32];#memory_int := #memory_int[#t~string142.base,1 + #t~string142.offset := 37];#memory_int := #memory_int[#t~string142.base,2 + #t~string142.offset := 105];#memory_int := #memory_int[#t~string142.base,3 + #t~string142.offset := 0];call #t~string144.base, #t~string144.offset := #Ultimate.alloc(6);#memory_int := #memory_int[#t~string144.base,#t~string144.offset := 32];#memory_int := #memory_int[#t~string144.base,1 + #t~string144.offset := 70];#memory_int := #memory_int[#t~string144.base,2 + #t~string144.offset := 95];#memory_int := #memory_int[#t~string144.base,3 + #t~string144.offset := 112];#memory_int := #memory_int[#t~string144.base,4 + #t~string144.offset := 58];#memory_int := #memory_int[#t~string144.base,5 + #t~string144.offset := 0];call #t~string147.base, #t~string147.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string147.base,#t~string147.offset := 32];#memory_int := #memory_int[#t~string147.base,1 + #t~string147.offset := 37];#memory_int := #memory_int[#t~string147.base,2 + #t~string147.offset := 105];#memory_int := #memory_int[#t~string147.base,3 + #t~string147.offset := 0];call #t~string150.base, #t~string150.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string150.base,#t~string150.offset := 32];#memory_int := #memory_int[#t~string150.base,1 + #t~string150.offset := 37];#memory_int := #memory_int[#t~string150.base,2 + #t~string150.offset := 105];#memory_int := #memory_int[#t~string150.base,3 + #t~string150.offset := 0];call #t~string153.base, #t~string153.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string153.base,#t~string153.offset := 32];#memory_int := #memory_int[#t~string153.base,1 + #t~string153.offset := 37];#memory_int := #memory_int[#t~string153.base,2 + #t~string153.offset := 105];#memory_int := #memory_int[#t~string153.base,3 + #t~string153.offset := 0];call #t~string156.base, #t~string156.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string156.base,#t~string156.offset := 32];#memory_int := #memory_int[#t~string156.base,1 + #t~string156.offset := 37];#memory_int := #memory_int[#t~string156.base,2 + #t~string156.offset := 105];#memory_int := #memory_int[#t~string156.base,3 + #t~string156.offset := 0];call #t~string159.base, #t~string159.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string159.base,#t~string159.offset := 32];#memory_int := #memory_int[#t~string159.base,1 + #t~string159.offset := 37];#memory_int := #memory_int[#t~string159.base,2 + #t~string159.offset := 105];#memory_int := #memory_int[#t~string159.base,3 + #t~string159.offset := 0];call #t~string161.base, #t~string161.offset := #Ultimate.alloc(2);#memory_int := #memory_int[#t~string161.base,#t~string161.offset := 10];#memory_int := #memory_int[#t~string161.base,1 + #t~string161.offset := 0];~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~expectedDirection~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 31435#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res;havoc main_#t~ret177, main_~retValue_acc~31, main_~tmp~30;havoc main_~retValue_acc~31;havoc main_~tmp~30;assume { :begin_inline_select_helpers } true; 29699#L73 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 29021#L66 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res;havoc valid_product_~retValue_acc~1;havoc valid_product_~retValue_acc~1;valid_product_~retValue_acc~1 := 1;valid_product_#res := valid_product_~retValue_acc~1; 29022#L81 main_#t~ret177 := valid_product_#res;assume { :end_inline_valid_product } true;main_~tmp~30 := main_#t~ret177;havoc main_#t~ret177; 29287#L3495 assume 0 != main_~tmp~30;assume { :begin_inline_setup } true; 31754#L3472 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 31755#L842 assume { :end_inline_initFloors } true; 36193#L1590 assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret165, bobCall_~tmp~22;havoc bobCall_~tmp~22;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~9;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~9; 29202#L1473 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~9 := 4;getOrigin_#res := getOrigin_~retValue_acc~9; 28453#L1498 bobCall_#t~ret165 := getOrigin_#res;assume { :end_inline_getOrigin } true;bobCall_~tmp~22 := bobCall_#t~ret165;havoc bobCall_#t~ret165;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~22;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 29238#L1120 assume 0 == initPersonOnFloor_~floor; 28990#L1121 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 28367#L1228-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 35544#L912 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 30229#L924-2 assume { :end_inline_callOnFloor } true; 30231#L1264 assume { :end_inline_initPersonOnFloor } true; 30866#L3222 assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_~tmp~20, timeShift_~tmp___0~11, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~20;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_#t~ret3, __utac_acc__Specification3_spec__1_#t~ret4, __utac_acc__Specification3_spec__1_#t~ret5, __utac_acc__Specification3_spec__1_#t~ret6, __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_#t~ret12, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 30867#L1794 __utac_acc__Specification3_spec__1_#t~ret1 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~15;havoc getCurrentHeading_~retValue_acc~15;getCurrentHeading_~retValue_acc~15 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~15; 32906#L1846 __utac_acc__Specification3_spec__1_#t~ret2 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret2;havoc __utac_acc__Specification3_spec__1_#t~ret2; 31089#L115 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 31090#L177 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~14;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~14; 29878#L1811-5 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~14 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~14; 28268#L1832-5 __utac_acc__Specification3_spec__1_#t~ret8 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret8;havoc __utac_acc__Specification3_spec__1_#t~ret8; 28269#L181 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 29939#L221 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_#t~ret90, stopRequestedAtCurrentFloor_#t~ret91, stopRequestedAtCurrentFloor_#t~ret92, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~18, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~18;havoc stopRequestedAtCurrentFloor_~tmp___0~9;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret163, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 36783#L849 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 34851#L876 isExecutiveFloorCalling_#t~ret163 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret163;havoc isExecutiveFloorCalling_#t~ret163;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 41130#L3147 stopRequestedAtCurrentFloor_#t~ret89 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~18 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 41128#L2531 assume 0 != stopRequestedAtCurrentFloor_~tmp~18;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 41124#L1794-1 stopRequestedAtCurrentFloor_#t~ret90 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret90;havoc stopRequestedAtCurrentFloor_#t~ret90; 41120#L2535 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 41118#L2548 timeShift_#t~ret105 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3 := timeShift_#t~ret105;havoc timeShift_#t~ret105; 41116#L2684 assume !(0 != timeShift_~tmp___9~3); 36463#L2775 assume !(1 == ~doorState~0); 36464#L2775-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~14, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~6;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~14;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~6;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret163, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 36781#L849-3 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 34882#L876-3 isExecutiveFloorCalling_#t~ret163 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret163;havoc isExecutiveFloorCalling_#t~ret163;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 38028#L3147-1 stopRequestedInDirection_#t~ret80 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~6 := stopRequestedInDirection_#t~ret80;havoc stopRequestedInDirection_#t~ret80; 33361#L2386 assume 0 != stopRequestedInDirection_~tmp___0~6;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 33363#L1794-4 stopRequestedInDirection_#t~ret81 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~14 := stopRequestedInDirection_#t~ret81;havoc stopRequestedInDirection_#t~ret81;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~6 := (if stopRequestedInDirection_~tmp~14 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~21 := (if stopRequestedInDirection_~__cil_tmp8~6 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 39695#L2399 timeShift_#t~ret112 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 36910#L2783 assume 0 != timeShift_~tmp___8~3;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret83, continueInDirection_~dir, continueInDirection_~tmp~15;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~15;~currentHeading~0 := continueInDirection_~dir; 36912#L2443 assume !(1 == ~currentHeading~0); 36080#L2453 assume !(0 == ~currentFloorID~0); 34764#L2453-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 35526#L2459-1 assume { :end_inline_continueInDirection } true; 35316#L2792-2 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret13, __utac_acc__Specification3_spec__2_#t~ret14, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 28390#L246 assume !(-1 == ~expectedDirection~0); 28392#L258 assume !(1 == ~expectedDirection~0); 29424#L259 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 36031#L2807 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_~tmp~20, timeShift_~tmp___0~11, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~20;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_#t~ret3, __utac_acc__Specification3_spec__1_#t~ret4, __utac_acc__Specification3_spec__1_#t~ret5, __utac_acc__Specification3_spec__1_#t~ret6, __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_#t~ret12, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 36032#L1794-6 __utac_acc__Specification3_spec__1_#t~ret1 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~15;havoc getCurrentHeading_~retValue_acc~15;getCurrentHeading_~retValue_acc~15 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~15; 38330#L1846-3 __utac_acc__Specification3_spec__1_#t~ret2 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret2;havoc __utac_acc__Specification3_spec__1_#t~ret2; 38326#L115-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 37763#L177-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~14;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~14; 29843#L1811-19 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~14 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~14; 28583#L1832-19 __utac_acc__Specification3_spec__1_#t~ret8 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret8;havoc __utac_acc__Specification3_spec__1_#t~ret8; 28584#L181-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 29924#L221-1 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_#t~ret90, stopRequestedAtCurrentFloor_#t~ret91, stopRequestedAtCurrentFloor_#t~ret92, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~18, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~18;havoc stopRequestedAtCurrentFloor_~tmp___0~9;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret163, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 40379#L849-65 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 40375#L876-65 isExecutiveFloorCalling_#t~ret163 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret163;havoc isExecutiveFloorCalling_#t~ret163;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 40374#L3147-3 stopRequestedAtCurrentFloor_#t~ret89 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~18 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 40372#L2531-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~18;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 40373#L1794-7 stopRequestedAtCurrentFloor_#t~ret90 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret90;havoc stopRequestedAtCurrentFloor_#t~ret90; 40343#L2535-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 40339#L2548-1 timeShift_#t~ret105 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3 := timeShift_#t~ret105;havoc timeShift_#t~ret105; 40338#L2684-2 assume !(0 != timeShift_~tmp___9~3); 40336#L2775-3 assume !(1 == ~doorState~0); 40291#L2775-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~14, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~6;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~14;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~6;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret163, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 40287#L849-68 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 40282#L876-68 isExecutiveFloorCalling_#t~ret163 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret163;havoc isExecutiveFloorCalling_#t~ret163;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 40281#L3147-4 stopRequestedInDirection_#t~ret80 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~6 := stopRequestedInDirection_#t~ret80;havoc stopRequestedInDirection_#t~ret80; 40279#L2386-2 assume 0 != stopRequestedInDirection_~tmp___0~6;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 40278#L1794-10 stopRequestedInDirection_#t~ret81 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~14 := stopRequestedInDirection_#t~ret81;havoc stopRequestedInDirection_#t~ret81;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~6 := (if stopRequestedInDirection_~tmp~14 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~21 := (if stopRequestedInDirection_~__cil_tmp8~6 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 40276#L2399-2 timeShift_#t~ret112 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 40275#L2783-2 assume 0 != timeShift_~tmp___8~3;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret83, continueInDirection_~dir, continueInDirection_~tmp~15;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~15;~currentHeading~0 := continueInDirection_~dir; 39538#L2443-3 assume !(1 == ~currentHeading~0); 35930#L2453-9 assume !(0 == ~currentFloorID~0); 34641#L2453-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 35507#L2459-7 assume { :end_inline_continueInDirection } true; 35301#L2792-5 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret13, __utac_acc__Specification3_spec__2_#t~ret14, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 28384#L246-1 assume !(-1 == ~expectedDirection~0); 28385#L258-1 assume !(1 == ~expectedDirection~0); 29399#L259-1 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 29400#L2807-1 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_~tmp~20, timeShift_~tmp___0~11, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~20;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_#t~ret3, __utac_acc__Specification3_spec__1_#t~ret4, __utac_acc__Specification3_spec__1_#t~ret5, __utac_acc__Specification3_spec__1_#t~ret6, __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_#t~ret12, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 36041#L1794-12 __utac_acc__Specification3_spec__1_#t~ret1 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~15;havoc getCurrentHeading_~retValue_acc~15;getCurrentHeading_~retValue_acc~15 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~15; 38329#L1846-6 __utac_acc__Specification3_spec__1_#t~ret2 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret2;havoc __utac_acc__Specification3_spec__1_#t~ret2; 38325#L115-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 37760#L177-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~14;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~14; 30887#L1811-33 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~14 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~14; 28518#L1832-33 __utac_acc__Specification3_spec__1_#t~ret8 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret8;havoc __utac_acc__Specification3_spec__1_#t~ret8; 28519#L181-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 29919#L221-2 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_#t~ret90, stopRequestedAtCurrentFloor_#t~ret91, stopRequestedAtCurrentFloor_#t~ret92, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~18, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~18;havoc stopRequestedAtCurrentFloor_~tmp___0~9;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret163, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 36744#L849-130 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 34813#L876-130 isExecutiveFloorCalling_#t~ret163 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret163;havoc isExecutiveFloorCalling_#t~ret163;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 37992#L3147-6 stopRequestedAtCurrentFloor_#t~ret89 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~18 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 41101#L2531-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~18;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 37517#L1794-13 stopRequestedAtCurrentFloor_#t~ret90 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret90;havoc stopRequestedAtCurrentFloor_#t~ret90; 28761#L2535-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 28762#L2548-2 timeShift_#t~ret105 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3 := timeShift_#t~ret105;havoc timeShift_#t~ret105; 29419#L2684-4 assume !(0 != timeShift_~tmp___9~3); 30259#L2775-6 assume !(1 == ~doorState~0); 36299#L2775-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~14, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~6;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~14;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~6;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret163, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 36302#L849-133 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 39678#L876-133 isExecutiveFloorCalling_#t~ret163 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret163;havoc isExecutiveFloorCalling_#t~ret163;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 39676#L3147-7 stopRequestedInDirection_#t~ret80 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~6 := stopRequestedInDirection_#t~ret80;havoc stopRequestedInDirection_#t~ret80; 39674#L2386-4 assume 0 != stopRequestedInDirection_~tmp___0~6;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 39673#L1794-16 stopRequestedInDirection_#t~ret81 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~14 := stopRequestedInDirection_#t~ret81;havoc stopRequestedInDirection_#t~ret81;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~6 := (if stopRequestedInDirection_~tmp~14 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~21 := (if stopRequestedInDirection_~__cil_tmp8~6 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 39671#L2399-4 timeShift_#t~ret112 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 36907#L2783-4 assume 0 != timeShift_~tmp___8~3;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret83, continueInDirection_~dir, continueInDirection_~tmp~15;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~15;~currentHeading~0 := continueInDirection_~dir; 36908#L2443-6 assume !(1 == ~currentHeading~0); 35883#L2453-18 assume !(0 == ~currentFloorID~0); 33895#L2453-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 45628#L2459-13 assume { :end_inline_continueInDirection } true; 45627#L2792-8 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret13, __utac_acc__Specification3_spec__2_#t~ret14, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 45625#L246-2 assume !(-1 == ~expectedDirection~0); 29417#L258-2 assume !(1 == ~expectedDirection~0); 29397#L259-2 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 29398#L2807-2 assume { :end_inline_timeShift } true; 32353#L3289 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret165, bobCall_~tmp~22;havoc bobCall_~tmp~22;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~9;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~9; 29203#L1473-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~9 := 4;getOrigin_#res := getOrigin_~retValue_acc~9; 28460#L1498-1 bobCall_#t~ret165 := getOrigin_#res;assume { :end_inline_getOrigin } true;bobCall_~tmp~22 := bobCall_#t~ret165;havoc bobCall_#t~ret165;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~22;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 29240#L1120-1 assume 0 == initPersonOnFloor_~floor; 28997#L1121-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 28373#L1228-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 38033#L912-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 45562#L924-5 assume { :end_inline_callOnFloor } true; 43101#L1264-1 assume { :end_inline_initPersonOnFloor } true; 30860#L3222-1 assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret171, cleanup_#t~ret172, cleanup_~i~3, cleanup_~tmp~28, cleanup_~tmp___0~13, cleanup_~__cil_tmp4~3;havoc cleanup_~i~3;havoc cleanup_~tmp~28;havoc cleanup_~tmp___0~13;havoc cleanup_~__cil_tmp4~3;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_~tmp~20, timeShift_~tmp___0~11, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~20;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_#t~ret3, __utac_acc__Specification3_spec__1_#t~ret4, __utac_acc__Specification3_spec__1_#t~ret5, __utac_acc__Specification3_spec__1_#t~ret6, __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_#t~ret12, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 30861#L1794-18 __utac_acc__Specification3_spec__1_#t~ret1 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~15;havoc getCurrentHeading_~retValue_acc~15;getCurrentHeading_~retValue_acc~15 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~15; 38332#L1846-9 __utac_acc__Specification3_spec__1_#t~ret2 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret2;havoc __utac_acc__Specification3_spec__1_#t~ret2; 38328#L115-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 37770#L177-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~14;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~14; 30856#L1811-47 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~14 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~14; 28423#L1832-47 __utac_acc__Specification3_spec__1_#t~ret8 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret8;havoc __utac_acc__Specification3_spec__1_#t~ret8; 28424#L181-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 29930#L221-3 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_#t~ret90, stopRequestedAtCurrentFloor_#t~ret91, stopRequestedAtCurrentFloor_#t~ret92, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~18, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~18;havoc stopRequestedAtCurrentFloor_~tmp___0~9;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret163, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 41248#L849-195 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 41243#L876-195 isExecutiveFloorCalling_#t~ret163 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret163;havoc isExecutiveFloorCalling_#t~ret163;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 35063#L3147-9 stopRequestedAtCurrentFloor_#t~ret89 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~18 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 28907#L2531-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~18;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 28909#L1794-19 stopRequestedAtCurrentFloor_#t~ret90 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret90;havoc stopRequestedAtCurrentFloor_#t~ret90; 41208#L2535-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 41206#L2548-3 timeShift_#t~ret105 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3 := timeShift_#t~ret105;havoc timeShift_#t~ret105; 41204#L2684-6 assume !(0 != timeShift_~tmp___9~3); 36284#L2775-9 assume !(1 == ~doorState~0); 36285#L2775-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~14, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~6;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~14;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~6;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret163, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 35468#L849-198 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 34349#L876-198 isExecutiveFloorCalling_#t~ret163 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret163;havoc isExecutiveFloorCalling_#t~ret163;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 37757#L3147-10 stopRequestedInDirection_#t~ret80 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~6 := stopRequestedInDirection_#t~ret80;havoc stopRequestedInDirection_#t~ret80; 39852#L2386-6 assume 0 != stopRequestedInDirection_~tmp___0~6;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 39847#L1794-22 stopRequestedInDirection_#t~ret81 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~14 := stopRequestedInDirection_#t~ret81;havoc stopRequestedInDirection_#t~ret81;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~6 := (if stopRequestedInDirection_~tmp~14 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~21 := (if stopRequestedInDirection_~__cil_tmp8~6 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 39846#L2399-6 timeShift_#t~ret112 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 39845#L2783-6 assume 0 != timeShift_~tmp___8~3;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret83, continueInDirection_~dir, continueInDirection_~tmp~15;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~15;~currentHeading~0 := continueInDirection_~dir; 39537#L2443-9 assume !(1 == ~currentHeading~0); 35876#L2453-27 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 33761#L2453-29 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 35846#L2459-19 assume { :end_inline_continueInDirection } true; 43933#L2792-11 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret13, __utac_acc__Specification3_spec__2_#t~ret14, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 43135#L246-3 assume !(-1 == ~expectedDirection~0); 43124#L258-3 assume !(1 == ~expectedDirection~0); 43122#L259-3 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 43121#L2807-3 assume { :end_inline_timeShift } true;cleanup_~i~3 := 0; 43119#L3304-3 [2018-11-18 13:53:36,181 INFO L796 eck$LassoCheckResult]: Loop: 43119#L3304-3 assume true; 43118#L3304-1 assume !false; 43117#L3305 cleanup_~__cil_tmp4~3 := ~cleanupTimeShifts~0 - 1; 43112#L3308 assume cleanup_~i~3 < cleanup_~__cil_tmp4~3;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~11;havoc isBlocked_~retValue_acc~11;isBlocked_~retValue_acc~11 := 0;isBlocked_#res := isBlocked_~retValue_acc~11; 43110#L1621 cleanup_#t~ret171 := isBlocked_#res;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~13 := cleanup_#t~ret171;havoc cleanup_#t~ret171; 43109#L3312 assume 1 != cleanup_~tmp___0~13; 43108#L3312-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res;havoc isIdle_#t~ret64, isIdle_~retValue_acc~18, isIdle_~tmp~11;havoc isIdle_~retValue_acc~18;havoc isIdle_~tmp~11;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret59, anyStopRequested_#t~ret60, anyStopRequested_#t~ret61, anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_~retValue_acc~17, anyStopRequested_~tmp~10, anyStopRequested_~tmp___0~4, anyStopRequested_~tmp___1~3, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~1;havoc anyStopRequested_~retValue_acc~17;havoc anyStopRequested_~tmp~10;havoc anyStopRequested_~tmp___0~4;havoc anyStopRequested_~tmp___1~3;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 43105#L849-260 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 43102#L876-260 anyStopRequested_#t~ret59 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1 := anyStopRequested_#t~ret59;havoc anyStopRequested_#t~ret59; 43087#L1902 assume 0 != anyStopRequested_~tmp___3~1;anyStopRequested_~retValue_acc~17 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~17; 43086#L1966 isIdle_#t~ret64 := anyStopRequested_#res;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~11 := isIdle_#t~ret64;havoc isIdle_#t~ret64;isIdle_~retValue_acc~18 := (if 0 == isIdle_~tmp~11 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~18; 30282#L1979 cleanup_#t~ret172 := isIdle_#res;assume { :end_inline_isIdle } true;cleanup_~tmp~28 := cleanup_#t~ret172;havoc cleanup_#t~ret172; 30283#L3324 assume !(0 != cleanup_~tmp~28);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_~tmp~20, timeShift_~tmp___0~11, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~20;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_#t~ret3, __utac_acc__Specification3_spec__1_#t~ret4, __utac_acc__Specification3_spec__1_#t~ret5, __utac_acc__Specification3_spec__1_#t~ret6, __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_#t~ret12, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 37493#L1794-24 __utac_acc__Specification3_spec__1_#t~ret1 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~15;havoc getCurrentHeading_~retValue_acc~15;getCurrentHeading_~retValue_acc~15 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~15; 32923#L1846-12 __utac_acc__Specification3_spec__1_#t~ret2 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret2;havoc __utac_acc__Specification3_spec__1_#t~ret2; 31069#L115-4 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 31070#L116-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~14;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~14; 30851#L1811-56 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~14 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~14; 28649#L1832-56 __utac_acc__Specification3_spec__1_#t~ret3 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~0 := __utac_acc__Specification3_spec__1_#t~ret3;havoc __utac_acc__Specification3_spec__1_#t~ret3; 29720#L120-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0;~expectedDirection~0 := 1; 30034#L221-4 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_#t~ret90, stopRequestedAtCurrentFloor_#t~ret91, stopRequestedAtCurrentFloor_#t~ret92, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~18, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~18;havoc stopRequestedAtCurrentFloor_~tmp___0~9;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret163, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 30035#L849-265 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 34695#L876-265 isExecutiveFloorCalling_#t~ret163 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret163;havoc isExecutiveFloorCalling_#t~ret163;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 35076#L3147-12 stopRequestedAtCurrentFloor_#t~ret89 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~18 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 28898#L2531-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~18;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 28900#L1794-25 stopRequestedAtCurrentFloor_#t~ret90 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret90;havoc stopRequestedAtCurrentFloor_#t~ret90; 28718#L2535-4 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 28719#L2548-4 timeShift_#t~ret105 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3 := timeShift_#t~ret105;havoc timeShift_#t~ret105; 29427#L2684-8 assume !(0 != timeShift_~tmp___9~3); 30170#L2775-12 assume 1 == ~doorState~0;~doorState~0 := 0; 36275#L2775-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~14, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~6;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~14;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~6;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret163, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 35016#L849-268 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 34612#L876-268 isExecutiveFloorCalling_#t~ret163 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret163;havoc isExecutiveFloorCalling_#t~ret163;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 35051#L3147-13 stopRequestedInDirection_#t~ret80 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~6 := stopRequestedInDirection_#t~ret80;havoc stopRequestedInDirection_#t~ret80; 33358#L2386-8 assume 0 != stopRequestedInDirection_~tmp___0~6;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 33359#L1794-28 stopRequestedInDirection_#t~ret81 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~14 := stopRequestedInDirection_#t~ret81;havoc stopRequestedInDirection_#t~ret81;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~6 := (if stopRequestedInDirection_~tmp~14 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~21 := (if stopRequestedInDirection_~__cil_tmp8~6 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 29488#L2399-8 timeShift_#t~ret112 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 31352#L2783-8 assume 0 != timeShift_~tmp___8~3;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret83, continueInDirection_~dir, continueInDirection_~tmp~15;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~15;~currentHeading~0 := continueInDirection_~dir; 34980#L2443-12 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~7;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~7;isTopFloor_~retValue_acc~7 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~7; 34981#L1423-39 continueInDirection_#t~ret83 := isTopFloor_#res;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~15 := continueInDirection_#t~ret83;havoc continueInDirection_#t~ret83; 33709#L2447-36 assume 0 != continueInDirection_~tmp~15;~currentHeading~0 := 0; 33710#L2453-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 35485#L2459-25 assume { :end_inline_continueInDirection } true; 35299#L2792-14 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret13, __utac_acc__Specification3_spec__2_#t~ret14, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 35300#L246-4 assume !(-1 == ~expectedDirection~0); 43127#L258-4 assume !(1 == ~expectedDirection~0); 43123#L259-4 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 43120#L2807-4 assume { :end_inline_timeShift } true;cleanup_~i~3 := 1 + cleanup_~i~3; 43119#L3304-3 [2018-11-18 13:53:36,188 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 13:53:36,188 INFO L82 PathProgramCache]: Analyzing trace with hash -1202644716, now seen corresponding path program 1 times [2018-11-18 13:53:36,188 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 13:53:36,189 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 13:53:36,190 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 13:53:36,190 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 13:53:36,190 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 13:53:36,221 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 13:53:37,129 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 13:53:37,129 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 13:53:37,129 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-18 13:53:37,130 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-18 13:53:37,130 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 13:53:37,130 INFO L82 PathProgramCache]: Analyzing trace with hash -252834471, now seen corresponding path program 1 times [2018-11-18 13:53:37,130 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 13:53:37,130 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 13:53:37,131 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 13:53:37,131 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 13:53:37,131 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 13:53:37,138 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 13:53:37,167 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 13:53:37,168 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 13:53:37,168 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-18 13:53:37,168 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-18 13:53:37,168 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-11-18 13:53:37,168 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-18 13:53:37,168 INFO L87 Difference]: Start difference. First operand 18191 states and 34019 transitions. cyclomatic complexity: 15829 Second operand 5 states. [2018-11-18 13:53:38,997 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 13:53:38,997 INFO L93 Difference]: Finished difference Result 25445 states and 47543 transitions. [2018-11-18 13:53:38,998 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2018-11-18 13:53:38,998 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 25445 states and 47543 transitions. [2018-11-18 13:53:39,092 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 5517 [2018-11-18 13:53:39,181 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 25445 states to 25435 states and 47533 transitions. [2018-11-18 13:53:39,181 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 25435 [2018-11-18 13:53:39,199 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 25435 [2018-11-18 13:53:39,199 INFO L73 IsDeterministic]: Start isDeterministic. Operand 25435 states and 47533 transitions. [2018-11-18 13:53:39,223 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-18 13:53:39,223 INFO L705 BuchiCegarLoop]: Abstraction has 25435 states and 47533 transitions. [2018-11-18 13:53:39,245 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 25435 states and 47533 transitions. [2018-11-18 13:53:39,486 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 25435 to 25412. [2018-11-18 13:53:39,487 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 25412 states. [2018-11-18 13:53:39,528 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 25412 states to 25412 states and 47506 transitions. [2018-11-18 13:53:39,528 INFO L728 BuchiCegarLoop]: Abstraction has 25412 states and 47506 transitions. [2018-11-18 13:53:39,528 INFO L608 BuchiCegarLoop]: Abstraction has 25412 states and 47506 transitions. [2018-11-18 13:53:39,528 INFO L442 BuchiCegarLoop]: ======== Iteration 3============ [2018-11-18 13:53:39,528 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 25412 states and 47506 transitions. [2018-11-18 13:53:39,595 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 5515 [2018-11-18 13:53:39,595 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-18 13:53:39,595 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-18 13:53:39,601 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 13:53:39,601 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 13:53:39,601 INFO L794 eck$LassoCheckResult]: Stem: 75030#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];call #t~string33.base, #t~string33.offset := #Ultimate.alloc(30);call #t~string34.base, #t~string34.offset := #Ultimate.alloc(9);call #t~string35.base, #t~string35.offset := #Ultimate.alloc(21);call #t~string36.base, #t~string36.offset := #Ultimate.alloc(30);call #t~string37.base, #t~string37.offset := #Ultimate.alloc(9);call #t~string38.base, #t~string38.offset := #Ultimate.alloc(21);call #t~string42.base, #t~string42.offset := #Ultimate.alloc(30);call #t~string43.base, #t~string43.offset := #Ultimate.alloc(9);call #t~string44.base, #t~string44.offset := #Ultimate.alloc(25);call #t~string45.base, #t~string45.offset := #Ultimate.alloc(30);call #t~string46.base, #t~string46.offset := #Ultimate.alloc(9);call #t~string47.base, #t~string47.offset := #Ultimate.alloc(25);call #t~string116.base, #t~string116.offset := #Ultimate.alloc(10);call #t~string118.base, #t~string118.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string118.base,#t~string118.offset := 91];#memory_int := #memory_int[#t~string118.base,1 + #t~string118.offset := 95];#memory_int := #memory_int[#t~string118.base,2 + #t~string118.offset := 93];#memory_int := #memory_int[#t~string118.base,3 + #t~string118.offset := 0];call #t~string120.base, #t~string120.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string120.base,#t~string120.offset := 91];#memory_int := #memory_int[#t~string120.base,1 + #t~string120.offset := 93];#memory_int := #memory_int[#t~string120.base,2 + #t~string120.offset := 32];#memory_int := #memory_int[#t~string120.base,3 + #t~string120.offset := 0];call #t~string122.base, #t~string122.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string122.base,#t~string122.offset := 32];#memory_int := #memory_int[#t~string122.base,1 + #t~string122.offset := 97];#memory_int := #memory_int[#t~string122.base,2 + #t~string122.offset := 116];#memory_int := #memory_int[#t~string122.base,3 + #t~string122.offset := 32];#memory_int := #memory_int[#t~string122.base,4 + #t~string122.offset := 0];call #t~string124.base, #t~string124.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string124.base,#t~string124.offset := 37];#memory_int := #memory_int[#t~string124.base,1 + #t~string124.offset := 105];#memory_int := #memory_int[#t~string124.base,2 + #t~string124.offset := 0];call #t~string126.base, #t~string126.offset := #Ultimate.alloc(10);call #t~string128.base, #t~string128.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string128.base,#t~string128.offset := 117];#memory_int := #memory_int[#t~string128.base,1 + #t~string128.offset := 112];#memory_int := #memory_int[#t~string128.base,2 + #t~string128.offset := 0];call #t~string130.base, #t~string130.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string130.base,#t~string130.offset := 100];#memory_int := #memory_int[#t~string130.base,1 + #t~string130.offset := 111];#memory_int := #memory_int[#t~string130.base,2 + #t~string130.offset := 119];#memory_int := #memory_int[#t~string130.base,3 + #t~string130.offset := 110];#memory_int := #memory_int[#t~string130.base,4 + #t~string130.offset := 0];call #t~string132.base, #t~string132.offset := #Ultimate.alloc(7);#memory_int := #memory_int[#t~string132.base,#t~string132.offset := 32];#memory_int := #memory_int[#t~string132.base,1 + #t~string132.offset := 73];#memory_int := #memory_int[#t~string132.base,2 + #t~string132.offset := 76];#memory_int := #memory_int[#t~string132.base,3 + #t~string132.offset := 95];#memory_int := #memory_int[#t~string132.base,4 + #t~string132.offset := 112];#memory_int := #memory_int[#t~string132.base,5 + #t~string132.offset := 58];#memory_int := #memory_int[#t~string132.base,6 + #t~string132.offset := 0];call #t~string134.base, #t~string134.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string134.base,#t~string134.offset := 32];#memory_int := #memory_int[#t~string134.base,1 + #t~string134.offset := 37];#memory_int := #memory_int[#t~string134.base,2 + #t~string134.offset := 105];#memory_int := #memory_int[#t~string134.base,3 + #t~string134.offset := 0];call #t~string136.base, #t~string136.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string136.base,#t~string136.offset := 32];#memory_int := #memory_int[#t~string136.base,1 + #t~string136.offset := 37];#memory_int := #memory_int[#t~string136.base,2 + #t~string136.offset := 105];#memory_int := #memory_int[#t~string136.base,3 + #t~string136.offset := 0];call #t~string138.base, #t~string138.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string138.base,#t~string138.offset := 32];#memory_int := #memory_int[#t~string138.base,1 + #t~string138.offset := 37];#memory_int := #memory_int[#t~string138.base,2 + #t~string138.offset := 105];#memory_int := #memory_int[#t~string138.base,3 + #t~string138.offset := 0];call #t~string140.base, #t~string140.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string140.base,#t~string140.offset := 32];#memory_int := #memory_int[#t~string140.base,1 + #t~string140.offset := 37];#memory_int := #memory_int[#t~string140.base,2 + #t~string140.offset := 105];#memory_int := #memory_int[#t~string140.base,3 + #t~string140.offset := 0];call #t~string142.base, #t~string142.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string142.base,#t~string142.offset := 32];#memory_int := #memory_int[#t~string142.base,1 + #t~string142.offset := 37];#memory_int := #memory_int[#t~string142.base,2 + #t~string142.offset := 105];#memory_int := #memory_int[#t~string142.base,3 + #t~string142.offset := 0];call #t~string144.base, #t~string144.offset := #Ultimate.alloc(6);#memory_int := #memory_int[#t~string144.base,#t~string144.offset := 32];#memory_int := #memory_int[#t~string144.base,1 + #t~string144.offset := 70];#memory_int := #memory_int[#t~string144.base,2 + #t~string144.offset := 95];#memory_int := #memory_int[#t~string144.base,3 + #t~string144.offset := 112];#memory_int := #memory_int[#t~string144.base,4 + #t~string144.offset := 58];#memory_int := #memory_int[#t~string144.base,5 + #t~string144.offset := 0];call #t~string147.base, #t~string147.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string147.base,#t~string147.offset := 32];#memory_int := #memory_int[#t~string147.base,1 + #t~string147.offset := 37];#memory_int := #memory_int[#t~string147.base,2 + #t~string147.offset := 105];#memory_int := #memory_int[#t~string147.base,3 + #t~string147.offset := 0];call #t~string150.base, #t~string150.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string150.base,#t~string150.offset := 32];#memory_int := #memory_int[#t~string150.base,1 + #t~string150.offset := 37];#memory_int := #memory_int[#t~string150.base,2 + #t~string150.offset := 105];#memory_int := #memory_int[#t~string150.base,3 + #t~string150.offset := 0];call #t~string153.base, #t~string153.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string153.base,#t~string153.offset := 32];#memory_int := #memory_int[#t~string153.base,1 + #t~string153.offset := 37];#memory_int := #memory_int[#t~string153.base,2 + #t~string153.offset := 105];#memory_int := #memory_int[#t~string153.base,3 + #t~string153.offset := 0];call #t~string156.base, #t~string156.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string156.base,#t~string156.offset := 32];#memory_int := #memory_int[#t~string156.base,1 + #t~string156.offset := 37];#memory_int := #memory_int[#t~string156.base,2 + #t~string156.offset := 105];#memory_int := #memory_int[#t~string156.base,3 + #t~string156.offset := 0];call #t~string159.base, #t~string159.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string159.base,#t~string159.offset := 32];#memory_int := #memory_int[#t~string159.base,1 + #t~string159.offset := 37];#memory_int := #memory_int[#t~string159.base,2 + #t~string159.offset := 105];#memory_int := #memory_int[#t~string159.base,3 + #t~string159.offset := 0];call #t~string161.base, #t~string161.offset := #Ultimate.alloc(2);#memory_int := #memory_int[#t~string161.base,#t~string161.offset := 10];#memory_int := #memory_int[#t~string161.base,1 + #t~string161.offset := 0];~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~expectedDirection~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 75031#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res;havoc main_#t~ret177, main_~retValue_acc~31, main_~tmp~30;havoc main_~retValue_acc~31;havoc main_~tmp~30;assume { :begin_inline_select_helpers } true; 73325#L73 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 72669#L66 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res;havoc valid_product_~retValue_acc~1;havoc valid_product_~retValue_acc~1;valid_product_~retValue_acc~1 := 1;valid_product_#res := valid_product_~retValue_acc~1; 72670#L81 main_#t~ret177 := valid_product_#res;assume { :end_inline_valid_product } true;main_~tmp~30 := main_#t~ret177;havoc main_#t~ret177; 72926#L3495 assume 0 != main_~tmp~30;assume { :begin_inline_setup } true; 75339#L3472 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 75340#L842 assume { :end_inline_initFloors } true; 79625#L1590 assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret165, bobCall_~tmp~22;havoc bobCall_~tmp~22;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~9;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~9; 72843#L1473 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~9 := 4;getOrigin_#res := getOrigin_~retValue_acc~9; 72107#L1498 bobCall_#t~ret165 := getOrigin_#res;assume { :end_inline_getOrigin } true;bobCall_~tmp~22 := bobCall_#t~ret165;havoc bobCall_#t~ret165;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~22;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 72879#L1120 assume 0 == initPersonOnFloor_~floor; 72639#L1121 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 72021#L1228-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 79039#L912 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 73848#L924-2 assume { :end_inline_callOnFloor } true; 73851#L1264 assume { :end_inline_initPersonOnFloor } true; 74465#L3222 assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_~tmp~20, timeShift_~tmp___0~11, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~20;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_#t~ret3, __utac_acc__Specification3_spec__1_#t~ret4, __utac_acc__Specification3_spec__1_#t~ret5, __utac_acc__Specification3_spec__1_#t~ret6, __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_#t~ret12, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 74466#L1794 __utac_acc__Specification3_spec__1_#t~ret1 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~15;havoc getCurrentHeading_~retValue_acc~15;getCurrentHeading_~retValue_acc~15 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~15; 76429#L1846 __utac_acc__Specification3_spec__1_#t~ret2 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret2;havoc __utac_acc__Specification3_spec__1_#t~ret2; 74685#L115 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 74686#L177 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~14;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~14; 73498#L1811-5 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~14 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~14; 71925#L1832-5 __utac_acc__Specification3_spec__1_#t~ret8 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret8;havoc __utac_acc__Specification3_spec__1_#t~ret8; 71926#L181 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 73559#L221 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_#t~ret90, stopRequestedAtCurrentFloor_#t~ret91, stopRequestedAtCurrentFloor_#t~ret92, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~18, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~18;havoc stopRequestedAtCurrentFloor_~tmp___0~9;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret163, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 87063#L849 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 87058#L876 isExecutiveFloorCalling_#t~ret163 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret163;havoc isExecutiveFloorCalling_#t~ret163;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 87057#L3147 stopRequestedAtCurrentFloor_#t~ret89 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~18 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 87055#L2531 assume 0 != stopRequestedAtCurrentFloor_~tmp~18;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 87056#L1794-1 stopRequestedAtCurrentFloor_#t~ret90 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret90;havoc stopRequestedAtCurrentFloor_#t~ret90; 87026#L2535 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 87023#L2548 timeShift_#t~ret105 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3 := timeShift_#t~ret105;havoc timeShift_#t~ret105; 87021#L2684 assume !(0 != timeShift_~tmp___9~3); 87020#L2775 assume !(1 == ~doorState~0); 87019#L2775-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~14, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~6;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~14;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~6;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret163, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 87016#L849-3 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 87008#L876-3 isExecutiveFloorCalling_#t~ret163 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret163;havoc isExecutiveFloorCalling_#t~ret163;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 87006#L3147-1 stopRequestedInDirection_#t~ret80 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~6 := stopRequestedInDirection_#t~ret80;havoc stopRequestedInDirection_#t~ret80; 87005#L2386 assume 0 != stopRequestedInDirection_~tmp___0~6;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 86895#L1794-4 stopRequestedInDirection_#t~ret81 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~14 := stopRequestedInDirection_#t~ret81;havoc stopRequestedInDirection_#t~ret81;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~6 := (if stopRequestedInDirection_~tmp~14 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~21 := (if stopRequestedInDirection_~__cil_tmp8~6 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 86893#L2399 timeShift_#t~ret112 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 86890#L2783 assume 0 != timeShift_~tmp___8~3;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret83, continueInDirection_~dir, continueInDirection_~tmp~15;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~15;~currentHeading~0 := continueInDirection_~dir; 78516#L2443 assume !(1 == ~currentHeading~0); 78517#L2453 assume !(0 == ~currentFloorID~0); 79521#L2453-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 81827#L2459-1 assume { :end_inline_continueInDirection } true; 81825#L2792-2 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret13, __utac_acc__Specification3_spec__2_#t~ret14, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 81823#L246 assume !(-1 == ~expectedDirection~0); 81819#L258 assume !(1 == ~expectedDirection~0); 81817#L259 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 81814#L2807 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_~tmp~20, timeShift_~tmp___0~11, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~20;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_#t~ret3, __utac_acc__Specification3_spec__1_#t~ret4, __utac_acc__Specification3_spec__1_#t~ret5, __utac_acc__Specification3_spec__1_#t~ret6, __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_#t~ret12, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 81812#L1794-6 __utac_acc__Specification3_spec__1_#t~ret1 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~15;havoc getCurrentHeading_~retValue_acc~15;getCurrentHeading_~retValue_acc~15 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~15; 81809#L1846-3 __utac_acc__Specification3_spec__1_#t~ret2 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret2;havoc __utac_acc__Specification3_spec__1_#t~ret2; 81432#L115-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 81007#L177-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~14;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~14; 73465#L1811-19 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~14 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~14; 72237#L1832-19 __utac_acc__Specification3_spec__1_#t~ret8 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret8;havoc __utac_acc__Specification3_spec__1_#t~ret8; 72238#L181-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 73544#L221-1 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_#t~ret90, stopRequestedAtCurrentFloor_#t~ret91, stopRequestedAtCurrentFloor_#t~ret92, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~18, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~18;havoc stopRequestedAtCurrentFloor_~tmp___0~9;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret163, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 89222#L849-65 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 89218#L876-65 isExecutiveFloorCalling_#t~ret163 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret163;havoc isExecutiveFloorCalling_#t~ret163;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 89213#L3147-3 stopRequestedAtCurrentFloor_#t~ret89 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~18 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 89210#L2531-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~18;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 89206#L1794-7 stopRequestedAtCurrentFloor_#t~ret90 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret90;havoc stopRequestedAtCurrentFloor_#t~ret90; 89201#L2535-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 89199#L2548-1 timeShift_#t~ret105 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3 := timeShift_#t~ret105;havoc timeShift_#t~ret105; 89197#L2684-2 assume !(0 != timeShift_~tmp___9~3); 89196#L2775-3 assume !(1 == ~doorState~0); 89195#L2775-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~14, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~6;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~14;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~6;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret163, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 89194#L849-68 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 89189#L876-68 isExecutiveFloorCalling_#t~ret163 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret163;havoc isExecutiveFloorCalling_#t~ret163;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 89188#L3147-4 stopRequestedInDirection_#t~ret80 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~6 := stopRequestedInDirection_#t~ret80;havoc stopRequestedInDirection_#t~ret80; 89187#L2386-2 assume 0 != stopRequestedInDirection_~tmp___0~6;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 89026#L1794-10 stopRequestedInDirection_#t~ret81 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~14 := stopRequestedInDirection_#t~ret81;havoc stopRequestedInDirection_#t~ret81;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~6 := (if stopRequestedInDirection_~tmp~14 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~21 := (if stopRequestedInDirection_~__cil_tmp8~6 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 88838#L2399-2 timeShift_#t~ret112 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 88611#L2783-2 assume 0 != timeShift_~tmp___8~3;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret83, continueInDirection_~dir, continueInDirection_~tmp~15;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~15;~currentHeading~0 := continueInDirection_~dir; 78492#L2443-3 assume !(1 == ~currentHeading~0); 78493#L2453-9 assume !(0 == ~currentFloorID~0); 78132#L2453-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 81786#L2459-7 assume { :end_inline_continueInDirection } true; 81784#L2792-5 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret13, __utac_acc__Specification3_spec__2_#t~ret14, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 81782#L246-1 assume !(-1 == ~expectedDirection~0); 81779#L258-1 assume !(1 == ~expectedDirection~0); 81777#L259-1 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 81776#L2807-1 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_~tmp~20, timeShift_~tmp___0~11, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~20;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_#t~ret3, __utac_acc__Specification3_spec__1_#t~ret4, __utac_acc__Specification3_spec__1_#t~ret5, __utac_acc__Specification3_spec__1_#t~ret6, __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_#t~ret12, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 81775#L1794-12 __utac_acc__Specification3_spec__1_#t~ret1 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~15;havoc getCurrentHeading_~retValue_acc~15;getCurrentHeading_~retValue_acc~15 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~15; 81774#L1846-6 __utac_acc__Specification3_spec__1_#t~ret2 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret2;havoc __utac_acc__Specification3_spec__1_#t~ret2; 81431#L115-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 81005#L177-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~14;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~14; 74484#L1811-33 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~14 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~14; 72172#L1832-33 __utac_acc__Specification3_spec__1_#t~ret8 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret8;havoc __utac_acc__Specification3_spec__1_#t~ret8; 72173#L181-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 73539#L221-2 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_#t~ret90, stopRequestedAtCurrentFloor_#t~ret91, stopRequestedAtCurrentFloor_#t~ret92, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~18, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~18;havoc stopRequestedAtCurrentFloor_~tmp___0~9;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret163, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 89580#L849-130 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 89576#L876-130 isExecutiveFloorCalling_#t~ret163 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret163;havoc isExecutiveFloorCalling_#t~ret163;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 89570#L3147-6 stopRequestedAtCurrentFloor_#t~ret89 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~18 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 89568#L2531-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~18;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 89569#L1794-13 stopRequestedAtCurrentFloor_#t~ret90 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret90;havoc stopRequestedAtCurrentFloor_#t~ret90; 89530#L2535-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 89529#L2548-2 timeShift_#t~ret105 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3 := timeShift_#t~ret105;havoc timeShift_#t~ret105; 89528#L2684-4 assume !(0 != timeShift_~tmp___9~3); 89527#L2775-6 assume !(1 == ~doorState~0); 89526#L2775-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~14, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~6;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~14;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~6;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret163, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 89525#L849-133 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 89489#L876-133 isExecutiveFloorCalling_#t~ret163 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret163;havoc isExecutiveFloorCalling_#t~ret163;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 89487#L3147-7 stopRequestedInDirection_#t~ret80 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~6 := stopRequestedInDirection_#t~ret80;havoc stopRequestedInDirection_#t~ret80; 89483#L2386-4 assume 0 != stopRequestedInDirection_~tmp___0~6;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 89481#L1794-16 stopRequestedInDirection_#t~ret81 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~14 := stopRequestedInDirection_#t~ret81;havoc stopRequestedInDirection_#t~ret81;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~6 := (if stopRequestedInDirection_~tmp~14 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~21 := (if stopRequestedInDirection_~__cil_tmp8~6 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 89480#L2399-4 timeShift_#t~ret112 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 89478#L2783-4 assume 0 != timeShift_~tmp___8~3;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret83, continueInDirection_~dir, continueInDirection_~tmp~15;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~15;~currentHeading~0 := continueInDirection_~dir; 78506#L2443-6 assume !(1 == ~currentHeading~0); 78507#L2453-18 assume !(0 == ~currentFloorID~0); 77402#L2453-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 84124#L2459-13 assume { :end_inline_continueInDirection } true; 84120#L2792-8 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret13, __utac_acc__Specification3_spec__2_#t~ret14, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 84118#L246-2 assume !(-1 == ~expectedDirection~0); 84114#L258-2 assume !(1 == ~expectedDirection~0); 84112#L259-2 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 84111#L2807-2 assume { :end_inline_timeShift } true; 84110#L3289 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret165, bobCall_~tmp~22;havoc bobCall_~tmp~22;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~9;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~9; 81968#L1473-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~9 := 4;getOrigin_#res := getOrigin_~retValue_acc~9; 81963#L1498-1 bobCall_#t~ret165 := getOrigin_#res;assume { :end_inline_getOrigin } true;bobCall_~tmp~22 := bobCall_#t~ret165;havoc bobCall_#t~ret165;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~22;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 81962#L1120-1 assume 0 == initPersonOnFloor_~floor; 81935#L1121-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 81921#L1228-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 81916#L912-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 81910#L924-5 assume { :end_inline_callOnFloor } true; 81895#L1264-1 assume { :end_inline_initPersonOnFloor } true; 81893#L3222-1 assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret171, cleanup_#t~ret172, cleanup_~i~3, cleanup_~tmp~28, cleanup_~tmp___0~13, cleanup_~__cil_tmp4~3;havoc cleanup_~i~3;havoc cleanup_~tmp~28;havoc cleanup_~tmp___0~13;havoc cleanup_~__cil_tmp4~3;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_~tmp~20, timeShift_~tmp___0~11, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~20;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_#t~ret3, __utac_acc__Specification3_spec__1_#t~ret4, __utac_acc__Specification3_spec__1_#t~ret5, __utac_acc__Specification3_spec__1_#t~ret6, __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_#t~ret12, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 81891#L1794-18 __utac_acc__Specification3_spec__1_#t~ret1 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~15;havoc getCurrentHeading_~retValue_acc~15;getCurrentHeading_~retValue_acc~15 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~15; 81889#L1846-9 __utac_acc__Specification3_spec__1_#t~ret2 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret2;havoc __utac_acc__Specification3_spec__1_#t~ret2; 81435#L115-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 81009#L177-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~14;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~14; 74455#L1811-47 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~14 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~14; 72077#L1832-47 __utac_acc__Specification3_spec__1_#t~ret8 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret8;havoc __utac_acc__Specification3_spec__1_#t~ret8; 72078#L181-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 73550#L221-3 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_#t~ret90, stopRequestedAtCurrentFloor_#t~ret91, stopRequestedAtCurrentFloor_#t~ret92, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~18, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~18;havoc stopRequestedAtCurrentFloor_~tmp___0~9;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret163, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 85955#L849-195 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 85950#L876-195 isExecutiveFloorCalling_#t~ret163 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret163;havoc isExecutiveFloorCalling_#t~ret163;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 85945#L3147-9 stopRequestedAtCurrentFloor_#t~ret89 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~18 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 85942#L2531-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~18;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 85938#L1794-19 stopRequestedAtCurrentFloor_#t~ret90 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret90;havoc stopRequestedAtCurrentFloor_#t~ret90; 85933#L2535-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 85931#L2548-3 timeShift_#t~ret105 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3 := timeShift_#t~ret105;havoc timeShift_#t~ret105; 85925#L2684-6 assume !(0 != timeShift_~tmp___9~3); 85923#L2775-9 assume !(1 == ~doorState~0); 85922#L2775-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~14, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~6;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~14;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~6;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret163, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 85914#L849-198 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 85911#L876-198 isExecutiveFloorCalling_#t~ret163 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret163;havoc isExecutiveFloorCalling_#t~ret163;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 85909#L3147-10 stopRequestedInDirection_#t~ret80 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~6 := stopRequestedInDirection_#t~ret80;havoc stopRequestedInDirection_#t~ret80; 85863#L2386-6 assume 0 != stopRequestedInDirection_~tmp___0~6;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 85858#L1794-22 stopRequestedInDirection_#t~ret81 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~14 := stopRequestedInDirection_#t~ret81;havoc stopRequestedInDirection_#t~ret81;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~6 := (if stopRequestedInDirection_~tmp~14 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~21 := (if stopRequestedInDirection_~__cil_tmp8~6 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 85857#L2399-6 timeShift_#t~ret112 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 85850#L2783-6 assume 0 != timeShift_~tmp___8~3;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret83, continueInDirection_~dir, continueInDirection_~tmp~15;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~15;~currentHeading~0 := continueInDirection_~dir; 78458#L2443-9 assume !(1 == ~currentHeading~0); 78459#L2453-27 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 77271#L2453-29 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 95672#L2459-19 assume { :end_inline_continueInDirection } true; 95669#L2792-11 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret13, __utac_acc__Specification3_spec__2_#t~ret14, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 72005#L246-3 assume !(-1 == ~expectedDirection~0); 72006#L258-3 assume !(1 == ~expectedDirection~0); 73034#L259-3 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 73035#L2807-3 assume { :end_inline_timeShift } true;cleanup_~i~3 := 0; 95490#L3304-3 [2018-11-18 13:53:39,604 INFO L796 eck$LassoCheckResult]: Loop: 95490#L3304-3 assume true; 95489#L3304-1 assume !false; 79839#L3305 cleanup_~__cil_tmp4~3 := ~cleanupTimeShifts~0 - 1; 79635#L3308 assume cleanup_~i~3 < cleanup_~__cil_tmp4~3;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~11;havoc isBlocked_~retValue_acc~11;isBlocked_~retValue_acc~11 := 0;isBlocked_#res := isBlocked_~retValue_acc~11; 79636#L1621 cleanup_#t~ret171 := isBlocked_#res;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~13 := cleanup_#t~ret171;havoc cleanup_#t~ret171; 80209#L3312 assume 1 != cleanup_~tmp___0~13; 80210#L3312-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res;havoc isIdle_#t~ret64, isIdle_~retValue_acc~18, isIdle_~tmp~11;havoc isIdle_~retValue_acc~18;havoc isIdle_~tmp~11;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret59, anyStopRequested_#t~ret60, anyStopRequested_#t~ret61, anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_~retValue_acc~17, anyStopRequested_~tmp~10, anyStopRequested_~tmp___0~4, anyStopRequested_~tmp___1~3, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~1;havoc anyStopRequested_~retValue_acc~17;havoc anyStopRequested_~tmp~10;havoc anyStopRequested_~tmp___0~4;havoc anyStopRequested_~tmp___1~3;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 78512#L849-260 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 78244#L876-260 anyStopRequested_#t~ret59 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1 := anyStopRequested_#t~ret59;havoc anyStopRequested_#t~ret59; 80245#L1902 assume 0 != anyStopRequested_~tmp___3~1;anyStopRequested_~retValue_acc~17 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~17; 77960#L1966 isIdle_#t~ret64 := anyStopRequested_#res;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~11 := isIdle_#t~ret64;havoc isIdle_#t~ret64;isIdle_~retValue_acc~18 := (if 0 == isIdle_~tmp~11 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~18; 73900#L1979 cleanup_#t~ret172 := isIdle_#res;assume { :end_inline_isIdle } true;cleanup_~tmp~28 := cleanup_#t~ret172;havoc cleanup_#t~ret172; 73901#L3324 assume !(0 != cleanup_~tmp~28);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_~tmp~20, timeShift_~tmp___0~11, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~20;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_#t~ret3, __utac_acc__Specification3_spec__1_#t~ret4, __utac_acc__Specification3_spec__1_#t~ret5, __utac_acc__Specification3_spec__1_#t~ret6, __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_#t~ret12, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 78502#L1794-24 __utac_acc__Specification3_spec__1_#t~ret1 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~15;havoc getCurrentHeading_~retValue_acc~15;getCurrentHeading_~retValue_acc~15 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~15; 76447#L1846-12 __utac_acc__Specification3_spec__1_#t~ret2 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret2;havoc __utac_acc__Specification3_spec__1_#t~ret2; 74665#L115-4 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 74666#L116-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~14;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~14; 74451#L1811-56 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~14 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~14; 72303#L1832-56 __utac_acc__Specification3_spec__1_#t~ret3 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~0 := __utac_acc__Specification3_spec__1_#t~ret3;havoc __utac_acc__Specification3_spec__1_#t~ret3; 73346#L120-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0;~expectedDirection~0 := 1; 73654#L221-4 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_#t~ret90, stopRequestedAtCurrentFloor_#t~ret91, stopRequestedAtCurrentFloor_#t~ret92, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~18, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~18;havoc stopRequestedAtCurrentFloor_~tmp___0~9;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret163, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 73655#L849-265 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 78180#L876-265 isExecutiveFloorCalling_#t~ret163 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret163;havoc isExecutiveFloorCalling_#t~ret163;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 78565#L3147-12 stopRequestedAtCurrentFloor_#t~ret89 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~18 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 72550#L2531-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~18;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 72552#L1794-25 stopRequestedAtCurrentFloor_#t~ret90 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret90;havoc stopRequestedAtCurrentFloor_#t~ret90; 72369#L2535-4 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 72370#L2548-4 timeShift_#t~ret105 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3 := timeShift_#t~ret105;havoc timeShift_#t~ret105; 73066#L2684-8 assume !(0 != timeShift_~tmp___9~3); 73790#L2775-12 assume 1 == ~doorState~0;~doorState~0 := 0; 79704#L2775-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~14, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~6;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~14;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~6;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret163, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 79705#L849-268 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 84477#L876-268 isExecutiveFloorCalling_#t~ret163 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret163;havoc isExecutiveFloorCalling_#t~ret163;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 84432#L3147-13 stopRequestedInDirection_#t~ret80 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~6 := stopRequestedInDirection_#t~ret80;havoc stopRequestedInDirection_#t~ret80; 84427#L2386-8 assume 0 != stopRequestedInDirection_~tmp___0~6;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 84426#L1794-28 stopRequestedInDirection_#t~ret81 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~14 := stopRequestedInDirection_#t~ret81;havoc stopRequestedInDirection_#t~ret81;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~6 := (if stopRequestedInDirection_~tmp~14 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~21 := (if stopRequestedInDirection_~__cil_tmp8~6 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 82703#L2399-8 timeShift_#t~ret112 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 81629#L2783-8 assume 0 != timeShift_~tmp___8~3;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret83, continueInDirection_~dir, continueInDirection_~tmp~15;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~15;~currentHeading~0 := continueInDirection_~dir; 81437#L2443-12 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~7;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~7;isTopFloor_~retValue_acc~7 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~7; 81227#L1423-39 continueInDirection_#t~ret83 := isTopFloor_#res;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~15 := continueInDirection_#t~ret83;havoc continueInDirection_#t~ret83; 77210#L2447-36 assume !(0 != continueInDirection_~tmp~15); 77212#L2453-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 78975#L2459-25 assume { :end_inline_continueInDirection } true; 78976#L2792-14 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret13, __utac_acc__Specification3_spec__2_#t~ret14, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 71999#L246-4 assume !(-1 == ~expectedDirection~0); 72000#L258-4 assume !(1 == ~expectedDirection~0); 73031#L259-4 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 73032#L2807-4 assume { :end_inline_timeShift } true;cleanup_~i~3 := 1 + cleanup_~i~3; 95490#L3304-3 [2018-11-18 13:53:39,613 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 13:53:39,614 INFO L82 PathProgramCache]: Analyzing trace with hash -1202644716, now seen corresponding path program 2 times [2018-11-18 13:53:39,614 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 13:53:39,614 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 13:53:39,614 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 13:53:39,615 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 13:53:39,616 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 13:53:39,642 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 13:53:40,438 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 13:53:40,439 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 13:53:40,439 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-18 13:53:40,439 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-18 13:53:40,440 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 13:53:40,440 INFO L82 PathProgramCache]: Analyzing trace with hash -1062181097, now seen corresponding path program 1 times [2018-11-18 13:53:40,440 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 13:53:40,440 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 13:53:40,441 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 13:53:40,441 INFO L101 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2018-11-18 13:53:40,441 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 13:53:40,447 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 13:53:40,473 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 13:53:40,473 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 13:53:40,473 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-18 13:53:40,473 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-18 13:53:40,473 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-18 13:53:40,474 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-18 13:53:40,474 INFO L87 Difference]: Start difference. First operand 25412 states and 47506 transitions. cyclomatic complexity: 22095 Second operand 3 states. [2018-11-18 13:53:42,023 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 13:53:42,023 INFO L93 Difference]: Finished difference Result 41442 states and 77459 transitions. [2018-11-18 13:53:42,023 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-18 13:53:42,024 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 41442 states and 77459 transitions. [2018-11-18 13:53:42,129 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 9158 [2018-11-18 13:53:42,231 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 41442 states to 41442 states and 77459 transitions. [2018-11-18 13:53:42,232 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 41442 [2018-11-18 13:53:42,255 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 41442 [2018-11-18 13:53:42,255 INFO L73 IsDeterministic]: Start isDeterministic. Operand 41442 states and 77459 transitions. [2018-11-18 13:53:42,304 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-18 13:53:42,304 INFO L705 BuchiCegarLoop]: Abstraction has 41442 states and 77459 transitions. [2018-11-18 13:53:42,334 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 41442 states and 77459 transitions. [2018-11-18 13:53:42,907 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 41442 to 41106. [2018-11-18 13:53:42,907 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 41106 states. [2018-11-18 13:53:42,944 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 41106 states to 41106 states and 76880 transitions. [2018-11-18 13:53:42,944 INFO L728 BuchiCegarLoop]: Abstraction has 41106 states and 76880 transitions. [2018-11-18 13:53:42,944 INFO L608 BuchiCegarLoop]: Abstraction has 41106 states and 76880 transitions. [2018-11-18 13:53:42,944 INFO L442 BuchiCegarLoop]: ======== Iteration 4============ [2018-11-18 13:53:42,945 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 41106 states and 76880 transitions. [2018-11-18 13:53:43,008 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 9002 [2018-11-18 13:53:43,008 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-18 13:53:43,008 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-18 13:53:43,014 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 13:53:43,014 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 13:53:43,015 INFO L794 eck$LassoCheckResult]: Stem: 141915#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];call #t~string33.base, #t~string33.offset := #Ultimate.alloc(30);call #t~string34.base, #t~string34.offset := #Ultimate.alloc(9);call #t~string35.base, #t~string35.offset := #Ultimate.alloc(21);call #t~string36.base, #t~string36.offset := #Ultimate.alloc(30);call #t~string37.base, #t~string37.offset := #Ultimate.alloc(9);call #t~string38.base, #t~string38.offset := #Ultimate.alloc(21);call #t~string42.base, #t~string42.offset := #Ultimate.alloc(30);call #t~string43.base, #t~string43.offset := #Ultimate.alloc(9);call #t~string44.base, #t~string44.offset := #Ultimate.alloc(25);call #t~string45.base, #t~string45.offset := #Ultimate.alloc(30);call #t~string46.base, #t~string46.offset := #Ultimate.alloc(9);call #t~string47.base, #t~string47.offset := #Ultimate.alloc(25);call #t~string116.base, #t~string116.offset := #Ultimate.alloc(10);call #t~string118.base, #t~string118.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string118.base,#t~string118.offset := 91];#memory_int := #memory_int[#t~string118.base,1 + #t~string118.offset := 95];#memory_int := #memory_int[#t~string118.base,2 + #t~string118.offset := 93];#memory_int := #memory_int[#t~string118.base,3 + #t~string118.offset := 0];call #t~string120.base, #t~string120.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string120.base,#t~string120.offset := 91];#memory_int := #memory_int[#t~string120.base,1 + #t~string120.offset := 93];#memory_int := #memory_int[#t~string120.base,2 + #t~string120.offset := 32];#memory_int := #memory_int[#t~string120.base,3 + #t~string120.offset := 0];call #t~string122.base, #t~string122.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string122.base,#t~string122.offset := 32];#memory_int := #memory_int[#t~string122.base,1 + #t~string122.offset := 97];#memory_int := #memory_int[#t~string122.base,2 + #t~string122.offset := 116];#memory_int := #memory_int[#t~string122.base,3 + #t~string122.offset := 32];#memory_int := #memory_int[#t~string122.base,4 + #t~string122.offset := 0];call #t~string124.base, #t~string124.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string124.base,#t~string124.offset := 37];#memory_int := #memory_int[#t~string124.base,1 + #t~string124.offset := 105];#memory_int := #memory_int[#t~string124.base,2 + #t~string124.offset := 0];call #t~string126.base, #t~string126.offset := #Ultimate.alloc(10);call #t~string128.base, #t~string128.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string128.base,#t~string128.offset := 117];#memory_int := #memory_int[#t~string128.base,1 + #t~string128.offset := 112];#memory_int := #memory_int[#t~string128.base,2 + #t~string128.offset := 0];call #t~string130.base, #t~string130.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string130.base,#t~string130.offset := 100];#memory_int := #memory_int[#t~string130.base,1 + #t~string130.offset := 111];#memory_int := #memory_int[#t~string130.base,2 + #t~string130.offset := 119];#memory_int := #memory_int[#t~string130.base,3 + #t~string130.offset := 110];#memory_int := #memory_int[#t~string130.base,4 + #t~string130.offset := 0];call #t~string132.base, #t~string132.offset := #Ultimate.alloc(7);#memory_int := #memory_int[#t~string132.base,#t~string132.offset := 32];#memory_int := #memory_int[#t~string132.base,1 + #t~string132.offset := 73];#memory_int := #memory_int[#t~string132.base,2 + #t~string132.offset := 76];#memory_int := #memory_int[#t~string132.base,3 + #t~string132.offset := 95];#memory_int := #memory_int[#t~string132.base,4 + #t~string132.offset := 112];#memory_int := #memory_int[#t~string132.base,5 + #t~string132.offset := 58];#memory_int := #memory_int[#t~string132.base,6 + #t~string132.offset := 0];call #t~string134.base, #t~string134.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string134.base,#t~string134.offset := 32];#memory_int := #memory_int[#t~string134.base,1 + #t~string134.offset := 37];#memory_int := #memory_int[#t~string134.base,2 + #t~string134.offset := 105];#memory_int := #memory_int[#t~string134.base,3 + #t~string134.offset := 0];call #t~string136.base, #t~string136.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string136.base,#t~string136.offset := 32];#memory_int := #memory_int[#t~string136.base,1 + #t~string136.offset := 37];#memory_int := #memory_int[#t~string136.base,2 + #t~string136.offset := 105];#memory_int := #memory_int[#t~string136.base,3 + #t~string136.offset := 0];call #t~string138.base, #t~string138.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string138.base,#t~string138.offset := 32];#memory_int := #memory_int[#t~string138.base,1 + #t~string138.offset := 37];#memory_int := #memory_int[#t~string138.base,2 + #t~string138.offset := 105];#memory_int := #memory_int[#t~string138.base,3 + #t~string138.offset := 0];call #t~string140.base, #t~string140.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string140.base,#t~string140.offset := 32];#memory_int := #memory_int[#t~string140.base,1 + #t~string140.offset := 37];#memory_int := #memory_int[#t~string140.base,2 + #t~string140.offset := 105];#memory_int := #memory_int[#t~string140.base,3 + #t~string140.offset := 0];call #t~string142.base, #t~string142.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string142.base,#t~string142.offset := 32];#memory_int := #memory_int[#t~string142.base,1 + #t~string142.offset := 37];#memory_int := #memory_int[#t~string142.base,2 + #t~string142.offset := 105];#memory_int := #memory_int[#t~string142.base,3 + #t~string142.offset := 0];call #t~string144.base, #t~string144.offset := #Ultimate.alloc(6);#memory_int := #memory_int[#t~string144.base,#t~string144.offset := 32];#memory_int := #memory_int[#t~string144.base,1 + #t~string144.offset := 70];#memory_int := #memory_int[#t~string144.base,2 + #t~string144.offset := 95];#memory_int := #memory_int[#t~string144.base,3 + #t~string144.offset := 112];#memory_int := #memory_int[#t~string144.base,4 + #t~string144.offset := 58];#memory_int := #memory_int[#t~string144.base,5 + #t~string144.offset := 0];call #t~string147.base, #t~string147.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string147.base,#t~string147.offset := 32];#memory_int := #memory_int[#t~string147.base,1 + #t~string147.offset := 37];#memory_int := #memory_int[#t~string147.base,2 + #t~string147.offset := 105];#memory_int := #memory_int[#t~string147.base,3 + #t~string147.offset := 0];call #t~string150.base, #t~string150.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string150.base,#t~string150.offset := 32];#memory_int := #memory_int[#t~string150.base,1 + #t~string150.offset := 37];#memory_int := #memory_int[#t~string150.base,2 + #t~string150.offset := 105];#memory_int := #memory_int[#t~string150.base,3 + #t~string150.offset := 0];call #t~string153.base, #t~string153.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string153.base,#t~string153.offset := 32];#memory_int := #memory_int[#t~string153.base,1 + #t~string153.offset := 37];#memory_int := #memory_int[#t~string153.base,2 + #t~string153.offset := 105];#memory_int := #memory_int[#t~string153.base,3 + #t~string153.offset := 0];call #t~string156.base, #t~string156.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string156.base,#t~string156.offset := 32];#memory_int := #memory_int[#t~string156.base,1 + #t~string156.offset := 37];#memory_int := #memory_int[#t~string156.base,2 + #t~string156.offset := 105];#memory_int := #memory_int[#t~string156.base,3 + #t~string156.offset := 0];call #t~string159.base, #t~string159.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string159.base,#t~string159.offset := 32];#memory_int := #memory_int[#t~string159.base,1 + #t~string159.offset := 37];#memory_int := #memory_int[#t~string159.base,2 + #t~string159.offset := 105];#memory_int := #memory_int[#t~string159.base,3 + #t~string159.offset := 0];call #t~string161.base, #t~string161.offset := #Ultimate.alloc(2);#memory_int := #memory_int[#t~string161.base,#t~string161.offset := 10];#memory_int := #memory_int[#t~string161.base,1 + #t~string161.offset := 0];~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~expectedDirection~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 141916#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res;havoc main_#t~ret177, main_~retValue_acc~31, main_~tmp~30;havoc main_~retValue_acc~31;havoc main_~tmp~30;assume { :begin_inline_select_helpers } true; 140194#L73 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 139528#L66 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res;havoc valid_product_~retValue_acc~1;havoc valid_product_~retValue_acc~1;valid_product_~retValue_acc~1 := 1;valid_product_#res := valid_product_~retValue_acc~1; 139529#L81 main_#t~ret177 := valid_product_#res;assume { :end_inline_valid_product } true;main_~tmp~30 := main_#t~ret177;havoc main_#t~ret177; 139790#L3495 assume 0 != main_~tmp~30;assume { :begin_inline_setup } true; 142228#L3472 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 142229#L842 assume { :end_inline_initFloors } true; 146612#L1590 assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret165, bobCall_~tmp~22;havoc bobCall_~tmp~22;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~9;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~9; 139705#L1473 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~9 := 4;getOrigin_#res := getOrigin_~retValue_acc~9; 138964#L1498 bobCall_#t~ret165 := getOrigin_#res;assume { :end_inline_getOrigin } true;bobCall_~tmp~22 := bobCall_#t~ret165;havoc bobCall_#t~ret165;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~22;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 139742#L1120 assume 0 == initPersonOnFloor_~floor; 139498#L1121 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 138880#L1228-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 145992#L912 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 140731#L924-2 assume { :end_inline_callOnFloor } true; 140733#L1264 assume { :end_inline_initPersonOnFloor } true; 141353#L3222 assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_~tmp~20, timeShift_~tmp___0~11, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~20;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_#t~ret3, __utac_acc__Specification3_spec__1_#t~ret4, __utac_acc__Specification3_spec__1_#t~ret5, __utac_acc__Specification3_spec__1_#t~ret6, __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_#t~ret12, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 141354#L1794 __utac_acc__Specification3_spec__1_#t~ret1 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~15;havoc getCurrentHeading_~retValue_acc~15;getCurrentHeading_~retValue_acc~15 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~15; 143340#L1846 __utac_acc__Specification3_spec__1_#t~ret2 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret2;havoc __utac_acc__Specification3_spec__1_#t~ret2; 141571#L115 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 141572#L177 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~14;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~14; 140379#L1811-5 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~14 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~14; 138787#L1832-5 __utac_acc__Specification3_spec__1_#t~ret8 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret8;havoc __utac_acc__Specification3_spec__1_#t~ret8; 138788#L181 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 140440#L221 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_#t~ret90, stopRequestedAtCurrentFloor_#t~ret91, stopRequestedAtCurrentFloor_#t~ret92, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~18, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~18;havoc stopRequestedAtCurrentFloor_~tmp___0~9;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret163, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 148863#L849 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 148858#L876 isExecutiveFloorCalling_#t~ret163 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret163;havoc isExecutiveFloorCalling_#t~ret163;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 148853#L3147 stopRequestedAtCurrentFloor_#t~ret89 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~18 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 148850#L2531 assume 0 != stopRequestedAtCurrentFloor_~tmp~18;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 148846#L1794-1 stopRequestedAtCurrentFloor_#t~ret90 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret90;havoc stopRequestedAtCurrentFloor_#t~ret90; 148841#L2535 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 148839#L2548 timeShift_#t~ret105 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3 := timeShift_#t~ret105;havoc timeShift_#t~ret105; 148837#L2684 assume !(0 != timeShift_~tmp___9~3); 148836#L2775 assume !(1 == ~doorState~0); 148835#L2775-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~14, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~6;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~14;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~6;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret163, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 148832#L849-3 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 148829#L876-3 isExecutiveFloorCalling_#t~ret163 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret163;havoc isExecutiveFloorCalling_#t~ret163;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 148824#L3147-1 stopRequestedInDirection_#t~ret80 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~6 := stopRequestedInDirection_#t~ret80;havoc stopRequestedInDirection_#t~ret80; 148821#L2386 assume 0 != stopRequestedInDirection_~tmp___0~6;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 148754#L1794-4 stopRequestedInDirection_#t~ret81 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~14 := stopRequestedInDirection_#t~ret81;havoc stopRequestedInDirection_#t~ret81;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~6 := (if stopRequestedInDirection_~tmp~14 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~21 := (if stopRequestedInDirection_~__cil_tmp8~6 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 148620#L2399 timeShift_#t~ret112 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 148613#L2783 assume 0 != timeShift_~tmp___8~3;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret83, continueInDirection_~dir, continueInDirection_~tmp~15;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~15;~currentHeading~0 := continueInDirection_~dir; 145446#L2443 assume !(1 == ~currentHeading~0); 145447#L2453 assume !(0 == ~currentFloorID~0); 146505#L2453-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 152907#L2459-1 assume { :end_inline_continueInDirection } true; 152904#L2792-2 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret13, __utac_acc__Specification3_spec__2_#t~ret14, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 152902#L246 assume !(-1 == ~expectedDirection~0); 152898#L258 assume !(1 == ~expectedDirection~0); 152897#L259 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 148610#L2807 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_~tmp~20, timeShift_~tmp___0~11, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~20;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_#t~ret3, __utac_acc__Specification3_spec__1_#t~ret4, __utac_acc__Specification3_spec__1_#t~ret5, __utac_acc__Specification3_spec__1_#t~ret6, __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_#t~ret12, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 148605#L1794-6 __utac_acc__Specification3_spec__1_#t~ret1 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~15;havoc getCurrentHeading_~retValue_acc~15;getCurrentHeading_~retValue_acc~15 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~15; 148600#L1846-3 __utac_acc__Specification3_spec__1_#t~ret2 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret2;havoc __utac_acc__Specification3_spec__1_#t~ret2; 148592#L115-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 148080#L177-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~14;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~14; 140346#L1811-19 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~14 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~14; 139094#L1832-19 __utac_acc__Specification3_spec__1_#t~ret8 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret8;havoc __utac_acc__Specification3_spec__1_#t~ret8; 139095#L181-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 140425#L221-1 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_#t~ret90, stopRequestedAtCurrentFloor_#t~ret91, stopRequestedAtCurrentFloor_#t~ret92, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~18, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~18;havoc stopRequestedAtCurrentFloor_~tmp___0~9;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret163, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 152296#L849-65 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 152292#L876-65 isExecutiveFloorCalling_#t~ret163 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret163;havoc isExecutiveFloorCalling_#t~ret163;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 152287#L3147-3 stopRequestedAtCurrentFloor_#t~ret89 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~18 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 152284#L2531-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~18;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 152280#L1794-7 stopRequestedAtCurrentFloor_#t~ret90 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret90;havoc stopRequestedAtCurrentFloor_#t~ret90; 152275#L2535-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 152273#L2548-1 timeShift_#t~ret105 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3 := timeShift_#t~ret105;havoc timeShift_#t~ret105; 152269#L2684-2 assume !(0 != timeShift_~tmp___9~3); 152267#L2775-3 assume !(1 == ~doorState~0); 152264#L2775-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~14, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~6;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~14;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~6;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret163, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 152263#L849-68 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 152257#L876-68 isExecutiveFloorCalling_#t~ret163 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret163;havoc isExecutiveFloorCalling_#t~ret163;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 152212#L3147-4 stopRequestedInDirection_#t~ret80 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~6 := stopRequestedInDirection_#t~ret80;havoc stopRequestedInDirection_#t~ret80; 152207#L2386-2 assume 0 != stopRequestedInDirection_~tmp___0~6;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 152206#L1794-10 stopRequestedInDirection_#t~ret81 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~14 := stopRequestedInDirection_#t~ret81;havoc stopRequestedInDirection_#t~ret81;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~6 := (if stopRequestedInDirection_~tmp~14 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~21 := (if stopRequestedInDirection_~__cil_tmp8~6 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 152204#L2399-2 timeShift_#t~ret112 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 152202#L2783-2 assume 0 != timeShift_~tmp___8~3;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret83, continueInDirection_~dir, continueInDirection_~tmp~15;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~15;~currentHeading~0 := continueInDirection_~dir; 152203#L2443-3 assume !(1 == ~currentHeading~0); 146372#L2453-9 assume !(0 == ~currentFloorID~0); 145063#L2453-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 162316#L2459-7 assume { :end_inline_continueInDirection } true; 162313#L2792-5 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret13, __utac_acc__Specification3_spec__2_#t~ret14, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 162312#L246-1 assume !(-1 == ~expectedDirection~0); 140232#L258-1 assume !(1 == ~expectedDirection~0); 143275#L259-1 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 148607#L2807-1 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_~tmp~20, timeShift_~tmp___0~11, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~20;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_#t~ret3, __utac_acc__Specification3_spec__1_#t~ret4, __utac_acc__Specification3_spec__1_#t~ret5, __utac_acc__Specification3_spec__1_#t~ret6, __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_#t~ret12, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 148602#L1794-12 __utac_acc__Specification3_spec__1_#t~ret1 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~15;havoc getCurrentHeading_~retValue_acc~15;getCurrentHeading_~retValue_acc~15 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~15; 148597#L1846-6 __utac_acc__Specification3_spec__1_#t~ret2 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret2;havoc __utac_acc__Specification3_spec__1_#t~ret2; 148591#L115-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 148078#L177-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~14;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~14; 141373#L1811-33 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~14 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~14; 139029#L1832-33 __utac_acc__Specification3_spec__1_#t~ret8 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret8;havoc __utac_acc__Specification3_spec__1_#t~ret8; 139030#L181-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 140420#L221-2 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_#t~ret90, stopRequestedAtCurrentFloor_#t~ret91, stopRequestedAtCurrentFloor_#t~ret92, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~18, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~18;havoc stopRequestedAtCurrentFloor_~tmp___0~9;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret163, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 152889#L849-130 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 152870#L876-130 isExecutiveFloorCalling_#t~ret163 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret163;havoc isExecutiveFloorCalling_#t~ret163;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 152864#L3147-6 stopRequestedAtCurrentFloor_#t~ret89 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~18 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 152846#L2531-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~18;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 152841#L1794-13 stopRequestedAtCurrentFloor_#t~ret90 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret90;havoc stopRequestedAtCurrentFloor_#t~ret90; 152837#L2535-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 152836#L2548-2 timeShift_#t~ret105 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3 := timeShift_#t~ret105;havoc timeShift_#t~ret105; 152834#L2684-4 assume !(0 != timeShift_~tmp___9~3); 152833#L2775-6 assume !(1 == ~doorState~0); 152832#L2775-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~14, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~6;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~14;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~6;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret163, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 152827#L849-133 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 152810#L876-133 isExecutiveFloorCalling_#t~ret163 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret163;havoc isExecutiveFloorCalling_#t~ret163;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 151488#L3147-7 stopRequestedInDirection_#t~ret80 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~6 := stopRequestedInDirection_#t~ret80;havoc stopRequestedInDirection_#t~ret80; 151202#L2386-4 assume 0 != stopRequestedInDirection_~tmp___0~6;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 151191#L1794-16 stopRequestedInDirection_#t~ret81 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~14 := stopRequestedInDirection_#t~ret81;havoc stopRequestedInDirection_#t~ret81;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~6 := (if stopRequestedInDirection_~tmp~14 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~21 := (if stopRequestedInDirection_~__cil_tmp8~6 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 151186#L2399-4 timeShift_#t~ret112 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 151183#L2783-4 assume 0 != timeShift_~tmp___8~3;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret83, continueInDirection_~dir, continueInDirection_~tmp~15;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~15;~currentHeading~0 := continueInDirection_~dir; 151181#L2443-6 assume !(1 == ~currentHeading~0); 146326#L2453-18 assume !(0 == ~currentFloorID~0); 146328#L2453-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 154674#L2459-13 assume { :end_inline_continueInDirection } true; 154671#L2792-8 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret13, __utac_acc__Specification3_spec__2_#t~ret14, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 154668#L246-2 assume !(-1 == ~expectedDirection~0); 154665#L258-2 assume !(1 == ~expectedDirection~0); 154663#L259-2 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 154662#L2807-2 assume { :end_inline_timeShift } true; 154661#L3289 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret165, bobCall_~tmp~22;havoc bobCall_~tmp~22;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~9;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~9; 154659#L1473-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~9 := 4;getOrigin_#res := getOrigin_~retValue_acc~9; 154654#L1498-1 bobCall_#t~ret165 := getOrigin_#res;assume { :end_inline_getOrigin } true;bobCall_~tmp~22 := bobCall_#t~ret165;havoc bobCall_#t~ret165;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~22;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 154653#L1120-1 assume 0 == initPersonOnFloor_~floor; 154633#L1121-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 154619#L1228-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 153933#L912-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 152896#L924-5 assume { :end_inline_callOnFloor } true; 152895#L1264-1 assume { :end_inline_initPersonOnFloor } true; 148609#L3222-1 assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret171, cleanup_#t~ret172, cleanup_~i~3, cleanup_~tmp~28, cleanup_~tmp___0~13, cleanup_~__cil_tmp4~3;havoc cleanup_~i~3;havoc cleanup_~tmp~28;havoc cleanup_~tmp___0~13;havoc cleanup_~__cil_tmp4~3;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_~tmp~20, timeShift_~tmp___0~11, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~20;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_#t~ret3, __utac_acc__Specification3_spec__1_#t~ret4, __utac_acc__Specification3_spec__1_#t~ret5, __utac_acc__Specification3_spec__1_#t~ret6, __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_#t~ret12, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 148604#L1794-18 __utac_acc__Specification3_spec__1_#t~ret1 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~15;havoc getCurrentHeading_~retValue_acc~15;getCurrentHeading_~retValue_acc~15 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~15; 148599#L1846-9 __utac_acc__Specification3_spec__1_#t~ret2 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret2;havoc __utac_acc__Specification3_spec__1_#t~ret2; 148596#L115-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 148082#L177-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~14;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~14; 141343#L1811-47 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~14 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~14; 138934#L1832-47 __utac_acc__Specification3_spec__1_#t~ret8 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret8;havoc __utac_acc__Specification3_spec__1_#t~ret8; 138935#L181-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 140431#L221-3 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_#t~ret90, stopRequestedAtCurrentFloor_#t~ret91, stopRequestedAtCurrentFloor_#t~ret92, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~18, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~18;havoc stopRequestedAtCurrentFloor_~tmp___0~9;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret163, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 150985#L849-195 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 150980#L876-195 isExecutiveFloorCalling_#t~ret163 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret163;havoc isExecutiveFloorCalling_#t~ret163;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 150975#L3147-9 stopRequestedAtCurrentFloor_#t~ret89 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~18 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 150972#L2531-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~18;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 150968#L1794-19 stopRequestedAtCurrentFloor_#t~ret90 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret90;havoc stopRequestedAtCurrentFloor_#t~ret90; 150963#L2535-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 150961#L2548-3 timeShift_#t~ret105 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3 := timeShift_#t~ret105;havoc timeShift_#t~ret105; 150959#L2684-6 assume !(0 != timeShift_~tmp___9~3); 150954#L2775-9 assume !(1 == ~doorState~0); 150953#L2775-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~14, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~6;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~14;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~6;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret163, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 150948#L849-198 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 150944#L876-198 isExecutiveFloorCalling_#t~ret163 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret163;havoc isExecutiveFloorCalling_#t~ret163;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 150669#L3147-10 stopRequestedInDirection_#t~ret80 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~6 := stopRequestedInDirection_#t~ret80;havoc stopRequestedInDirection_#t~ret80; 150658#L2386-6 assume 0 != stopRequestedInDirection_~tmp___0~6;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 150656#L1794-22 stopRequestedInDirection_#t~ret81 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~14 := stopRequestedInDirection_#t~ret81;havoc stopRequestedInDirection_#t~ret81;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~6 := (if stopRequestedInDirection_~tmp~14 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~21 := (if stopRequestedInDirection_~__cil_tmp8~6 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 150647#L2399-6 timeShift_#t~ret112 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 150644#L2783-6 assume 0 != timeShift_~tmp___8~3;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret83, continueInDirection_~dir, continueInDirection_~tmp~15;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~15;~currentHeading~0 := continueInDirection_~dir; 150645#L2443-9 assume !(1 == ~currentHeading~0); 146319#L2453-27 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 144194#L2453-29 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 175059#L2459-19 assume { :end_inline_continueInDirection } true; 175051#L2792-11 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret13, __utac_acc__Specification3_spec__2_#t~ret14, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 175052#L246-3 assume !(-1 == ~expectedDirection~0); 178177#L258-3 assume !(1 == ~expectedDirection~0); 178175#L259-3 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 178174#L2807-3 assume { :end_inline_timeShift } true;cleanup_~i~3 := 0; 178172#L3304-3 [2018-11-18 13:53:43,017 INFO L796 eck$LassoCheckResult]: Loop: 178172#L3304-3 assume true; 178171#L3304-1 assume !false; 178170#L3305 cleanup_~__cil_tmp4~3 := ~cleanupTimeShifts~0 - 1; 178169#L3308 assume cleanup_~i~3 < cleanup_~__cil_tmp4~3;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~11;havoc isBlocked_~retValue_acc~11;isBlocked_~retValue_acc~11 := 0;isBlocked_#res := isBlocked_~retValue_acc~11; 175032#L1621 cleanup_#t~ret171 := isBlocked_#res;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~13 := cleanup_#t~ret171;havoc cleanup_#t~ret171; 171954#L3312 assume 1 != cleanup_~tmp___0~13; 171953#L3312-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res;havoc isIdle_#t~ret64, isIdle_~retValue_acc~18, isIdle_~tmp~11;havoc isIdle_~retValue_acc~18;havoc isIdle_~tmp~11;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret59, anyStopRequested_#t~ret60, anyStopRequested_#t~ret61, anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_~retValue_acc~17, anyStopRequested_~tmp~10, anyStopRequested_~tmp___0~4, anyStopRequested_~tmp___1~3, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~1;havoc anyStopRequested_~retValue_acc~17;havoc anyStopRequested_~tmp~10;havoc anyStopRequested_~tmp___0~4;havoc anyStopRequested_~tmp___1~3;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 171950#L849-260 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 171947#L876-260 anyStopRequested_#t~ret59 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1 := anyStopRequested_#t~ret59;havoc anyStopRequested_#t~ret59; 171913#L1902 assume 0 != anyStopRequested_~tmp___3~1;anyStopRequested_~retValue_acc~17 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~17; 171912#L1966 isIdle_#t~ret64 := anyStopRequested_#res;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~11 := isIdle_#t~ret64;havoc isIdle_#t~ret64;isIdle_~retValue_acc~18 := (if 0 == isIdle_~tmp~11 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~18; 140781#L1979 cleanup_#t~ret172 := isIdle_#res;assume { :end_inline_isIdle } true;cleanup_~tmp~28 := cleanup_#t~ret172;havoc cleanup_#t~ret172; 140782#L3324 assume !(0 != cleanup_~tmp~28);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_~tmp~20, timeShift_~tmp___0~11, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~20;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_#t~ret3, __utac_acc__Specification3_spec__1_#t~ret4, __utac_acc__Specification3_spec__1_#t~ret5, __utac_acc__Specification3_spec__1_#t~ret6, __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_#t~ret12, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 145432#L1794-24 __utac_acc__Specification3_spec__1_#t~ret1 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~15;havoc getCurrentHeading_~retValue_acc~15;getCurrentHeading_~retValue_acc~15 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~15; 143361#L1846-12 __utac_acc__Specification3_spec__1_#t~ret2 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret2;havoc __utac_acc__Specification3_spec__1_#t~ret2; 141551#L115-4 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 141552#L116-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0); 142707#L126-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 1); 146901#L137-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 2); 147258#L148-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 3); 144585#L159-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 4); 140535#L221-4 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_#t~ret90, stopRequestedAtCurrentFloor_#t~ret91, stopRequestedAtCurrentFloor_#t~ret92, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~18, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~18;havoc stopRequestedAtCurrentFloor_~tmp___0~9;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret163, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 140536#L849-265 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 145118#L876-265 isExecutiveFloorCalling_#t~ret163 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret163;havoc isExecutiveFloorCalling_#t~ret163;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 147946#L3147-12 stopRequestedAtCurrentFloor_#t~ret89 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~18 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 139412#L2531-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~18;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 139414#L1794-25 stopRequestedAtCurrentFloor_#t~ret90 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret90;havoc stopRequestedAtCurrentFloor_#t~ret90; 147810#L2535-4 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 174945#L2548-4 timeShift_#t~ret105 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3 := timeShift_#t~ret105;havoc timeShift_#t~ret105; 140671#L2684-8 assume !(0 != timeShift_~tmp___9~3); 140672#L2775-12 assume 1 == ~doorState~0;~doorState~0 := 0; 146709#L2775-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~14, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~6;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~14;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~6;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret163, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 166127#L849-268 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 166121#L876-268 isExecutiveFloorCalling_#t~ret163 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret163;havoc isExecutiveFloorCalling_#t~ret163;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 166077#L3147-13 stopRequestedInDirection_#t~ret80 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~6 := stopRequestedInDirection_#t~ret80;havoc stopRequestedInDirection_#t~ret80; 166072#L2386-8 assume 0 != stopRequestedInDirection_~tmp___0~6;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 166071#L1794-28 stopRequestedInDirection_#t~ret81 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~14 := stopRequestedInDirection_#t~ret81;havoc stopRequestedInDirection_#t~ret81;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~6 := (if stopRequestedInDirection_~tmp~14 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~21 := (if stopRequestedInDirection_~__cil_tmp8~6 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 166069#L2399-8 timeShift_#t~ret112 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 166067#L2783-8 assume 0 != timeShift_~tmp___8~3;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret83, continueInDirection_~dir, continueInDirection_~tmp~15;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~15;~currentHeading~0 := continueInDirection_~dir; 166068#L2443-12 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~7;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~7;isTopFloor_~retValue_acc~7 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~7; 170785#L1423-39 continueInDirection_#t~ret83 := isTopFloor_#res;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~15 := continueInDirection_#t~ret83;havoc continueInDirection_#t~ret83; 170784#L2447-36 assume !(0 != continueInDirection_~tmp~15); 146280#L2453-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 162239#L2459-25 assume { :end_inline_continueInDirection } true; 162236#L2792-14 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret13, __utac_acc__Specification3_spec__2_#t~ret14, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 162237#L246-4 assume !(-1 == ~expectedDirection~0); 179028#L258-4 assume !(1 == ~expectedDirection~0); 178176#L259-4 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 178173#L2807-4 assume { :end_inline_timeShift } true;cleanup_~i~3 := 1 + cleanup_~i~3; 178172#L3304-3 [2018-11-18 13:53:43,024 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 13:53:43,024 INFO L82 PathProgramCache]: Analyzing trace with hash -1202644716, now seen corresponding path program 3 times [2018-11-18 13:53:43,024 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 13:53:43,024 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 13:53:43,025 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 13:53:43,025 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 13:53:43,025 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 13:53:43,039 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 13:53:43,826 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 13:53:43,826 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 13:53:43,826 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-18 13:53:43,826 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-18 13:53:43,827 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 13:53:43,827 INFO L82 PathProgramCache]: Analyzing trace with hash 1940169996, now seen corresponding path program 1 times [2018-11-18 13:53:43,827 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 13:53:43,827 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 13:53:43,827 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 13:53:43,828 INFO L101 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2018-11-18 13:53:43,828 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 13:53:43,834 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 13:53:44,096 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 13:53:44,097 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 13:53:44,097 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [15] imperfect sequences [] total 15 [2018-11-18 13:53:44,097 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-18 13:53:44,097 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 15 interpolants. [2018-11-18 13:53:44,097 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=29, Invalid=181, Unknown=0, NotChecked=0, Total=210 [2018-11-18 13:53:44,097 INFO L87 Difference]: Start difference. First operand 41106 states and 76880 transitions. cyclomatic complexity: 35775 Second operand 15 states. [2018-11-18 13:54:22,449 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 13:54:22,449 INFO L93 Difference]: Finished difference Result 87934 states and 159261 transitions. [2018-11-18 13:54:22,449 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 91 states. [2018-11-18 13:54:22,449 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 87934 states and 159261 transitions. [2018-11-18 13:54:22,629 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 20100 [2018-11-18 13:54:22,814 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 87934 states to 87934 states and 159261 transitions. [2018-11-18 13:54:22,815 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 87934 [2018-11-18 13:54:22,859 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 87934 [2018-11-18 13:54:22,859 INFO L73 IsDeterministic]: Start isDeterministic. Operand 87934 states and 159261 transitions. [2018-11-18 13:54:22,895 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-18 13:54:22,895 INFO L705 BuchiCegarLoop]: Abstraction has 87934 states and 159261 transitions. [2018-11-18 13:54:22,932 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 87934 states and 159261 transitions. [2018-11-18 13:54:23,352 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 87934 to 61937. [2018-11-18 13:54:23,352 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 61937 states. [2018-11-18 13:54:23,411 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 61937 states to 61937 states and 113356 transitions. [2018-11-18 13:54:23,411 INFO L728 BuchiCegarLoop]: Abstraction has 61937 states and 113356 transitions. [2018-11-18 13:54:23,411 INFO L608 BuchiCegarLoop]: Abstraction has 61937 states and 113356 transitions. [2018-11-18 13:54:23,411 INFO L442 BuchiCegarLoop]: ======== Iteration 5============ [2018-11-18 13:54:23,411 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 61937 states and 113356 transitions. [2018-11-18 13:54:23,516 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 13915 [2018-11-18 13:54:23,516 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-18 13:54:23,516 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-18 13:54:23,523 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 13:54:23,523 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 13:54:23,523 INFO L794 eck$LassoCheckResult]: Stem: 271229#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];call #t~string33.base, #t~string33.offset := #Ultimate.alloc(30);call #t~string34.base, #t~string34.offset := #Ultimate.alloc(9);call #t~string35.base, #t~string35.offset := #Ultimate.alloc(21);call #t~string36.base, #t~string36.offset := #Ultimate.alloc(30);call #t~string37.base, #t~string37.offset := #Ultimate.alloc(9);call #t~string38.base, #t~string38.offset := #Ultimate.alloc(21);call #t~string42.base, #t~string42.offset := #Ultimate.alloc(30);call #t~string43.base, #t~string43.offset := #Ultimate.alloc(9);call #t~string44.base, #t~string44.offset := #Ultimate.alloc(25);call #t~string45.base, #t~string45.offset := #Ultimate.alloc(30);call #t~string46.base, #t~string46.offset := #Ultimate.alloc(9);call #t~string47.base, #t~string47.offset := #Ultimate.alloc(25);call #t~string116.base, #t~string116.offset := #Ultimate.alloc(10);call #t~string118.base, #t~string118.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string118.base,#t~string118.offset := 91];#memory_int := #memory_int[#t~string118.base,1 + #t~string118.offset := 95];#memory_int := #memory_int[#t~string118.base,2 + #t~string118.offset := 93];#memory_int := #memory_int[#t~string118.base,3 + #t~string118.offset := 0];call #t~string120.base, #t~string120.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string120.base,#t~string120.offset := 91];#memory_int := #memory_int[#t~string120.base,1 + #t~string120.offset := 93];#memory_int := #memory_int[#t~string120.base,2 + #t~string120.offset := 32];#memory_int := #memory_int[#t~string120.base,3 + #t~string120.offset := 0];call #t~string122.base, #t~string122.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string122.base,#t~string122.offset := 32];#memory_int := #memory_int[#t~string122.base,1 + #t~string122.offset := 97];#memory_int := #memory_int[#t~string122.base,2 + #t~string122.offset := 116];#memory_int := #memory_int[#t~string122.base,3 + #t~string122.offset := 32];#memory_int := #memory_int[#t~string122.base,4 + #t~string122.offset := 0];call #t~string124.base, #t~string124.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string124.base,#t~string124.offset := 37];#memory_int := #memory_int[#t~string124.base,1 + #t~string124.offset := 105];#memory_int := #memory_int[#t~string124.base,2 + #t~string124.offset := 0];call #t~string126.base, #t~string126.offset := #Ultimate.alloc(10);call #t~string128.base, #t~string128.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string128.base,#t~string128.offset := 117];#memory_int := #memory_int[#t~string128.base,1 + #t~string128.offset := 112];#memory_int := #memory_int[#t~string128.base,2 + #t~string128.offset := 0];call #t~string130.base, #t~string130.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string130.base,#t~string130.offset := 100];#memory_int := #memory_int[#t~string130.base,1 + #t~string130.offset := 111];#memory_int := #memory_int[#t~string130.base,2 + #t~string130.offset := 119];#memory_int := #memory_int[#t~string130.base,3 + #t~string130.offset := 110];#memory_int := #memory_int[#t~string130.base,4 + #t~string130.offset := 0];call #t~string132.base, #t~string132.offset := #Ultimate.alloc(7);#memory_int := #memory_int[#t~string132.base,#t~string132.offset := 32];#memory_int := #memory_int[#t~string132.base,1 + #t~string132.offset := 73];#memory_int := #memory_int[#t~string132.base,2 + #t~string132.offset := 76];#memory_int := #memory_int[#t~string132.base,3 + #t~string132.offset := 95];#memory_int := #memory_int[#t~string132.base,4 + #t~string132.offset := 112];#memory_int := #memory_int[#t~string132.base,5 + #t~string132.offset := 58];#memory_int := #memory_int[#t~string132.base,6 + #t~string132.offset := 0];call #t~string134.base, #t~string134.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string134.base,#t~string134.offset := 32];#memory_int := #memory_int[#t~string134.base,1 + #t~string134.offset := 37];#memory_int := #memory_int[#t~string134.base,2 + #t~string134.offset := 105];#memory_int := #memory_int[#t~string134.base,3 + #t~string134.offset := 0];call #t~string136.base, #t~string136.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string136.base,#t~string136.offset := 32];#memory_int := #memory_int[#t~string136.base,1 + #t~string136.offset := 37];#memory_int := #memory_int[#t~string136.base,2 + #t~string136.offset := 105];#memory_int := #memory_int[#t~string136.base,3 + #t~string136.offset := 0];call #t~string138.base, #t~string138.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string138.base,#t~string138.offset := 32];#memory_int := #memory_int[#t~string138.base,1 + #t~string138.offset := 37];#memory_int := #memory_int[#t~string138.base,2 + #t~string138.offset := 105];#memory_int := #memory_int[#t~string138.base,3 + #t~string138.offset := 0];call #t~string140.base, #t~string140.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string140.base,#t~string140.offset := 32];#memory_int := #memory_int[#t~string140.base,1 + #t~string140.offset := 37];#memory_int := #memory_int[#t~string140.base,2 + #t~string140.offset := 105];#memory_int := #memory_int[#t~string140.base,3 + #t~string140.offset := 0];call #t~string142.base, #t~string142.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string142.base,#t~string142.offset := 32];#memory_int := #memory_int[#t~string142.base,1 + #t~string142.offset := 37];#memory_int := #memory_int[#t~string142.base,2 + #t~string142.offset := 105];#memory_int := #memory_int[#t~string142.base,3 + #t~string142.offset := 0];call #t~string144.base, #t~string144.offset := #Ultimate.alloc(6);#memory_int := #memory_int[#t~string144.base,#t~string144.offset := 32];#memory_int := #memory_int[#t~string144.base,1 + #t~string144.offset := 70];#memory_int := #memory_int[#t~string144.base,2 + #t~string144.offset := 95];#memory_int := #memory_int[#t~string144.base,3 + #t~string144.offset := 112];#memory_int := #memory_int[#t~string144.base,4 + #t~string144.offset := 58];#memory_int := #memory_int[#t~string144.base,5 + #t~string144.offset := 0];call #t~string147.base, #t~string147.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string147.base,#t~string147.offset := 32];#memory_int := #memory_int[#t~string147.base,1 + #t~string147.offset := 37];#memory_int := #memory_int[#t~string147.base,2 + #t~string147.offset := 105];#memory_int := #memory_int[#t~string147.base,3 + #t~string147.offset := 0];call #t~string150.base, #t~string150.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string150.base,#t~string150.offset := 32];#memory_int := #memory_int[#t~string150.base,1 + #t~string150.offset := 37];#memory_int := #memory_int[#t~string150.base,2 + #t~string150.offset := 105];#memory_int := #memory_int[#t~string150.base,3 + #t~string150.offset := 0];call #t~string153.base, #t~string153.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string153.base,#t~string153.offset := 32];#memory_int := #memory_int[#t~string153.base,1 + #t~string153.offset := 37];#memory_int := #memory_int[#t~string153.base,2 + #t~string153.offset := 105];#memory_int := #memory_int[#t~string153.base,3 + #t~string153.offset := 0];call #t~string156.base, #t~string156.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string156.base,#t~string156.offset := 32];#memory_int := #memory_int[#t~string156.base,1 + #t~string156.offset := 37];#memory_int := #memory_int[#t~string156.base,2 + #t~string156.offset := 105];#memory_int := #memory_int[#t~string156.base,3 + #t~string156.offset := 0];call #t~string159.base, #t~string159.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string159.base,#t~string159.offset := 32];#memory_int := #memory_int[#t~string159.base,1 + #t~string159.offset := 37];#memory_int := #memory_int[#t~string159.base,2 + #t~string159.offset := 105];#memory_int := #memory_int[#t~string159.base,3 + #t~string159.offset := 0];call #t~string161.base, #t~string161.offset := #Ultimate.alloc(2);#memory_int := #memory_int[#t~string161.base,#t~string161.offset := 10];#memory_int := #memory_int[#t~string161.base,1 + #t~string161.offset := 0];~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~expectedDirection~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 271230#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res;havoc main_#t~ret177, main_~retValue_acc~31, main_~tmp~30;havoc main_~retValue_acc~31;havoc main_~tmp~30;assume { :begin_inline_select_helpers } true; 269528#L73 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 268825#L66 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res;havoc valid_product_~retValue_acc~1;havoc valid_product_~retValue_acc~1;valid_product_~retValue_acc~1 := 1;valid_product_#res := valid_product_~retValue_acc~1; 268826#L81 main_#t~ret177 := valid_product_#res;assume { :end_inline_valid_product } true;main_~tmp~30 := main_#t~ret177;havoc main_#t~ret177; 269088#L3495 assume 0 != main_~tmp~30;assume { :begin_inline_setup } true; 271540#L3472 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 271541#L842 assume { :end_inline_initFloors } true; 276278#L1590 assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret165, bobCall_~tmp~22;havoc bobCall_~tmp~22;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~9;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~9; 269001#L1473 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~9 := 4;getOrigin_#res := getOrigin_~retValue_acc~9; 268204#L1498 bobCall_#t~ret165 := getOrigin_#res;assume { :end_inline_getOrigin } true;bobCall_~tmp~22 := bobCall_#t~ret165;havoc bobCall_#t~ret165;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~22;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 269040#L1120 assume 0 == initPersonOnFloor_~floor; 268790#L1121 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 268119#L1228-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 275621#L912 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 270070#L924-2 assume { :end_inline_callOnFloor } true; 270072#L1264 assume { :end_inline_initPersonOnFloor } true; 270701#L3222 assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_~tmp~20, timeShift_~tmp___0~11, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~20;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_#t~ret3, __utac_acc__Specification3_spec__1_#t~ret4, __utac_acc__Specification3_spec__1_#t~ret5, __utac_acc__Specification3_spec__1_#t~ret6, __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_#t~ret12, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 270702#L1794 __utac_acc__Specification3_spec__1_#t~ret1 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~15;havoc getCurrentHeading_~retValue_acc~15;getCurrentHeading_~retValue_acc~15 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~15; 272834#L1846 __utac_acc__Specification3_spec__1_#t~ret2 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret2;havoc __utac_acc__Specification3_spec__1_#t~ret2; 270898#L115 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 270899#L177 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~14;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~14; 269719#L1811-5 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~14 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~14; 268036#L1832-5 __utac_acc__Specification3_spec__1_#t~ret8 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret8;havoc __utac_acc__Specification3_spec__1_#t~ret8; 268037#L181 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 269780#L221 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_#t~ret90, stopRequestedAtCurrentFloor_#t~ret91, stopRequestedAtCurrentFloor_#t~ret92, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~18, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~18;havoc stopRequestedAtCurrentFloor_~tmp___0~9;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret163, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 279100#L849 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 279095#L876 isExecutiveFloorCalling_#t~ret163 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret163;havoc isExecutiveFloorCalling_#t~ret163;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 279090#L3147 stopRequestedAtCurrentFloor_#t~ret89 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~18 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 279087#L2531 assume 0 != stopRequestedAtCurrentFloor_~tmp~18;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 279083#L1794-1 stopRequestedAtCurrentFloor_#t~ret90 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret90;havoc stopRequestedAtCurrentFloor_#t~ret90; 279078#L2535 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 279076#L2548 timeShift_#t~ret105 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3 := timeShift_#t~ret105;havoc timeShift_#t~ret105; 279074#L2684 assume !(0 != timeShift_~tmp___9~3); 279073#L2775 assume !(1 == ~doorState~0); 279072#L2775-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~14, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~6;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~14;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~6;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret163, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 279069#L849-3 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 279066#L876-3 isExecutiveFloorCalling_#t~ret163 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret163;havoc isExecutiveFloorCalling_#t~ret163;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 279061#L3147-1 stopRequestedInDirection_#t~ret80 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~6 := stopRequestedInDirection_#t~ret80;havoc stopRequestedInDirection_#t~ret80; 279058#L2386 assume 0 != stopRequestedInDirection_~tmp___0~6;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 278991#L1794-4 stopRequestedInDirection_#t~ret81 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~14 := stopRequestedInDirection_#t~ret81;havoc stopRequestedInDirection_#t~ret81;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~6 := (if stopRequestedInDirection_~tmp~14 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~21 := (if stopRequestedInDirection_~__cil_tmp8~6 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 278857#L2399 timeShift_#t~ret112 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 278850#L2783 assume 0 != timeShift_~tmp___8~3;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret83, continueInDirection_~dir, continueInDirection_~tmp~15;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~15;~currentHeading~0 := continueInDirection_~dir; 275055#L2443 assume !(1 == ~currentHeading~0); 275056#L2453 assume !(0 == ~currentFloorID~0); 276018#L2453-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 275602#L2459-1 assume { :end_inline_continueInDirection } true; 275593#L2792-2 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret13, __utac_acc__Specification3_spec__2_#t~ret14, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 283592#L246 assume !(-1 == ~expectedDirection~0); 283543#L258 assume !(1 == ~expectedDirection~0); 283539#L259 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 278847#L2807 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_~tmp~20, timeShift_~tmp___0~11, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~20;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_#t~ret3, __utac_acc__Specification3_spec__1_#t~ret4, __utac_acc__Specification3_spec__1_#t~ret5, __utac_acc__Specification3_spec__1_#t~ret6, __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_#t~ret12, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 278842#L1794-6 __utac_acc__Specification3_spec__1_#t~ret1 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~15;havoc getCurrentHeading_~retValue_acc~15;getCurrentHeading_~retValue_acc~15 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~15; 278837#L1846-3 __utac_acc__Specification3_spec__1_#t~ret2 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret2;havoc __utac_acc__Specification3_spec__1_#t~ret2; 278828#L115-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 277993#L177-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~14;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~14; 269686#L1811-19 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~14 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~14; 268368#L1832-19 __utac_acc__Specification3_spec__1_#t~ret8 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret8;havoc __utac_acc__Specification3_spec__1_#t~ret8; 268369#L181-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 269765#L221-1 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_#t~ret90, stopRequestedAtCurrentFloor_#t~ret91, stopRequestedAtCurrentFloor_#t~ret92, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~18, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~18;havoc stopRequestedAtCurrentFloor_~tmp___0~9;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret163, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 282530#L849-65 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 282526#L876-65 isExecutiveFloorCalling_#t~ret163 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret163;havoc isExecutiveFloorCalling_#t~ret163;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 282521#L3147-3 stopRequestedAtCurrentFloor_#t~ret89 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~18 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 282518#L2531-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~18;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 282514#L1794-7 stopRequestedAtCurrentFloor_#t~ret90 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret90;havoc stopRequestedAtCurrentFloor_#t~ret90; 282509#L2535-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 282507#L2548-1 timeShift_#t~ret105 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3 := timeShift_#t~ret105;havoc timeShift_#t~ret105; 282503#L2684-2 assume !(0 != timeShift_~tmp___9~3); 282501#L2775-3 assume !(1 == ~doorState~0); 282498#L2775-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~14, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~6;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~14;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~6;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret163, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 282497#L849-68 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 282491#L876-68 isExecutiveFloorCalling_#t~ret163 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret163;havoc isExecutiveFloorCalling_#t~ret163;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 282446#L3147-4 stopRequestedInDirection_#t~ret80 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~6 := stopRequestedInDirection_#t~ret80;havoc stopRequestedInDirection_#t~ret80; 282441#L2386-2 assume 0 != stopRequestedInDirection_~tmp___0~6;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 282440#L1794-10 stopRequestedInDirection_#t~ret81 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~14 := stopRequestedInDirection_#t~ret81;havoc stopRequestedInDirection_#t~ret81;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~6 := (if stopRequestedInDirection_~tmp~14 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~21 := (if stopRequestedInDirection_~__cil_tmp8~6 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 282438#L2399-2 timeShift_#t~ret112 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 282436#L2783-2 assume 0 != timeShift_~tmp___8~3;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret83, continueInDirection_~dir, continueInDirection_~tmp~15;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~15;~currentHeading~0 := continueInDirection_~dir; 282437#L2443-3 assume !(1 == ~currentHeading~0); 276012#L2453-9 assume !(0 == ~currentFloorID~0); 274634#L2453-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 295458#L2459-7 assume { :end_inline_continueInDirection } true; 295455#L2792-5 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret13, __utac_acc__Specification3_spec__2_#t~ret14, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 295453#L246-1 assume !(-1 == ~expectedDirection~0); 295450#L258-1 assume !(1 == ~expectedDirection~0); 295448#L259-1 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 278844#L2807-1 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_~tmp~20, timeShift_~tmp___0~11, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~20;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_#t~ret3, __utac_acc__Specification3_spec__1_#t~ret4, __utac_acc__Specification3_spec__1_#t~ret5, __utac_acc__Specification3_spec__1_#t~ret6, __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_#t~ret12, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 278839#L1794-12 __utac_acc__Specification3_spec__1_#t~ret1 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~15;havoc getCurrentHeading_~retValue_acc~15;getCurrentHeading_~retValue_acc~15 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~15; 278834#L1846-6 __utac_acc__Specification3_spec__1_#t~ret2 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret2;havoc __utac_acc__Specification3_spec__1_#t~ret2; 278826#L115-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 277991#L177-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~14;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~14; 270720#L1811-33 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~14 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~14; 268283#L1832-33 __utac_acc__Specification3_spec__1_#t~ret8 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret8;havoc __utac_acc__Specification3_spec__1_#t~ret8; 268284#L181-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 269760#L221-2 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_#t~ret90, stopRequestedAtCurrentFloor_#t~ret91, stopRequestedAtCurrentFloor_#t~ret92, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~18, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~18;havoc stopRequestedAtCurrentFloor_~tmp___0~9;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret163, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 283123#L849-130 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 283104#L876-130 isExecutiveFloorCalling_#t~ret163 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret163;havoc isExecutiveFloorCalling_#t~ret163;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 283098#L3147-6 stopRequestedAtCurrentFloor_#t~ret89 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~18 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 283080#L2531-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~18;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 283075#L1794-13 stopRequestedAtCurrentFloor_#t~ret90 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret90;havoc stopRequestedAtCurrentFloor_#t~ret90; 283071#L2535-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 283070#L2548-2 timeShift_#t~ret105 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3 := timeShift_#t~ret105;havoc timeShift_#t~ret105; 283068#L2684-4 assume !(0 != timeShift_~tmp___9~3); 283067#L2775-6 assume !(1 == ~doorState~0); 283066#L2775-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~14, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~6;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~14;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~6;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret163, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 283061#L849-133 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 283044#L876-133 isExecutiveFloorCalling_#t~ret163 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret163;havoc isExecutiveFloorCalling_#t~ret163;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 281722#L3147-7 stopRequestedInDirection_#t~ret80 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~6 := stopRequestedInDirection_#t~ret80;havoc stopRequestedInDirection_#t~ret80; 281436#L2386-4 assume 0 != stopRequestedInDirection_~tmp___0~6;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 281426#L1794-16 stopRequestedInDirection_#t~ret81 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~14 := stopRequestedInDirection_#t~ret81;havoc stopRequestedInDirection_#t~ret81;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~6 := (if stopRequestedInDirection_~tmp~14 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~21 := (if stopRequestedInDirection_~__cil_tmp8~6 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 281421#L2399-4 timeShift_#t~ret112 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 281418#L2783-4 assume 0 != timeShift_~tmp___8~3;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret83, continueInDirection_~dir, continueInDirection_~tmp~15;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~15;~currentHeading~0 := continueInDirection_~dir; 281416#L2443-6 assume !(1 == ~currentHeading~0); 275964#L2453-18 assume !(0 == ~currentFloorID~0); 273900#L2453-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 296978#L2459-13 assume { :end_inline_continueInDirection } true; 296975#L2792-8 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret13, __utac_acc__Specification3_spec__2_#t~ret14, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 296488#L246-2 assume !(-1 == ~expectedDirection~0); 296485#L258-2 assume !(1 == ~expectedDirection~0); 296483#L259-2 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 296482#L2807-2 assume { :end_inline_timeShift } true; 296481#L3289 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret165, bobCall_~tmp~22;havoc bobCall_~tmp~22;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~9;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~9; 296479#L1473-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~9 := 4;getOrigin_#res := getOrigin_~retValue_acc~9; 296474#L1498-1 bobCall_#t~ret165 := getOrigin_#res;assume { :end_inline_getOrigin } true;bobCall_~tmp~22 := bobCall_#t~ret165;havoc bobCall_#t~ret165;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~22;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 296471#L1120-1 assume 0 == initPersonOnFloor_~floor; 296452#L1121-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 296436#L1228-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 296435#L912-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 296427#L924-5 assume { :end_inline_callOnFloor } true; 296405#L1264-1 assume { :end_inline_initPersonOnFloor } true; 278846#L3222-1 assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret171, cleanup_#t~ret172, cleanup_~i~3, cleanup_~tmp~28, cleanup_~tmp___0~13, cleanup_~__cil_tmp4~3;havoc cleanup_~i~3;havoc cleanup_~tmp~28;havoc cleanup_~tmp___0~13;havoc cleanup_~__cil_tmp4~3;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_~tmp~20, timeShift_~tmp___0~11, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~20;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_#t~ret3, __utac_acc__Specification3_spec__1_#t~ret4, __utac_acc__Specification3_spec__1_#t~ret5, __utac_acc__Specification3_spec__1_#t~ret6, __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_#t~ret12, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 278841#L1794-18 __utac_acc__Specification3_spec__1_#t~ret1 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~15;havoc getCurrentHeading_~retValue_acc~15;getCurrentHeading_~retValue_acc~15 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~15; 278836#L1846-9 __utac_acc__Specification3_spec__1_#t~ret2 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret2;havoc __utac_acc__Specification3_spec__1_#t~ret2; 278832#L115-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 278001#L177-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~14;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~14; 270691#L1811-47 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~14 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~14; 268174#L1832-47 __utac_acc__Specification3_spec__1_#t~ret8 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret8;havoc __utac_acc__Specification3_spec__1_#t~ret8; 268175#L181-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 269771#L221-3 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_#t~ret90, stopRequestedAtCurrentFloor_#t~ret91, stopRequestedAtCurrentFloor_#t~ret92, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~18, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~18;havoc stopRequestedAtCurrentFloor_~tmp___0~9;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret163, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 281294#L849-195 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 281289#L876-195 isExecutiveFloorCalling_#t~ret163 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret163;havoc isExecutiveFloorCalling_#t~ret163;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 281286#L3147-9 stopRequestedAtCurrentFloor_#t~ret89 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~18 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 281284#L2531-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~18;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 281285#L1794-19 stopRequestedAtCurrentFloor_#t~ret90 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret90;havoc stopRequestedAtCurrentFloor_#t~ret90; 281247#L2535-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 281245#L2548-3 timeShift_#t~ret105 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3 := timeShift_#t~ret105;havoc timeShift_#t~ret105; 281243#L2684-6 assume !(0 != timeShift_~tmp___9~3); 281242#L2775-9 assume !(1 == ~doorState~0); 281241#L2775-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~14, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~6;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~14;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~6;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret163, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 281238#L849-198 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 281235#L876-198 isExecutiveFloorCalling_#t~ret163 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret163;havoc isExecutiveFloorCalling_#t~ret163;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 281234#L3147-10 stopRequestedInDirection_#t~ret80 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~6 := stopRequestedInDirection_#t~ret80;havoc stopRequestedInDirection_#t~ret80; 279899#L2386-6 assume 0 != stopRequestedInDirection_~tmp___0~6;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 279894#L1794-22 stopRequestedInDirection_#t~ret81 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~14 := stopRequestedInDirection_#t~ret81;havoc stopRequestedInDirection_#t~ret81;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~6 := (if stopRequestedInDirection_~tmp~14 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~21 := (if stopRequestedInDirection_~__cil_tmp8~6 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 279893#L2399-6 timeShift_#t~ret112 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 279887#L2783-6 assume 0 != timeShift_~tmp___8~3;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret83, continueInDirection_~dir, continueInDirection_~tmp~15;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~15;~currentHeading~0 := continueInDirection_~dir; 279888#L2443-9 assume !(1 == ~currentHeading~0); 275956#L2453-27 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 275957#L2453-29 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 316472#L2459-19 assume { :end_inline_continueInDirection } true; 314940#L2792-11 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret13, __utac_acc__Specification3_spec__2_#t~ret14, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 314935#L246-3 assume !(-1 == ~expectedDirection~0); 314929#L258-3 assume !(1 == ~expectedDirection~0); 314925#L259-3 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 314552#L2807-3 assume { :end_inline_timeShift } true;cleanup_~i~3 := 0; 314550#L3304-3 [2018-11-18 13:54:23,527 INFO L796 eck$LassoCheckResult]: Loop: 314550#L3304-3 assume true; 314549#L3304-1 assume !false; 314548#L3305 cleanup_~__cil_tmp4~3 := ~cleanupTimeShifts~0 - 1; 314547#L3308 assume cleanup_~i~3 < cleanup_~__cil_tmp4~3;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~11;havoc isBlocked_~retValue_acc~11;isBlocked_~retValue_acc~11 := 0;isBlocked_#res := isBlocked_~retValue_acc~11; 289066#L1621 cleanup_#t~ret171 := isBlocked_#res;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~13 := cleanup_#t~ret171;havoc cleanup_#t~ret171; 289065#L3312 assume 1 != cleanup_~tmp___0~13; 289064#L3312-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res;havoc isIdle_#t~ret64, isIdle_~retValue_acc~18, isIdle_~tmp~11;havoc isIdle_~retValue_acc~18;havoc isIdle_~tmp~11;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret59, anyStopRequested_#t~ret60, anyStopRequested_#t~ret61, anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_~retValue_acc~17, anyStopRequested_~tmp~10, anyStopRequested_~tmp___0~4, anyStopRequested_~tmp___1~3, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~1;havoc anyStopRequested_~retValue_acc~17;havoc anyStopRequested_~tmp~10;havoc anyStopRequested_~tmp___0~4;havoc anyStopRequested_~tmp___1~3;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 289055#L849-260 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 289052#L876-260 anyStopRequested_#t~ret59 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1 := anyStopRequested_#t~ret59;havoc anyStopRequested_#t~ret59; 288921#L1902 assume 0 != anyStopRequested_~tmp___3~1;anyStopRequested_~retValue_acc~17 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~17; 288909#L1966 isIdle_#t~ret64 := anyStopRequested_#res;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~11 := isIdle_#t~ret64;havoc isIdle_#t~ret64;isIdle_~retValue_acc~18 := (if 0 == isIdle_~tmp~11 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~18; 286864#L1979 cleanup_#t~ret172 := isIdle_#res;assume { :end_inline_isIdle } true;cleanup_~tmp~28 := cleanup_#t~ret172;havoc cleanup_#t~ret172; 286865#L3324 assume !(0 != cleanup_~tmp~28);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_~tmp~20, timeShift_~tmp___0~11, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~20;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_#t~ret3, __utac_acc__Specification3_spec__1_#t~ret4, __utac_acc__Specification3_spec__1_#t~ret5, __utac_acc__Specification3_spec__1_#t~ret6, __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_#t~ret12, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 309622#L1794-24 __utac_acc__Specification3_spec__1_#t~ret1 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~15;havoc getCurrentHeading_~retValue_acc~15;getCurrentHeading_~retValue_acc~15 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~15; 309621#L1846-12 __utac_acc__Specification3_spec__1_#t~ret2 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret2;havoc __utac_acc__Specification3_spec__1_#t~ret2; 309620#L115-4 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 309619#L116-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~14;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~14; 270687#L1811-56 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~14 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~14; 268439#L1832-56 __utac_acc__Specification3_spec__1_#t~ret3 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~0 := __utac_acc__Specification3_spec__1_#t~ret3;havoc __utac_acc__Specification3_spec__1_#t~ret3; 272018#L120-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0;~expectedDirection~0 := 1; 272019#L221-4 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_#t~ret90, stopRequestedAtCurrentFloor_#t~ret91, stopRequestedAtCurrentFloor_#t~ret92, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~18, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~18;havoc stopRequestedAtCurrentFloor_~tmp___0~9;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret163, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 315426#L849-265 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 315422#L876-265 isExecutiveFloorCalling_#t~ret163 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret163;havoc isExecutiveFloorCalling_#t~ret163;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 315421#L3147-12 stopRequestedAtCurrentFloor_#t~ret89 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~18 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 315420#L2531-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~18;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 286425#L1794-25 stopRequestedAtCurrentFloor_#t~ret90 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret90;havoc stopRequestedAtCurrentFloor_#t~ret90; 286411#L2535-4 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 286409#L2548-4 timeShift_#t~ret105 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3 := timeShift_#t~ret105;havoc timeShift_#t~ret105; 286402#L2684-8 assume !(0 != timeShift_~tmp___9~3); 286399#L2775-12 assume 1 == ~doorState~0;~doorState~0 := 0; 286400#L2775-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~14, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~6;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~14;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~6;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret163, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 286392#L849-268 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 286384#L876-268 isExecutiveFloorCalling_#t~ret163 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret163;havoc isExecutiveFloorCalling_#t~ret163;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 286385#L3147-13 stopRequestedInDirection_#t~ret80 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~6 := stopRequestedInDirection_#t~ret80;havoc stopRequestedInDirection_#t~ret80; 309536#L2386-8 assume 0 != stopRequestedInDirection_~tmp___0~6;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 309422#L1794-28 stopRequestedInDirection_#t~ret81 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~14 := stopRequestedInDirection_#t~ret81;havoc stopRequestedInDirection_#t~ret81;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~6 := (if stopRequestedInDirection_~tmp~14 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~21 := (if stopRequestedInDirection_~__cil_tmp8~6 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 309421#L2399-8 timeShift_#t~ret112 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 309415#L2783-8 assume 0 != timeShift_~tmp___8~3;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret83, continueInDirection_~dir, continueInDirection_~tmp~15;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~15;~currentHeading~0 := continueInDirection_~dir; 309417#L2443-12 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~7;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~7;isTopFloor_~retValue_acc~7 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~7; 319040#L1423-39 continueInDirection_#t~ret83 := isTopFloor_#res;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~15 := continueInDirection_#t~ret83;havoc continueInDirection_#t~ret83; 319036#L2447-36 assume !(0 != continueInDirection_~tmp~15); 319033#L2453-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 319026#L2459-25 assume { :end_inline_continueInDirection } true; 316469#L2792-14 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret13, __utac_acc__Specification3_spec__2_#t~ret14, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 314942#L246-4 assume !(-1 == ~expectedDirection~0); 314938#L258-4 assume 1 == ~expectedDirection~0;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~15;havoc getCurrentHeading_~retValue_acc~15;getCurrentHeading_~retValue_acc~15 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~15; 314928#L1846-14 __utac_acc__Specification3_spec__2_#t~ret14 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__2_~tmp~1 := __utac_acc__Specification3_spec__2_#t~ret14;havoc __utac_acc__Specification3_spec__2_#t~ret14; 314926#L263-12 assume !(0 == __utac_acc__Specification3_spec__2_~tmp~1); 314924#L259-4 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 314551#L2807-4 assume { :end_inline_timeShift } true;cleanup_~i~3 := 1 + cleanup_~i~3; 314550#L3304-3 [2018-11-18 13:54:23,535 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 13:54:23,535 INFO L82 PathProgramCache]: Analyzing trace with hash -1202644716, now seen corresponding path program 4 times [2018-11-18 13:54:23,536 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 13:54:23,536 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 13:54:23,536 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 13:54:23,536 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 13:54:23,536 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 13:54:23,549 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 13:54:24,326 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 13:54:24,326 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 13:54:24,327 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-18 13:54:24,327 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-18 13:54:24,327 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 13:54:24,327 INFO L82 PathProgramCache]: Analyzing trace with hash 1434216626, now seen corresponding path program 1 times [2018-11-18 13:54:24,327 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 13:54:24,327 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 13:54:24,328 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 13:54:24,328 INFO L101 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2018-11-18 13:54:24,328 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 13:54:24,337 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2018-11-18 13:54:24,344 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2018-11-18 13:54:24,887 WARN L180 SmtUtils]: Spent 509.00 ms on a formula simplification. DAG size of input: 210 DAG size of output: 188 [2018-11-18 13:54:25,700 WARN L180 SmtUtils]: Spent 780.00 ms on a formula simplification. DAG size of input: 174 DAG size of output: 144 [2018-11-18 13:54:25,707 INFO L216 LassoAnalysis]: Preferences: [2018-11-18 13:54:25,708 INFO L124 ssoRankerPreferences]: Compute integeral hull: false [2018-11-18 13:54:25,708 INFO L125 ssoRankerPreferences]: Enable LassoPartitioneer: true [2018-11-18 13:54:25,708 INFO L126 ssoRankerPreferences]: Term annotations enabled: false [2018-11-18 13:54:25,708 INFO L127 ssoRankerPreferences]: Use exernal solver: true [2018-11-18 13:54:25,708 INFO L128 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 13:54:25,708 INFO L129 ssoRankerPreferences]: Dump SMT script to file: false [2018-11-18 13:54:25,708 INFO L130 ssoRankerPreferences]: Path of dumped script: [2018-11-18 13:54:25,709 INFO L131 ssoRankerPreferences]: Filename of dumped script: elevator_spec3_product31_false-unreach-call_true-termination.cil.c_Iteration5_Loop [2018-11-18 13:54:25,709 INFO L132 ssoRankerPreferences]: MapElimAlgo: Frank [2018-11-18 13:54:25,709 INFO L282 LassoAnalysis]: Starting lasso preprocessing... [2018-11-18 13:54:25,728 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:25,741 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:25,744 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:25,746 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:25,747 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:25,748 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:25,749 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:25,750 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:25,751 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:25,752 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:25,755 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:25,759 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:25,762 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:25,764 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:25,766 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:25,768 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:25,769 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:25,771 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:25,772 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:25,774 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:25,775 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:25,776 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:25,777 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:25,778 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:25,779 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:25,780 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:25,803 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:25,804 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:25,806 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:25,811 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:25,812 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:25,813 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:25,815 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:25,816 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:25,820 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:25,822 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:25,825 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:25,826 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:25,829 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:25,831 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:25,832 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:25,833 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:25,836 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:25,837 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:25,845 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:25,847 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:25,848 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:25,849 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:25,854 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:25,855 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:25,856 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:25,857 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:25,858 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:25,863 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:25,864 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:25,867 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:25,868 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:25,869 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:25,870 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:25,871 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:25,872 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:25,876 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:25,877 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:25,878 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:25,887 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:25,888 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:25,889 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:25,890 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:25,892 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:25,895 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:25,896 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:25,900 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:25,901 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:25,905 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:25,906 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:25,909 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:25,910 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:25,911 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:25,911 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:25,912 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:25,913 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:25,914 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:25,916 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:25,917 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:25,918 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:25,921 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:26,322 INFO L300 LassoAnalysis]: Preprocessing complete. [2018-11-18 13:54:26,324 INFO L412 LassoAnalysis]: Checking for nontermination... No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_d47f2f59-b6b2-4706-88d5-8e224a45e142/bin-2019/uautomizer/z3 Starting monitored process 2 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 2 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 13:54:26,330 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 13:54:26,330 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 13:54:26,336 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 13:54:26,337 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___9~0=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___9~0=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_d47f2f59-b6b2-4706-88d5-8e224a45e142/bin-2019/uautomizer/z3 Starting monitored process 3 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 3 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 13:54:26,362 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 13:54:26,362 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 13:54:26,364 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 13:54:26,364 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_cleanup_#t~ret172=0} Honda state: {ULTIMATE.start_cleanup_#t~ret172=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_d47f2f59-b6b2-4706-88d5-8e224a45e142/bin-2019/uautomizer/z3 Starting monitored process 4 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 4 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 13:54:26,389 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 13:54:26,389 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 13:54:26,392 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 13:54:26,392 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__1_#t~ret10=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__1_#t~ret10=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_d47f2f59-b6b2-4706-88d5-8e224a45e142/bin-2019/uautomizer/z3 Starting monitored process 5 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 5 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 13:54:26,410 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 13:54:26,410 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 13:54:26,412 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 13:54:26,413 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___5~3=0} Honda state: {ULTIMATE.start_timeShift_~tmp___5~3=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_d47f2f59-b6b2-4706-88d5-8e224a45e142/bin-2019/uautomizer/z3 Starting monitored process 6 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 6 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 13:54:26,431 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 13:54:26,431 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 13:54:26,441 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 13:54:26,442 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___6~3=0} Honda state: {ULTIMATE.start_timeShift_~tmp___6~3=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_d47f2f59-b6b2-4706-88d5-8e224a45e142/bin-2019/uautomizer/z3 Starting monitored process 7 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 7 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 13:54:26,466 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 13:54:26,466 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 13:54:26,469 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 13:54:26,469 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___8~0=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___8~0=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_d47f2f59-b6b2-4706-88d5-8e224a45e142/bin-2019/uautomizer/z3 Starting monitored process 8 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 8 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 13:54:26,486 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 13:54:26,486 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 13:54:26,488 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 13:54:26,488 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_anyStopRequested_#t~ret60=0} Honda state: {ULTIMATE.start_anyStopRequested_#t~ret60=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_d47f2f59-b6b2-4706-88d5-8e224a45e142/bin-2019/uautomizer/z3 Starting monitored process 9 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 9 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 13:54:26,504 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 13:54:26,504 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 13:54:26,506 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 13:54:26,506 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret114=0} Honda state: {ULTIMATE.start_timeShift_#t~ret114=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_d47f2f59-b6b2-4706-88d5-8e224a45e142/bin-2019/uautomizer/z3 Starting monitored process 10 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 10 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 13:54:26,524 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 13:54:26,524 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 13:54:26,526 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 13:54:26,527 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__1_#t~ret5=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__1_#t~ret5=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_d47f2f59-b6b2-4706-88d5-8e224a45e142/bin-2019/uautomizer/z3 Starting monitored process 11 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 11 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 13:54:26,549 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 13:54:26,549 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 13:54:26,554 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 13:54:26,554 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_#in~respectFloorCalls=1, ULTIMATE.start_stopRequestedInDirection_~respectFloorCalls=1} Honda state: {ULTIMATE.start_stopRequestedInDirection_#in~respectFloorCalls=1, ULTIMATE.start_stopRequestedInDirection_~respectFloorCalls=1} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_d47f2f59-b6b2-4706-88d5-8e224a45e142/bin-2019/uautomizer/z3 Starting monitored process 12 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 12 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 13:54:26,581 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 13:54:26,581 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 13:54:26,585 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 13:54:26,585 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_anyStopRequested_#res=1, ULTIMATE.start_anyStopRequested_~retValue_acc~17=1, ULTIMATE.start_isIdle_~tmp~11=1} Honda state: {ULTIMATE.start_anyStopRequested_#res=1, ULTIMATE.start_anyStopRequested_~retValue_acc~17=1, ULTIMATE.start_isIdle_~tmp~11=1} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_d47f2f59-b6b2-4706-88d5-8e224a45e142/bin-2019/uautomizer/z3 Starting monitored process 13 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 13 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 13:54:26,602 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 13:54:26,603 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 13:54:26,607 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 13:54:26,607 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_cleanup_~tmp___0~13=0, ULTIMATE.start_isBlocked_~retValue_acc~11=0, ULTIMATE.start_isBlocked_#res=0} Honda state: {ULTIMATE.start_cleanup_~tmp___0~13=0, ULTIMATE.start_isBlocked_~retValue_acc~11=0, ULTIMATE.start_isBlocked_#res=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_d47f2f59-b6b2-4706-88d5-8e224a45e142/bin-2019/uautomizer/z3 Starting monitored process 14 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 14 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 13:54:26,626 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 13:54:26,626 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 13:54:26,629 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 13:54:26,629 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {~expectedDirection~0=1} Honda state: {~expectedDirection~0=1} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_d47f2f59-b6b2-4706-88d5-8e224a45e142/bin-2019/uautomizer/z3 Starting monitored process 15 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 15 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 13:54:26,645 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 13:54:26,646 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 13:54:26,650 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 13:54:26,650 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_~__cil_tmp8~6=1, ULTIMATE.start_stopRequestedInDirection_~__cil_tmp7~5=1} Honda state: {ULTIMATE.start_stopRequestedInDirection_~__cil_tmp8~6=1, ULTIMATE.start_stopRequestedInDirection_~__cil_tmp7~5=1} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_d47f2f59-b6b2-4706-88d5-8e224a45e142/bin-2019/uautomizer/z3 Starting monitored process 16 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 16 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 13:54:26,675 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 13:54:26,675 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 13:54:26,681 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 13:54:26,681 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp~20=0} Honda state: {ULTIMATE.start_timeShift_~tmp~20=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_d47f2f59-b6b2-4706-88d5-8e224a45e142/bin-2019/uautomizer/z3 Starting monitored process 17 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 17 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 13:54:26,699 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 13:54:26,699 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 13:54:26,705 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 13:54:26,705 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__1_#t~ret11=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__1_#t~ret11=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_d47f2f59-b6b2-4706-88d5-8e224a45e142/bin-2019/uautomizer/z3 Starting monitored process 18 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 18 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 13:54:26,722 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 13:54:26,722 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 13:54:26,724 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 13:54:26,725 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___0~0=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___0~0=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_d47f2f59-b6b2-4706-88d5-8e224a45e142/bin-2019/uautomizer/z3 Starting monitored process 19 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 19 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 13:54:26,743 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 13:54:26,743 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 13:54:26,745 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 13:54:26,745 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__1_#t~ret4=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__1_#t~ret4=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_d47f2f59-b6b2-4706-88d5-8e224a45e142/bin-2019/uautomizer/z3 Starting monitored process 20 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 20 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 13:54:26,763 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 13:54:26,763 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 13:54:26,766 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 13:54:26,766 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___1~6=0} Honda state: {ULTIMATE.start_timeShift_~tmp___1~6=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_d47f2f59-b6b2-4706-88d5-8e224a45e142/bin-2019/uautomizer/z3 Starting monitored process 21 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 21 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 13:54:26,783 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 13:54:26,783 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 13:54:26,785 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 13:54:26,786 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_anyStopRequested_#t~ret59=0} Honda state: {ULTIMATE.start_anyStopRequested_#t~ret59=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_d47f2f59-b6b2-4706-88d5-8e224a45e142/bin-2019/uautomizer/z3 Starting monitored process 22 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 22 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 13:54:26,810 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 13:54:26,810 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 13:54:26,812 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 13:54:26,812 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__2_~tmp___0~1=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__2_~tmp___0~1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_d47f2f59-b6b2-4706-88d5-8e224a45e142/bin-2019/uautomizer/z3 Starting monitored process 23 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 23 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 13:54:26,837 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 13:54:26,837 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 13:54:26,839 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 13:54:26,839 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret111=0} Honda state: {ULTIMATE.start_timeShift_#t~ret111=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_d47f2f59-b6b2-4706-88d5-8e224a45e142/bin-2019/uautomizer/z3 Starting monitored process 24 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 24 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 13:54:26,855 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 13:54:26,855 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 13:54:26,858 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 13:54:26,858 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___1~0=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___1~0=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_d47f2f59-b6b2-4706-88d5-8e224a45e142/bin-2019/uautomizer/z3 Starting monitored process 25 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 25 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 13:54:26,883 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 13:54:26,883 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 13:54:26,885 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 13:54:26,885 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_isExecutiveFloorCalling_#t~ret163=0} Honda state: {ULTIMATE.start_isExecutiveFloorCalling_#t~ret163=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_d47f2f59-b6b2-4706-88d5-8e224a45e142/bin-2019/uautomizer/z3 Starting monitored process 26 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 26 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 13:54:26,905 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 13:54:26,905 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 13:54:26,907 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 13:54:26,908 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_cleanup_#t~ret171=0} Honda state: {ULTIMATE.start_cleanup_#t~ret171=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_d47f2f59-b6b2-4706-88d5-8e224a45e142/bin-2019/uautomizer/z3 Starting monitored process 27 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 27 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 13:54:26,923 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 13:54:26,923 INFO L163 nArgumentSynthesizer]: Using integer mode. No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_d47f2f59-b6b2-4706-88d5-8e224a45e142/bin-2019/uautomizer/z3 Starting monitored process 28 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 28 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 13:54:26,945 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 3 Nilpotent components: true [2018-11-18 13:54:26,945 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 13:54:28,061 INFO L452 LassoAnalysis]: Proving nontermination failed: No geometric nontermination argument exists. [2018-11-18 13:54:28,063 INFO L216 LassoAnalysis]: Preferences: [2018-11-18 13:54:28,063 INFO L124 ssoRankerPreferences]: Compute integeral hull: false [2018-11-18 13:54:28,063 INFO L125 ssoRankerPreferences]: Enable LassoPartitioneer: true [2018-11-18 13:54:28,063 INFO L126 ssoRankerPreferences]: Term annotations enabled: false [2018-11-18 13:54:28,063 INFO L127 ssoRankerPreferences]: Use exernal solver: false [2018-11-18 13:54:28,063 INFO L128 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 13:54:28,063 INFO L129 ssoRankerPreferences]: Dump SMT script to file: false [2018-11-18 13:54:28,063 INFO L130 ssoRankerPreferences]: Path of dumped script: [2018-11-18 13:54:28,064 INFO L131 ssoRankerPreferences]: Filename of dumped script: elevator_spec3_product31_false-unreach-call_true-termination.cil.c_Iteration5_Loop [2018-11-18 13:54:28,064 INFO L132 ssoRankerPreferences]: MapElimAlgo: Frank [2018-11-18 13:54:28,064 INFO L282 LassoAnalysis]: Starting lasso preprocessing... [2018-11-18 13:54:28,067 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:28,076 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:28,078 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:28,081 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:28,083 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:28,085 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:28,087 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:28,096 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:28,099 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:28,104 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:28,110 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:28,111 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:28,116 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:28,118 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:28,119 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:28,121 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:28,125 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:28,129 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:28,131 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:28,132 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:28,135 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:28,137 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:28,139 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:28,140 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:28,149 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:28,151 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:28,153 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:28,159 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:28,161 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:28,163 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:28,165 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:28,174 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:28,176 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:28,178 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:28,194 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:28,198 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:28,200 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:28,204 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:28,206 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:28,208 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:28,219 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:28,221 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:28,228 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:28,237 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:28,241 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:28,246 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:28,249 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:28,251 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:28,253 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:28,255 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:28,256 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:28,259 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:28,261 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:28,263 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:28,265 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:28,271 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:28,272 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:28,274 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:28,286 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:28,288 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:28,293 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:28,295 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:28,300 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:28,303 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:28,305 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:28,307 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:28,308 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:28,310 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:28,316 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:28,318 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:28,321 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:28,323 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:28,326 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:28,328 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:28,331 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:28,334 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:28,337 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:28,339 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:28,341 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:28,345 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:28,347 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:28,349 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:28,352 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:28,354 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:28,357 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:28,361 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 13:54:28,793 INFO L300 LassoAnalysis]: Preprocessing complete. [2018-11-18 13:54:28,797 INFO L497 LassoAnalysis]: Using template 'affine'. [2018-11-18 13:54:28,798 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 13:54:28,799 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 13:54:28,799 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 13:54:28,800 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 13:54:28,800 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 13:54:28,800 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 13:54:28,801 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 13:54:28,801 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 13:54:28,802 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 13:54:28,803 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 13:54:28,803 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 13:54:28,803 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 13:54:28,803 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 13:54:28,803 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 13:54:28,803 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 13:54:28,803 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 13:54:28,803 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 13:54:28,804 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 13:54:28,804 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 13:54:28,804 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 13:54:28,804 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 13:54:28,804 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 13:54:28,804 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 13:54:28,804 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 13:54:28,805 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 13:54:28,805 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 13:54:28,805 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 13:54:28,806 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 13:54:28,806 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 13:54:28,806 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 13:54:28,806 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 13:54:28,806 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 13:54:28,806 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 13:54:28,807 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 13:54:28,807 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 13:54:28,807 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 13:54:28,807 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 13:54:28,808 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 13:54:28,808 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 13:54:28,808 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 13:54:28,808 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 13:54:28,808 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 13:54:28,809 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 13:54:28,809 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 13:54:28,809 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 13:54:28,809 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 13:54:28,810 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 13:54:28,810 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 13:54:28,810 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 13:54:28,810 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 13:54:28,810 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 13:54:28,811 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 13:54:28,811 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 13:54:28,811 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 13:54:28,811 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 13:54:28,812 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 13:54:28,812 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 13:54:28,812 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 13:54:28,812 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 13:54:28,812 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 13:54:28,812 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 13:54:28,812 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 13:54:28,813 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 13:54:28,813 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 13:54:28,814 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 13:54:28,814 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 13:54:28,814 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 13:54:28,814 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 13:54:28,814 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 13:54:28,814 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 13:54:28,814 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 13:54:28,815 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 13:54:28,815 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 13:54:28,815 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 13:54:28,816 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 13:54:28,816 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 13:54:28,816 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 13:54:28,816 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 13:54:28,816 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 13:54:28,816 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 13:54:28,818 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 13:54:28,818 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 13:54:28,818 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 13:54:28,818 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 13:54:28,818 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 13:54:28,819 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 13:54:28,819 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 13:54:28,819 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 13:54:28,819 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 13:54:28,821 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 13:54:28,821 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 13:54:28,822 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 13:54:28,822 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 13:54:28,822 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 13:54:28,822 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 13:54:28,822 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 13:54:28,822 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 13:54:28,822 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 13:54:28,823 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 13:54:28,823 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 13:54:28,823 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 13:54:28,824 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 13:54:28,824 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 13:54:28,824 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 13:54:28,824 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 13:54:28,824 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 13:54:28,824 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 13:54:28,826 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 13:54:28,826 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 13:54:28,826 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 13:54:28,826 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 13:54:28,827 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 13:54:28,827 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 13:54:28,827 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 13:54:28,827 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 13:54:28,827 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 13:54:28,828 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 13:54:28,828 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 13:54:28,828 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 13:54:28,828 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 13:54:28,828 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 13:54:28,828 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 13:54:28,829 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 13:54:28,829 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 13:54:28,829 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 13:54:28,830 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 13:54:28,830 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 13:54:28,830 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 13:54:28,830 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 13:54:28,830 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 13:54:28,830 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 13:54:28,831 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 13:54:28,831 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 13:54:28,831 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 13:54:28,831 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 13:54:28,832 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 13:54:28,832 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 13:54:28,832 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 13:54:28,832 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 13:54:28,832 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 13:54:28,832 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 13:54:28,833 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 13:54:28,833 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 13:54:28,833 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 13:54:28,834 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 13:54:28,834 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 13:54:28,834 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 13:54:28,834 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 13:54:28,835 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 13:54:28,835 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 13:54:28,835 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 13:54:28,835 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 13:54:28,837 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 13:54:28,838 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 13:54:28,838 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 13:54:28,838 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 13:54:28,838 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 13:54:28,838 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 13:54:28,838 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 13:54:28,838 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 13:54:28,838 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 13:54:28,839 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 13:54:28,839 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 13:54:28,839 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 13:54:28,839 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 13:54:28,839 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 13:54:28,839 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 13:54:28,839 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 13:54:28,840 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 13:54:28,840 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 13:54:28,840 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 13:54:28,840 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 13:54:28,840 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 13:54:28,840 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 13:54:28,841 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 13:54:28,841 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 13:54:28,841 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 13:54:28,841 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 13:54:28,841 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 13:54:28,842 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 13:54:28,842 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 13:54:28,842 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 13:54:28,842 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 13:54:28,842 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 13:54:28,842 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 13:54:28,843 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 13:54:28,843 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 13:54:28,843 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 13:54:28,843 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 13:54:28,844 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 13:54:28,844 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 13:54:28,844 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 13:54:28,844 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 13:54:28,844 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 13:54:28,844 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 13:54:28,845 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 13:54:28,845 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 13:54:28,845 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 13:54:28,845 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 13:54:28,846 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 13:54:28,846 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 13:54:28,846 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 13:54:28,846 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 13:54:28,846 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 13:54:28,846 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 13:54:28,847 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 13:54:28,847 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 13:54:28,847 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 13:54:28,848 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 13:54:28,848 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 13:54:28,848 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 13:54:28,848 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 13:54:28,848 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 13:54:28,848 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 13:54:28,848 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 13:54:28,849 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 13:54:28,849 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 13:54:28,850 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 13:54:28,850 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 13:54:28,850 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 13:54:28,850 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 13:54:28,850 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 13:54:28,850 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 13:54:28,850 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 13:54:28,850 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 13:54:28,851 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 13:54:28,851 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 13:54:28,851 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 13:54:28,851 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 13:54:28,851 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 13:54:28,851 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 13:54:28,851 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 13:54:28,851 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 13:54:28,852 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 13:54:28,852 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 13:54:28,852 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 13:54:28,852 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 13:54:28,852 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 13:54:28,853 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 13:54:28,853 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 13:54:28,853 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 13:54:28,853 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 13:54:28,855 INFO L421 nArgumentSynthesizer]: Found a termination argument, trying to simplify. [2018-11-18 13:54:28,858 INFO L443 ModelExtractionUtils]: Simplification made 4 calls to the SMT solver. [2018-11-18 13:54:28,858 INFO L444 ModelExtractionUtils]: 1 out of 5 variables were initially zero. Simplification set additionally 1 variables to zero. [2018-11-18 13:54:28,860 INFO L437 nArgumentSynthesizer]: Simplifying supporting invariants... [2018-11-18 13:54:28,860 INFO L440 nArgumentSynthesizer]: Removed 0 redundant supporting invariants from a total of 0. [2018-11-18 13:54:28,860 INFO L518 LassoAnalysis]: Proved termination. [2018-11-18 13:54:28,861 INFO L520 LassoAnalysis]: Termination argument consisting of: Ranking function f(~cleanupTimeShifts~0, ULTIMATE.start_cleanup_~i~3) = 1*~cleanupTimeShifts~0 - 1*ULTIMATE.start_cleanup_~i~3 Supporting invariants [] [2018-11-18 13:54:28,861 INFO L297 tatePredicateManager]: 0 out of 0 supporting invariants were superfluous and have been removed [2018-11-18 13:54:28,896 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 13:54:29,060 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 13:54:29,072 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-18 13:54:29,388 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 13:54:29,392 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-18 13:54:29,421 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 13:54:29,426 INFO L152 lantAutomatonBouncer]: Defining deterministic Buchi interpolant automaton with honda bouncer for stem and without honda bouncer for loop.1 stem predicates 3 loop predicates [2018-11-18 13:54:29,426 INFO L72 iDifferenceNCSBLazy3]: Start buchiDifferenceNCSBLazy3. First operand 61937 states and 113356 transitions. cyclomatic complexity: 51420 Second operand 5 states. [2018-11-18 13:54:30,190 INFO L76 iDifferenceNCSBLazy3]: Finished buchiDifferenceNCSBLazy3. First operand 61937 states and 113356 transitions. cyclomatic complexity: 51420. Second operand 5 states. Result 75852 states and 138769 transitions. Complement of second has 8 states. [2018-11-18 13:54:30,192 INFO L142 InterpolantAutomaton]: Switched to read-only mode: Buchi interpolant automaton has 5 states 1 stem states 3 non-accepting loop states 1 accepting loop states [2018-11-18 13:54:30,192 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2018-11-18 13:54:30,209 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 17496 transitions. [2018-11-18 13:54:30,211 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 5 states and 17496 transitions. Stem has 164 letters. Loop has 50 letters. [2018-11-18 13:54:30,212 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2018-11-18 13:54:30,213 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 5 states and 17496 transitions. Stem has 214 letters. Loop has 50 letters. [2018-11-18 13:54:30,214 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2018-11-18 13:54:30,214 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 5 states and 17496 transitions. Stem has 164 letters. Loop has 100 letters. [2018-11-18 13:54:30,217 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2018-11-18 13:54:30,217 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 75852 states and 138769 transitions. [2018-11-18 13:54:30,491 INFO L131 ngComponentsAnalysis]: Automaton has 0 accepting balls. 0 [2018-11-18 13:54:30,491 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 75852 states to 0 states and 0 transitions. [2018-11-18 13:54:30,492 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 0 [2018-11-18 13:54:30,492 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 0 [2018-11-18 13:54:30,492 INFO L73 IsDeterministic]: Start isDeterministic. Operand 0 states and 0 transitions. [2018-11-18 13:54:30,492 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-18 13:54:30,492 INFO L705 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2018-11-18 13:54:30,492 INFO L728 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2018-11-18 13:54:30,492 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-18 13:54:30,492 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-18 13:54:30,492 INFO L87 Difference]: Start difference. First operand 0 states and 0 transitions. Second operand 4 states. [2018-11-18 13:54:30,492 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 13:54:30,492 INFO L93 Difference]: Finished difference Result 0 states and 0 transitions. [2018-11-18 13:54:30,492 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2018-11-18 13:54:30,492 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 0 states and 0 transitions. [2018-11-18 13:54:30,493 INFO L131 ngComponentsAnalysis]: Automaton has 0 accepting balls. 0 [2018-11-18 13:54:30,493 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 0 states to 0 states and 0 transitions. [2018-11-18 13:54:30,493 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 0 [2018-11-18 13:54:30,493 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 0 [2018-11-18 13:54:30,493 INFO L73 IsDeterministic]: Start isDeterministic. Operand 0 states and 0 transitions. [2018-11-18 13:54:30,493 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-18 13:54:30,493 INFO L705 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2018-11-18 13:54:30,493 INFO L728 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2018-11-18 13:54:30,493 INFO L608 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2018-11-18 13:54:30,493 INFO L442 BuchiCegarLoop]: ======== Iteration 6============ [2018-11-18 13:54:30,493 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 0 states and 0 transitions. [2018-11-18 13:54:30,493 INFO L131 ngComponentsAnalysis]: Automaton has 0 accepting balls. 0 [2018-11-18 13:54:30,494 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is true [2018-11-18 13:54:30,498 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer CFG 18.11 01:54:30 BoogieIcfgContainer [2018-11-18 13:54:30,498 INFO L132 PluginConnector]: ------------------------ END BuchiAutomizer---------------------------- [2018-11-18 13:54:30,498 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2018-11-18 13:54:30,498 INFO L271 PluginConnector]: Initializing Witness Printer... [2018-11-18 13:54:30,498 INFO L276 PluginConnector]: Witness Printer initialized [2018-11-18 13:54:30,498 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 18.11 01:53:29" (3/4) ... [2018-11-18 13:54:30,501 INFO L147 WitnessPrinter]: No result that supports witness generation found [2018-11-18 13:54:30,501 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2018-11-18 13:54:30,501 INFO L168 Benchmark]: Toolchain (without parser) took 72541.62 ms. Allocated memory was 1.0 GB in the beginning and 3.5 GB in the end (delta: 2.4 GB). Free memory was 955.4 MB in the beginning and 2.3 GB in the end (delta: -1.3 GB). Peak memory consumption was 1.1 GB. Max. memory is 11.5 GB. [2018-11-18 13:54:30,502 INFO L168 Benchmark]: CDTParser took 0.13 ms. Allocated memory is still 1.0 GB. Free memory is still 985.4 MB. There was no memory consumed. Max. memory is 11.5 GB. [2018-11-18 13:54:30,502 INFO L168 Benchmark]: CACSL2BoogieTranslator took 586.84 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 143.7 MB). Free memory was 955.4 MB in the beginning and 1.1 GB in the end (delta: -160.1 MB). Peak memory consumption was 61.0 MB. Max. memory is 11.5 GB. [2018-11-18 13:54:30,503 INFO L168 Benchmark]: Boogie Procedure Inliner took 286.06 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.0 GB in the end (delta: 99.8 MB). Peak memory consumption was 99.8 MB. Max. memory is 11.5 GB. [2018-11-18 13:54:30,503 INFO L168 Benchmark]: Boogie Preprocessor took 343.31 ms. Allocated memory is still 1.2 GB. Free memory was 1.0 GB in the beginning and 922.5 MB in the end (delta: 89.9 MB). Peak memory consumption was 89.9 MB. Max. memory is 11.5 GB. [2018-11-18 13:54:30,503 INFO L168 Benchmark]: RCFGBuilder took 10017.42 ms. Allocated memory was 1.2 GB in the beginning and 1.7 GB in the end (delta: 493.4 MB). Free memory was 922.5 MB in the beginning and 1.3 GB in the end (delta: -410.3 MB). Peak memory consumption was 670.8 MB. Max. memory is 11.5 GB. [2018-11-18 13:54:30,504 INFO L168 Benchmark]: BuchiAutomizer took 61301.79 ms. Allocated memory was 1.7 GB in the beginning and 3.5 GB in the end (delta: 1.8 GB). Free memory was 1.3 GB in the beginning and 2.3 GB in the end (delta: -956.4 MB). Peak memory consumption was 829.3 MB. Max. memory is 11.5 GB. [2018-11-18 13:54:30,505 INFO L168 Benchmark]: Witness Printer took 2.86 ms. Allocated memory is still 3.5 GB. Free memory is still 2.3 GB. There was no memory consumed. Max. memory is 11.5 GB. [2018-11-18 13:54:30,510 INFO L336 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.13 ms. Allocated memory is still 1.0 GB. Free memory is still 985.4 MB. There was no memory consumed. Max. memory is 11.5 GB. * CACSL2BoogieTranslator took 586.84 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 143.7 MB). Free memory was 955.4 MB in the beginning and 1.1 GB in the end (delta: -160.1 MB). Peak memory consumption was 61.0 MB. Max. memory is 11.5 GB. * Boogie Procedure Inliner took 286.06 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.0 GB in the end (delta: 99.8 MB). Peak memory consumption was 99.8 MB. Max. memory is 11.5 GB. * Boogie Preprocessor took 343.31 ms. Allocated memory is still 1.2 GB. Free memory was 1.0 GB in the beginning and 922.5 MB in the end (delta: 89.9 MB). Peak memory consumption was 89.9 MB. Max. memory is 11.5 GB. * RCFGBuilder took 10017.42 ms. Allocated memory was 1.2 GB in the beginning and 1.7 GB in the end (delta: 493.4 MB). Free memory was 922.5 MB in the beginning and 1.3 GB in the end (delta: -410.3 MB). Peak memory consumption was 670.8 MB. Max. memory is 11.5 GB. * BuchiAutomizer took 61301.79 ms. Allocated memory was 1.7 GB in the beginning and 3.5 GB in the end (delta: 1.8 GB). Free memory was 1.3 GB in the beginning and 2.3 GB in the end (delta: -956.4 MB). Peak memory consumption was 829.3 MB. Max. memory is 11.5 GB. * Witness Printer took 2.86 ms. Allocated memory is still 3.5 GB. Free memory is still 2.3 GB. There was no memory consumed. Max. memory is 11.5 GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: Constructed decomposition of program Your program was decomposed into 6 terminating modules (5 trivial, 1 deterministic, 0 nondeterministic). One deterministic module has affine ranking function cleanupTimeShifts + -1 * i and consists of 5 locations. 5 modules have a trivial ranking function, the largest among these consists of 15 locations. - StatisticsResult: Timing statistics BüchiAutomizer plugin needed 61.2s and 6 iterations. TraceHistogramMax:1. Analysis of lassos took 9.3s. Construction of modules took 39.6s. Büchi inclusion checks took 8.4s. Highest rank in rank-based complementation 3. Minimization of det autom 6. Minimization of nondet autom 0. Automata minimization 1.6s AutomataMinimizationTime, 4 MinimizatonAttempts, 26942 StatesRemovedByMinimization, 4 NontrivialMinimizations. Non-live state removal took 1.1s Buchi closure took 0.1s. Biggest automaton had 61937 states and ocurred in iteration 4. Nontrivial modules had stage [1, 0, 0, 0, 0]. InterpolantCoveringCapabilityFinite: 0/0 InterpolantCoveringCapabilityBuchi: 0/0 HoareTripleCheckerStatistics: 128033 SDtfs, 331291 SDslu, 389035 SDs, 0 SdLazy, 38229 SolverSat, 2771 SolverUnsat, 0 SolverUnknown, 0 SolverNotchecked, 39.6s Time LassoAnalysisResults: nont0 unkn0 SFLI0 SFLT0 conc0 concLT0 SILN0 SILU0 SILI4 SILT1 lasso0 LassoPreprocessingBenchmarks: Lassos: inital211 mio100 ax100 hnf100 lsp17 ukn100 mio100 lsp100 div100 bol100 ite100 ukn100 eq213 hnf87 smp100 dnf139 smp100 tf102 neg97 sie104 LassoTerminationAnalysisBenchmarks: ConstraintsSatisfiability: unsat Degree: 0 Time: 4ms VariablesStem: 0 VariablesLoop: 0 DisjunctsStem: 1 DisjunctsLoop: 1 SupportingInvariants: 0 MotzkinApplications: 2 LassoTerminationAnalysisBenchmarks: LassoNonterminationAnalysisSatFixpoint: 25 LassoNonterminationAnalysisSatUnbounded: 0 LassoNonterminationAnalysisUnsat: 1 LassoNonterminationAnalysisUnknown: 0 LassoNonterminationAnalysisTime: 1.3s - TerminationAnalysisResult: Termination proven Buchi Automizer proved that your program is terminating RESULT: Ultimate proved your program to be correct! Received shutdown request...