./Ultimate.py --spec ../../sv-benchmarks/c/properties/termination.prp --file ../../sv-benchmarks/c/product-lines/elevator_spec3_product27_false-unreach-call_true-termination.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for termination Using default analysis Version aa418289 Calling Ultimate with: java -Dosgi.configuration.area=/tmp/vcloud-vcloud-master/worker/working_dir_02c6a6e3-37fc-44c0-8191-1c7653105f5f/bin-2019/uautomizer/data/config -Xmx12G -Xms1G -jar /tmp/vcloud-vcloud-master/worker/working_dir_02c6a6e3-37fc-44c0-8191-1c7653105f5f/bin-2019/uautomizer/plugins/org.eclipse.equinox.launcher_1.3.100.v20150511-1540.jar -data @noDefault -ultimatedata /tmp/vcloud-vcloud-master/worker/working_dir_02c6a6e3-37fc-44c0-8191-1c7653105f5f/bin-2019/uautomizer/data -tc /tmp/vcloud-vcloud-master/worker/working_dir_02c6a6e3-37fc-44c0-8191-1c7653105f5f/bin-2019/uautomizer/config/AutomizerTermination.xml -i ../../sv-benchmarks/c/product-lines/elevator_spec3_product27_false-unreach-call_true-termination.cil.c -s /tmp/vcloud-vcloud-master/worker/working_dir_02c6a6e3-37fc-44c0-8191-1c7653105f5f/bin-2019/uautomizer/config/svcomp-Termination-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud-vcloud-master/worker/working_dir_02c6a6e3-37fc-44c0-8191-1c7653105f5f/bin-2019/uautomizer --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(F end) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 3a55681b09135ccff0bf93cef95d3a981a37b078 ........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................... Execution finished normally Writing output log to file Ultimate.log Result: TRUE --- Real Ultimate output --- This is Ultimate 0.1.23-aa41828 [2018-11-22 23:02:29,746 INFO L170 SettingsManager]: Resetting all preferences to default values... [2018-11-22 23:02:29,747 INFO L174 SettingsManager]: Resetting UltimateCore preferences to default values [2018-11-22 23:02:29,755 INFO L177 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2018-11-22 23:02:29,756 INFO L174 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2018-11-22 23:02:29,756 INFO L174 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2018-11-22 23:02:29,757 INFO L174 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2018-11-22 23:02:29,758 INFO L174 SettingsManager]: Resetting LassoRanker preferences to default values [2018-11-22 23:02:29,759 INFO L174 SettingsManager]: Resetting Reaching Definitions preferences to default values [2018-11-22 23:02:29,760 INFO L174 SettingsManager]: Resetting SyntaxChecker preferences to default values [2018-11-22 23:02:29,760 INFO L177 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2018-11-22 23:02:29,761 INFO L174 SettingsManager]: Resetting LTL2Aut preferences to default values [2018-11-22 23:02:29,761 INFO L174 SettingsManager]: Resetting PEA to Boogie preferences to default values [2018-11-22 23:02:29,762 INFO L174 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2018-11-22 23:02:29,763 INFO L174 SettingsManager]: Resetting ChcToBoogie preferences to default values [2018-11-22 23:02:29,763 INFO L174 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2018-11-22 23:02:29,764 INFO L174 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2018-11-22 23:02:29,765 INFO L174 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2018-11-22 23:02:29,766 INFO L174 SettingsManager]: Resetting CodeCheck preferences to default values [2018-11-22 23:02:29,767 INFO L174 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2018-11-22 23:02:29,768 INFO L174 SettingsManager]: Resetting RCFGBuilder preferences to default values [2018-11-22 23:02:29,769 INFO L174 SettingsManager]: Resetting TraceAbstraction preferences to default values [2018-11-22 23:02:29,770 INFO L177 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2018-11-22 23:02:29,771 INFO L177 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2018-11-22 23:02:29,771 INFO L174 SettingsManager]: Resetting TreeAutomizer preferences to default values [2018-11-22 23:02:29,771 INFO L174 SettingsManager]: Resetting IcfgTransformer preferences to default values [2018-11-22 23:02:29,772 INFO L174 SettingsManager]: Resetting Boogie Printer preferences to default values [2018-11-22 23:02:29,773 INFO L174 SettingsManager]: Resetting ReqPrinter preferences to default values [2018-11-22 23:02:29,773 INFO L174 SettingsManager]: Resetting Witness Printer preferences to default values [2018-11-22 23:02:29,774 INFO L177 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2018-11-22 23:02:29,774 INFO L174 SettingsManager]: Resetting CDTParser preferences to default values [2018-11-22 23:02:29,775 INFO L177 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2018-11-22 23:02:29,775 INFO L177 SettingsManager]: ReqParser provides no preferences, ignoring... [2018-11-22 23:02:29,775 INFO L174 SettingsManager]: Resetting SmtParser preferences to default values [2018-11-22 23:02:29,776 INFO L174 SettingsManager]: Resetting Witness Parser preferences to default values [2018-11-22 23:02:29,776 INFO L181 SettingsManager]: Finished resetting all preferences to default values... [2018-11-22 23:02:29,776 INFO L98 SettingsManager]: Beginning loading settings from /tmp/vcloud-vcloud-master/worker/working_dir_02c6a6e3-37fc-44c0-8191-1c7653105f5f/bin-2019/uautomizer/config/svcomp-Termination-32bit-Automizer_Default.epf [2018-11-22 23:02:29,787 INFO L110 SettingsManager]: Loading preferences was successful [2018-11-22 23:02:29,787 INFO L112 SettingsManager]: Preferences different from defaults after loading the file: [2018-11-22 23:02:29,788 INFO L131 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2018-11-22 23:02:29,788 INFO L133 SettingsManager]: * Create parallel compositions if possible=false [2018-11-22 23:02:29,788 INFO L133 SettingsManager]: * Use SBE=true [2018-11-22 23:02:29,789 INFO L131 SettingsManager]: Preferences of BuchiAutomizer differ from their defaults: [2018-11-22 23:02:29,789 INFO L133 SettingsManager]: * NCSB implementation=INTSET_LAZY3 [2018-11-22 23:02:29,789 INFO L133 SettingsManager]: * Use old map elimination=false [2018-11-22 23:02:29,789 INFO L133 SettingsManager]: * Use external solver (rank synthesis)=false [2018-11-22 23:02:29,789 INFO L133 SettingsManager]: * Use only trivial implications for array writes=true [2018-11-22 23:02:29,789 INFO L133 SettingsManager]: * Rank analysis=LINEAR_WITH_GUESSES [2018-11-22 23:02:29,790 INFO L131 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2018-11-22 23:02:29,790 INFO L133 SettingsManager]: * sizeof long=4 [2018-11-22 23:02:29,790 INFO L133 SettingsManager]: * Check unreachability of error function in SV-COMP mode=false [2018-11-22 23:02:29,790 INFO L133 SettingsManager]: * Overapproximate operations on floating types=true [2018-11-22 23:02:29,790 INFO L133 SettingsManager]: * sizeof POINTER=4 [2018-11-22 23:02:29,790 INFO L133 SettingsManager]: * Check division by zero=IGNORE [2018-11-22 23:02:29,790 INFO L133 SettingsManager]: * Pointer to allocated memory at dereference=ASSUME [2018-11-22 23:02:29,791 INFO L133 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=ASSUME [2018-11-22 23:02:29,791 INFO L133 SettingsManager]: * Check array bounds for arrays that are off heap=ASSUME [2018-11-22 23:02:29,791 INFO L133 SettingsManager]: * sizeof long double=12 [2018-11-22 23:02:29,791 INFO L133 SettingsManager]: * Check if freed pointer was valid=false [2018-11-22 23:02:29,791 INFO L133 SettingsManager]: * Assume nondeterminstic values are in range=false [2018-11-22 23:02:29,791 INFO L133 SettingsManager]: * Use constant arrays=true [2018-11-22 23:02:29,791 INFO L133 SettingsManager]: * Pointer base address is valid at dereference=ASSUME [2018-11-22 23:02:29,792 INFO L131 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2018-11-22 23:02:29,792 INFO L133 SettingsManager]: * Size of a code block=SequenceOfStatements [2018-11-22 23:02:29,792 INFO L133 SettingsManager]: * To the following directory=/home/matthias/ultimate/dump [2018-11-22 23:02:29,792 INFO L131 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2018-11-22 23:02:29,792 INFO L133 SettingsManager]: * Trace refinement strategy=CAMEL [2018-11-22 23:02:29,792 INFO L133 SettingsManager]: * Dump automata to the following directory=/home/matthias/ultimate/dump/auto [2018-11-22 23:02:29,793 INFO L131 SettingsManager]: Preferences of IcfgTransformer differ from their defaults: [2018-11-22 23:02:29,793 INFO L133 SettingsManager]: * TransformationType=MODULO_NEIGHBOR Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud-vcloud-master/worker/working_dir_02c6a6e3-37fc-44c0-8191-1c7653105f5f/bin-2019/uautomizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(F end) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 3a55681b09135ccff0bf93cef95d3a981a37b078 [2018-11-22 23:02:29,816 INFO L81 nceAwareModelManager]: Repository-Root is: /tmp [2018-11-22 23:02:29,825 INFO L258 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2018-11-22 23:02:29,828 INFO L214 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2018-11-22 23:02:29,829 INFO L271 PluginConnector]: Initializing CDTParser... [2018-11-22 23:02:29,830 INFO L276 PluginConnector]: CDTParser initialized [2018-11-22 23:02:29,830 INFO L418 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud-vcloud-master/worker/working_dir_02c6a6e3-37fc-44c0-8191-1c7653105f5f/bin-2019/uautomizer/../../sv-benchmarks/c/product-lines/elevator_spec3_product27_false-unreach-call_true-termination.cil.c [2018-11-22 23:02:29,864 INFO L221 CDTParser]: Created temporary CDT project at /tmp/vcloud-vcloud-master/worker/working_dir_02c6a6e3-37fc-44c0-8191-1c7653105f5f/bin-2019/uautomizer/data/911c3e025/4a499a784c744926a3e7f3036f6daa83/FLAG910fd1459 [2018-11-22 23:02:30,244 INFO L307 CDTParser]: Found 1 translation units. [2018-11-22 23:02:30,245 INFO L161 CDTParser]: Scanning /tmp/vcloud-vcloud-master/worker/working_dir_02c6a6e3-37fc-44c0-8191-1c7653105f5f/sv-benchmarks/c/product-lines/elevator_spec3_product27_false-unreach-call_true-termination.cil.c [2018-11-22 23:02:30,255 INFO L355 CDTParser]: About to delete temporary CDT project at /tmp/vcloud-vcloud-master/worker/working_dir_02c6a6e3-37fc-44c0-8191-1c7653105f5f/bin-2019/uautomizer/data/911c3e025/4a499a784c744926a3e7f3036f6daa83/FLAG910fd1459 [2018-11-22 23:02:30,263 INFO L363 CDTParser]: Successfully deleted /tmp/vcloud-vcloud-master/worker/working_dir_02c6a6e3-37fc-44c0-8191-1c7653105f5f/bin-2019/uautomizer/data/911c3e025/4a499a784c744926a3e7f3036f6daa83 [2018-11-22 23:02:30,266 INFO L296 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2018-11-22 23:02:30,266 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2018-11-22 23:02:30,267 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2018-11-22 23:02:30,267 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2018-11-22 23:02:30,269 INFO L276 PluginConnector]: CACSL2BoogieTranslator initialized [2018-11-22 23:02:30,270 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 22.11 11:02:30" (1/1) ... [2018-11-22 23:02:30,271 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@34c28d62 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 11:02:30, skipping insertion in model container [2018-11-22 23:02:30,271 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 22.11 11:02:30" (1/1) ... [2018-11-22 23:02:30,277 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2018-11-22 23:02:30,320 INFO L176 MainTranslator]: Built tables and reachable declarations [2018-11-22 23:02:30,717 INFO L201 PostProcessor]: Analyzing one entry point: main [2018-11-22 23:02:30,727 INFO L191 MainTranslator]: Completed pre-run [2018-11-22 23:02:30,807 INFO L201 PostProcessor]: Analyzing one entry point: main [2018-11-22 23:02:30,845 INFO L195 MainTranslator]: Completed translation [2018-11-22 23:02:30,845 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 11:02:30 WrapperNode [2018-11-22 23:02:30,845 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2018-11-22 23:02:30,846 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2018-11-22 23:02:30,846 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2018-11-22 23:02:30,846 INFO L276 PluginConnector]: Boogie Procedure Inliner initialized [2018-11-22 23:02:30,851 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 11:02:30" (1/1) ... [2018-11-22 23:02:30,867 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 11:02:30" (1/1) ... [2018-11-22 23:02:31,035 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2018-11-22 23:02:31,035 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2018-11-22 23:02:31,035 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2018-11-22 23:02:31,035 INFO L276 PluginConnector]: Boogie Preprocessor initialized [2018-11-22 23:02:31,044 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 11:02:30" (1/1) ... [2018-11-22 23:02:31,044 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 11:02:30" (1/1) ... [2018-11-22 23:02:31,073 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 11:02:30" (1/1) ... [2018-11-22 23:02:31,074 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 11:02:30" (1/1) ... [2018-11-22 23:02:31,136 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 11:02:30" (1/1) ... [2018-11-22 23:02:31,205 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 11:02:30" (1/1) ... [2018-11-22 23:02:31,231 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 11:02:30" (1/1) ... [2018-11-22 23:02:31,273 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2018-11-22 23:02:31,274 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2018-11-22 23:02:31,274 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2018-11-22 23:02:31,274 INFO L276 PluginConnector]: RCFGBuilder initialized [2018-11-22 23:02:31,275 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 11:02:30" (1/1) ... No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_02c6a6e3-37fc-44c0-8191-1c7653105f5f/bin-2019/uautomizer/z3 Starting monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-22 23:02:31,317 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.alloc [2018-11-22 23:02:31,318 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2018-11-22 23:02:31,318 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2018-11-22 23:02:31,318 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2018-11-22 23:02:37,510 INFO L275 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2018-11-22 23:02:37,510 INFO L280 CfgBuilder]: Removed 1617 assue(true) statements. [2018-11-22 23:02:37,511 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 22.11 11:02:37 BoogieIcfgContainer [2018-11-22 23:02:37,511 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2018-11-22 23:02:37,511 INFO L113 PluginConnector]: ------------------------BuchiAutomizer---------------------------- [2018-11-22 23:02:37,511 INFO L271 PluginConnector]: Initializing BuchiAutomizer... [2018-11-22 23:02:37,513 INFO L276 PluginConnector]: BuchiAutomizer initialized [2018-11-22 23:02:37,514 INFO L102 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2018-11-22 23:02:37,514 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "CDTParser AST 22.11 11:02:30" (1/3) ... [2018-11-22 23:02:37,515 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@3d325f53 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 22.11 11:02:37, skipping insertion in model container [2018-11-22 23:02:37,515 INFO L102 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2018-11-22 23:02:37,515 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.11 11:02:30" (2/3) ... [2018-11-22 23:02:37,515 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@3d325f53 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 22.11 11:02:37, skipping insertion in model container [2018-11-22 23:02:37,515 INFO L102 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2018-11-22 23:02:37,515 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 22.11 11:02:37" (3/3) ... [2018-11-22 23:02:37,516 INFO L375 chiAutomizerObserver]: Analyzing ICFG elevator_spec3_product27_false-unreach-call_true-termination.cil.c [2018-11-22 23:02:37,548 INFO L133 ementStrategyFactory]: Using default assertion order modulation [2018-11-22 23:02:37,548 INFO L374 BuchiCegarLoop]: Interprodecural is true [2018-11-22 23:02:37,549 INFO L375 BuchiCegarLoop]: Hoare is false [2018-11-22 23:02:37,549 INFO L376 BuchiCegarLoop]: Compute interpolants for ForwardPredicates [2018-11-22 23:02:37,549 INFO L377 BuchiCegarLoop]: Backedges is STRAIGHT_LINE [2018-11-22 23:02:37,549 INFO L378 BuchiCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2018-11-22 23:02:37,549 INFO L379 BuchiCegarLoop]: Difference is false [2018-11-22 23:02:37,549 INFO L380 BuchiCegarLoop]: Minimize is MINIMIZE_SEVPA [2018-11-22 23:02:37,549 INFO L383 BuchiCegarLoop]: ======== Iteration 0==of CEGAR loop == BuchiCegarLoop======== [2018-11-22 23:02:37,624 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 6563 states. [2018-11-22 23:02:37,725 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1330 [2018-11-22 23:02:37,725 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-22 23:02:37,726 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-22 23:02:37,741 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-22 23:02:37,741 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-22 23:02:37,742 INFO L442 BuchiCegarLoop]: ======== Iteration 1============ [2018-11-22 23:02:37,742 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 6563 states. [2018-11-22 23:02:37,798 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1330 [2018-11-22 23:02:37,799 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-22 23:02:37,799 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-22 23:02:37,802 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-22 23:02:37,802 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-22 23:02:37,810 INFO L794 eck$LassoCheckResult]: Stem: 1305#ULTIMATE.startENTRYtrue #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];call #t~string53.base, #t~string53.offset := #Ultimate.alloc(10);call #t~string55.base, #t~string55.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string55.base, #t~string55.offset, 1);call write~init~int(95, #t~string55.base, 1 + #t~string55.offset, 1);call write~init~int(93, #t~string55.base, 2 + #t~string55.offset, 1);call write~init~int(0, #t~string55.base, 3 + #t~string55.offset, 1);call #t~string57.base, #t~string57.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string57.base, #t~string57.offset, 1);call write~init~int(93, #t~string57.base, 1 + #t~string57.offset, 1);call write~init~int(32, #t~string57.base, 2 + #t~string57.offset, 1);call write~init~int(0, #t~string57.base, 3 + #t~string57.offset, 1);call #t~string59.base, #t~string59.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string59.base, #t~string59.offset, 1);call write~init~int(97, #t~string59.base, 1 + #t~string59.offset, 1);call write~init~int(116, #t~string59.base, 2 + #t~string59.offset, 1);call write~init~int(32, #t~string59.base, 3 + #t~string59.offset, 1);call write~init~int(0, #t~string59.base, 4 + #t~string59.offset, 1);call #t~string61.base, #t~string61.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string61.base, #t~string61.offset, 1);call write~init~int(105, #t~string61.base, 1 + #t~string61.offset, 1);call write~init~int(0, #t~string61.base, 2 + #t~string61.offset, 1);call #t~string63.base, #t~string63.offset := #Ultimate.alloc(10);call #t~string65.base, #t~string65.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string65.base, #t~string65.offset, 1);call write~init~int(112, #t~string65.base, 1 + #t~string65.offset, 1);call write~init~int(0, #t~string65.base, 2 + #t~string65.offset, 1);call #t~string67.base, #t~string67.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string67.base, #t~string67.offset, 1);call write~init~int(111, #t~string67.base, 1 + #t~string67.offset, 1);call write~init~int(119, #t~string67.base, 2 + #t~string67.offset, 1);call write~init~int(110, #t~string67.base, 3 + #t~string67.offset, 1);call write~init~int(0, #t~string67.base, 4 + #t~string67.offset, 1);call #t~string69.base, #t~string69.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string69.base, #t~string69.offset, 1);call write~init~int(73, #t~string69.base, 1 + #t~string69.offset, 1);call write~init~int(76, #t~string69.base, 2 + #t~string69.offset, 1);call write~init~int(95, #t~string69.base, 3 + #t~string69.offset, 1);call write~init~int(112, #t~string69.base, 4 + #t~string69.offset, 1);call write~init~int(58, #t~string69.base, 5 + #t~string69.offset, 1);call write~init~int(0, #t~string69.base, 6 + #t~string69.offset, 1);call #t~string71.base, #t~string71.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string71.base, #t~string71.offset, 1);call write~init~int(37, #t~string71.base, 1 + #t~string71.offset, 1);call write~init~int(105, #t~string71.base, 2 + #t~string71.offset, 1);call write~init~int(0, #t~string71.base, 3 + #t~string71.offset, 1);call #t~string73.base, #t~string73.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string73.base, #t~string73.offset, 1);call write~init~int(37, #t~string73.base, 1 + #t~string73.offset, 1);call write~init~int(105, #t~string73.base, 2 + #t~string73.offset, 1);call write~init~int(0, #t~string73.base, 3 + #t~string73.offset, 1);call #t~string75.base, #t~string75.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string75.base, #t~string75.offset, 1);call write~init~int(37, #t~string75.base, 1 + #t~string75.offset, 1);call write~init~int(105, #t~string75.base, 2 + #t~string75.offset, 1);call write~init~int(0, #t~string75.base, 3 + #t~string75.offset, 1);call #t~string77.base, #t~string77.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string77.base, #t~string77.offset, 1);call write~init~int(37, #t~string77.base, 1 + #t~string77.offset, 1);call write~init~int(105, #t~string77.base, 2 + #t~string77.offset, 1);call write~init~int(0, #t~string77.base, 3 + #t~string77.offset, 1);call #t~string79.base, #t~string79.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string79.base, #t~string79.offset, 1);call write~init~int(37, #t~string79.base, 1 + #t~string79.offset, 1);call write~init~int(105, #t~string79.base, 2 + #t~string79.offset, 1);call write~init~int(0, #t~string79.base, 3 + #t~string79.offset, 1);call #t~string81.base, #t~string81.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string81.base, #t~string81.offset, 1);call write~init~int(70, #t~string81.base, 1 + #t~string81.offset, 1);call write~init~int(95, #t~string81.base, 2 + #t~string81.offset, 1);call write~init~int(112, #t~string81.base, 3 + #t~string81.offset, 1);call write~init~int(58, #t~string81.base, 4 + #t~string81.offset, 1);call write~init~int(0, #t~string81.base, 5 + #t~string81.offset, 1);call #t~string84.base, #t~string84.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string84.base, #t~string84.offset, 1);call write~init~int(37, #t~string84.base, 1 + #t~string84.offset, 1);call write~init~int(105, #t~string84.base, 2 + #t~string84.offset, 1);call write~init~int(0, #t~string84.base, 3 + #t~string84.offset, 1);call #t~string87.base, #t~string87.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string87.base, #t~string87.offset, 1);call write~init~int(37, #t~string87.base, 1 + #t~string87.offset, 1);call write~init~int(105, #t~string87.base, 2 + #t~string87.offset, 1);call write~init~int(0, #t~string87.base, 3 + #t~string87.offset, 1);call #t~string90.base, #t~string90.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string90.base, #t~string90.offset, 1);call write~init~int(37, #t~string90.base, 1 + #t~string90.offset, 1);call write~init~int(105, #t~string90.base, 2 + #t~string90.offset, 1);call write~init~int(0, #t~string90.base, 3 + #t~string90.offset, 1);call #t~string93.base, #t~string93.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string93.base, #t~string93.offset, 1);call write~init~int(37, #t~string93.base, 1 + #t~string93.offset, 1);call write~init~int(105, #t~string93.base, 2 + #t~string93.offset, 1);call write~init~int(0, #t~string93.base, 3 + #t~string93.offset, 1);call #t~string96.base, #t~string96.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string96.base, #t~string96.offset, 1);call write~init~int(37, #t~string96.base, 1 + #t~string96.offset, 1);call write~init~int(105, #t~string96.base, 2 + #t~string96.offset, 1);call write~init~int(0, #t~string96.base, 3 + #t~string96.offset, 1);call #t~string98.base, #t~string98.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string98.base, #t~string98.offset, 1);call write~init~int(0, #t~string98.base, 1 + #t~string98.offset, 1);call #t~string154.base, #t~string154.offset := #Ultimate.alloc(30);call #t~string155.base, #t~string155.offset := #Ultimate.alloc(9);call #t~string156.base, #t~string156.offset := #Ultimate.alloc(21);call #t~string157.base, #t~string157.offset := #Ultimate.alloc(30);call #t~string158.base, #t~string158.offset := #Ultimate.alloc(9);call #t~string159.base, #t~string159.offset := #Ultimate.alloc(21);call #t~string163.base, #t~string163.offset := #Ultimate.alloc(30);call #t~string164.base, #t~string164.offset := #Ultimate.alloc(9);call #t~string165.base, #t~string165.offset := #Ultimate.alloc(25);call #t~string166.base, #t~string166.offset := #Ultimate.alloc(30);call #t~string167.base, #t~string167.offset := #Ultimate.alloc(9);call #t~string168.base, #t~string168.offset := #Ultimate.alloc(25);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~expectedDirection~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 5810#L-1true havoc main_#res;havoc main_#t~ret134, main_~retValue_acc~21, main_~tmp~25;havoc main_~retValue_acc~21;havoc main_~tmp~25; 935#L3055true havoc valid_product_#res;havoc valid_product_~retValue_acc~26;havoc valid_product_~retValue_acc~26;valid_product_~retValue_acc~26 := 1;valid_product_#res := valid_product_~retValue_acc~26; 114#L3063true main_#t~ret134 := valid_product_#res;main_~tmp~25 := main_#t~ret134;havoc main_#t~ret134; 88#L2358true assume 0 != main_~tmp~25; 710#L2332true ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 2543#L2447true havoc bobCall_#t~ret122, bobCall_~tmp~17;havoc bobCall_~tmp~17;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~18;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~18; 2467#L1741true assume 0 == getOrigin_~person;getOrigin_~retValue_acc~18 := 4;getOrigin_#res := getOrigin_~retValue_acc~18; 5455#L1766true bobCall_#t~ret122 := getOrigin_#res;bobCall_~tmp~17 := bobCall_#t~ret122;havoc bobCall_#t~ret122;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~17;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 313#L2725true assume 0 == initPersonOnFloor_~floor; 2077#L2726true assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 6177#L2833-1true callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 1057#L2517true assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 241#L2529-2true havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret107, __utac_acc__Specification3_spec__1_#t~ret108, __utac_acc__Specification3_spec__1_#t~ret109, __utac_acc__Specification3_spec__1_#t~ret110, __utac_acc__Specification3_spec__1_#t~ret111, __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~15, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~7, __utac_acc__Specification3_spec__1_~tmp___2~5, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~15;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~7;havoc __utac_acc__Specification3_spec__1_~tmp___2~5;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 1440#L303true __utac_acc__Specification3_spec__1_#t~ret107 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~15 := __utac_acc__Specification3_spec__1_#t~ret107;havoc __utac_acc__Specification3_spec__1_#t~ret107;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~15;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~4;havoc getCurrentHeading_~retValue_acc~4;getCurrentHeading_~retValue_acc~4 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~4; 5727#L355true __utac_acc__Specification3_spec__1_#t~ret108 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret108;havoc __utac_acc__Specification3_spec__1_#t~ret108; 334#L1840true assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 401#L1841true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~3;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~3; 3955#L320true assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~3 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~3; 3360#L341true __utac_acc__Specification3_spec__1_#t~ret109 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~3 := __utac_acc__Specification3_spec__1_#t~ret109;havoc __utac_acc__Specification3_spec__1_#t~ret109; 2084#L1845true assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3;~expectedDirection~0 := 1; 6521#L1946true havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 3278#L2454true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 6165#L2481true isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 5448#L1590true stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 1933#L972true assume 0 != stopRequestedAtCurrentFloor_~tmp~9;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 1445#L303-1true stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 2290#L976true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 1289#L989true timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 20#L1127true assume !(0 != timeShift_~tmp___9~2); 3406#L1218true assume !(1 == ~doorState~0); 3409#L1218-2true stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 3272#L2454-3true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 6146#L2481-3true isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 5450#L1590-1true stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 2743#L855true assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 1444#L303-2true stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 3285#L868true timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 2899#L1226true assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 5307#L912true assume !(1 == ~currentHeading~0); 897#L922true assume !(0 == ~currentFloorID~0); 894#L922-2true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 628#L928-5true havoc __utac_acc__Specification3_spec__2_#t~ret119, __utac_acc__Specification3_spec__2_#t~ret120, __utac_acc__Specification3_spec__2_~tmp~16, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~16;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 5344#L1971true assume !(-1 == ~expectedDirection~0); 650#L1983true assume !(1 == ~expectedDirection~0); 672#L1984true havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret107, __utac_acc__Specification3_spec__1_#t~ret108, __utac_acc__Specification3_spec__1_#t~ret109, __utac_acc__Specification3_spec__1_#t~ret110, __utac_acc__Specification3_spec__1_#t~ret111, __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~15, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~7, __utac_acc__Specification3_spec__1_~tmp___2~5, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~15;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~7;havoc __utac_acc__Specification3_spec__1_~tmp___2~5;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 1442#L303-4true __utac_acc__Specification3_spec__1_#t~ret107 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~15 := __utac_acc__Specification3_spec__1_#t~ret107;havoc __utac_acc__Specification3_spec__1_#t~ret107;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~15;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~4;havoc getCurrentHeading_~retValue_acc~4;getCurrentHeading_~retValue_acc~4 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~4; 5738#L355-3true __utac_acc__Specification3_spec__1_#t~ret108 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret108;havoc __utac_acc__Specification3_spec__1_#t~ret108; 333#L1840-1true assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 4274#L1902-1true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~3;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~3; 3933#L320-17true assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~3 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~3; 3294#L341-17true __utac_acc__Specification3_spec__1_#t~ret114 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret114;havoc __utac_acc__Specification3_spec__1_#t~ret114; 3932#L1906-2true assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 6510#L1946-1true havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 3364#L2454-25true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 6082#L2481-25true isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 5609#L1590-3true stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 1934#L972-1true assume 0 != stopRequestedAtCurrentFloor_~tmp~9;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 1441#L303-5true stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 2292#L976-1true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 1290#L989-1true timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 23#L1127-1true assume !(0 != timeShift_~tmp___9~2); 3410#L1218-3true assume !(1 == ~doorState~0); 3397#L1218-5true stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 3368#L2454-28true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 6088#L2481-28true isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 5612#L1590-4true stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 2749#L855-2true assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 3685#L303-6true stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 3287#L868-2true timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 2884#L1226-1true assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 5288#L912-3true assume !(1 == ~currentHeading~0); 892#L922-9true assume !(0 == ~currentFloorID~0); 893#L922-11true assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 625#L928-11true havoc __utac_acc__Specification3_spec__2_#t~ret119, __utac_acc__Specification3_spec__2_#t~ret120, __utac_acc__Specification3_spec__2_~tmp~16, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~16;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 5347#L1971-1true assume !(-1 == ~expectedDirection~0); 639#L1983-1true assume !(1 == ~expectedDirection~0); 671#L1984-1true havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret107, __utac_acc__Specification3_spec__1_#t~ret108, __utac_acc__Specification3_spec__1_#t~ret109, __utac_acc__Specification3_spec__1_#t~ret110, __utac_acc__Specification3_spec__1_#t~ret111, __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~15, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~7, __utac_acc__Specification3_spec__1_~tmp___2~5, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~15;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~7;havoc __utac_acc__Specification3_spec__1_~tmp___2~5;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 3687#L303-8true __utac_acc__Specification3_spec__1_#t~ret107 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~15 := __utac_acc__Specification3_spec__1_#t~ret107;havoc __utac_acc__Specification3_spec__1_#t~ret107;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~15;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~4;havoc getCurrentHeading_~retValue_acc~4;getCurrentHeading_~retValue_acc~4 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~4; 5708#L355-6true __utac_acc__Specification3_spec__1_#t~ret108 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret108;havoc __utac_acc__Specification3_spec__1_#t~ret108; 330#L1840-2true assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 4276#L1902-2true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~3;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~3; 3895#L320-29true assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~3 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~3; 3146#L341-29true __utac_acc__Specification3_spec__1_#t~ret114 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret114;havoc __utac_acc__Specification3_spec__1_#t~ret114; 3914#L1906-4true assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 6512#L1946-2true havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 3299#L2454-50true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 6223#L2481-50true isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 5616#L1590-6true stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 1935#L972-2true assume 0 != stopRequestedAtCurrentFloor_~tmp~9;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 3688#L303-9true stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 2283#L976-2true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 1291#L989-2true timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 24#L1127-2true assume !(0 != timeShift_~tmp___9~2); 3400#L1218-6true assume 1 == ~doorState~0;~doorState~0 := 0; 3403#L1218-8true stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 3305#L2454-53true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 6215#L2481-53true isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 5618#L1590-7true stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 2849#L855-4true assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 3689#L303-10true stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 3290#L868-4true timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 2888#L1226-2true assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 5296#L912-6true assume !(1 == ~currentHeading~0); 709#L922-18true assume !(0 == ~currentFloorID~0); 711#L922-20true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 620#L928-17true havoc __utac_acc__Specification3_spec__2_#t~ret119, __utac_acc__Specification3_spec__2_#t~ret120, __utac_acc__Specification3_spec__2_~tmp~16, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~16;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 5351#L1971-2true assume !(-1 == ~expectedDirection~0); 643#L1983-2true assume !(1 == ~expectedDirection~0); 668#L1984-2true havoc bobCall_#t~ret122, bobCall_~tmp~17;havoc bobCall_~tmp~17;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~18;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~18; 2470#L1741-1true assume 0 == getOrigin_~person;getOrigin_~retValue_acc~18 := 4;getOrigin_#res := getOrigin_~retValue_acc~18; 5459#L1766-1true bobCall_#t~ret122 := getOrigin_#res;bobCall_~tmp~17 := bobCall_#t~ret122;havoc bobCall_#t~ret122;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~17;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 297#L2725-1true assume 0 == initPersonOnFloor_~floor; 2067#L2726-2true assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 6171#L2833-3true callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 1052#L2517-2true assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 236#L2529-5true havoc cleanup_#t~ret128, cleanup_#t~ret129, cleanup_~i~3, cleanup_~tmp~23, cleanup_~tmp___0~12, cleanup_~__cil_tmp4~0;havoc cleanup_~i~3;havoc cleanup_~tmp~23;havoc cleanup_~tmp___0~12;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret107, __utac_acc__Specification3_spec__1_#t~ret108, __utac_acc__Specification3_spec__1_#t~ret109, __utac_acc__Specification3_spec__1_#t~ret110, __utac_acc__Specification3_spec__1_#t~ret111, __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~15, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~7, __utac_acc__Specification3_spec__1_~tmp___2~5, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~15;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~7;havoc __utac_acc__Specification3_spec__1_~tmp___2~5;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 3677#L303-12true __utac_acc__Specification3_spec__1_#t~ret107 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~15 := __utac_acc__Specification3_spec__1_#t~ret107;havoc __utac_acc__Specification3_spec__1_#t~ret107;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~15;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~4;havoc getCurrentHeading_~retValue_acc~4;getCurrentHeading_~retValue_acc~4 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~4; 5721#L355-9true __utac_acc__Specification3_spec__1_#t~ret108 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret108;havoc __utac_acc__Specification3_spec__1_#t~ret108; 331#L1840-3true assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 385#L1841-3true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~3;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~3; 4073#L320-36true assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~3 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~3; 3128#L341-36true __utac_acc__Specification3_spec__1_#t~ret109 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~3 := __utac_acc__Specification3_spec__1_#t~ret109;havoc __utac_acc__Specification3_spec__1_#t~ret109; 2080#L1845-6true assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3;~expectedDirection~0 := 1; 6511#L1946-3true havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 3105#L2454-75true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 4756#L2481-75true isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 5600#L1590-9true stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 1873#L972-3true assume 0 != stopRequestedAtCurrentFloor_~tmp~9;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 3679#L303-13true stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 2284#L976-3true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 1292#L989-3true timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 14#L1127-3true assume !(0 != timeShift_~tmp___9~2); 3383#L1218-9true assume !(1 == ~doorState~0); 3387#L1218-11true stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 3082#L2454-78true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 4747#L2481-78true isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 5602#L1590-10true stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 2855#L855-6true assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 3680#L303-14true stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 3281#L868-6true timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 2889#L1226-3true assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 5274#L912-9true assume !(1 == ~currentHeading~0); 707#L922-27true assume !(0 == ~currentFloorID~0); 701#L922-29true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 596#L928-23true havoc __utac_acc__Specification3_spec__2_#t~ret119, __utac_acc__Specification3_spec__2_#t~ret120, __utac_acc__Specification3_spec__2_~tmp~16, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~16;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 5354#L1971-3true assume !(-1 == ~expectedDirection~0); 645#L1983-3true assume !(1 == ~expectedDirection~0); 669#L1984-3true cleanup_~i~3 := 0; 1069#L2164-2true [2018-11-22 23:02:37,812 INFO L796 eck$LassoCheckResult]: Loop: 1069#L2164-2true assume !false; 1051#L2165true cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 1021#L2168true assume cleanup_~i~3 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~0;havoc isBlocked_~retValue_acc~0;isBlocked_~retValue_acc~0 := 0;isBlocked_#res := isBlocked_~retValue_acc~0; 3644#L130true cleanup_#t~ret128 := isBlocked_#res;cleanup_~tmp___0~12 := cleanup_#t~ret128;havoc cleanup_#t~ret128; 999#L2172true assume 1 != cleanup_~tmp___0~12; 997#L2172-1true havoc isIdle_#res;havoc isIdle_#t~ret8, isIdle_~retValue_acc~7, isIdle_~tmp~4;havoc isIdle_~retValue_acc~7;havoc isIdle_~tmp~4;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret3, anyStopRequested_#t~ret4, anyStopRequested_#t~ret5, anyStopRequested_#t~ret6, anyStopRequested_#t~ret7, anyStopRequested_~retValue_acc~6, anyStopRequested_~tmp~3, anyStopRequested_~tmp___0~0, anyStopRequested_~tmp___1~0, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~6;havoc anyStopRequested_~tmp~3;havoc anyStopRequested_~tmp___0~0;havoc anyStopRequested_~tmp___1~0;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 3257#L2454-100true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 4725#L2481-100true anyStopRequested_#t~ret3 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret3;havoc anyStopRequested_#t~ret3; 925#L411true assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~6 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~6; 1489#L475true isIdle_#t~ret8 := anyStopRequested_#res;isIdle_~tmp~4 := isIdle_#t~ret8;havoc isIdle_#t~ret8;isIdle_~retValue_acc~7 := (if 0 == isIdle_~tmp~4 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~7; 3488#L488true cleanup_#t~ret129 := isIdle_#res;cleanup_~tmp~23 := cleanup_#t~ret129;havoc cleanup_#t~ret129; 21#L2184true assume !(0 != cleanup_~tmp~23);havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret107, __utac_acc__Specification3_spec__1_#t~ret108, __utac_acc__Specification3_spec__1_#t~ret109, __utac_acc__Specification3_spec__1_#t~ret110, __utac_acc__Specification3_spec__1_#t~ret111, __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~15, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~7, __utac_acc__Specification3_spec__1_~tmp___2~5, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~15;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~7;havoc __utac_acc__Specification3_spec__1_~tmp___2~5;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 3684#L303-16true __utac_acc__Specification3_spec__1_#t~ret107 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~15 := __utac_acc__Specification3_spec__1_#t~ret107;havoc __utac_acc__Specification3_spec__1_#t~ret107;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~15;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~4;havoc getCurrentHeading_~retValue_acc~4;getCurrentHeading_~retValue_acc~4 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~4; 5693#L355-12true __utac_acc__Specification3_spec__1_#t~ret108 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret108;havoc __utac_acc__Specification3_spec__1_#t~ret108; 332#L1840-4true assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 4279#L1902-4true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~3;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~3; 4029#L320-53true assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~3 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~3; 3063#L341-53true __utac_acc__Specification3_spec__1_#t~ret114 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret114;havoc __utac_acc__Specification3_spec__1_#t~ret114; 3922#L1906-8true assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 6514#L1946-4true havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 3246#L2454-105true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 4720#L2481-105true isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 5607#L1590-12true stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 1874#L972-4true assume 0 != stopRequestedAtCurrentFloor_~tmp~9;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 3671#L303-17true stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 2285#L976-4true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 1284#L989-4true timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 15#L1127-4true assume !(0 != timeShift_~tmp___9~2); 3391#L1218-12true assume 1 == ~doorState~0;~doorState~0 := 0; 3474#L1218-14true stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 3251#L2454-108true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 4723#L2481-108true isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 5590#L1590-13true stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 2859#L855-8true assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 3672#L303-18true stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 3283#L868-8true timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 2891#L1226-4true assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 5255#L912-12true assume !(1 == ~currentHeading~0); 700#L922-36true assume !(0 == ~currentFloorID~0); 694#L922-38true assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 590#L928-29true havoc __utac_acc__Specification3_spec__2_#t~ret119, __utac_acc__Specification3_spec__2_#t~ret120, __utac_acc__Specification3_spec__2_~tmp~16, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~16;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 5353#L1971-4true assume !(-1 == ~expectedDirection~0); 644#L1983-4true assume !(1 == ~expectedDirection~0); 670#L1984-4true cleanup_~i~3 := 1 + cleanup_~i~3; 1069#L2164-2true [2018-11-22 23:02:37,823 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-22 23:02:37,823 INFO L82 PathProgramCache]: Analyzing trace with hash -1498525402, now seen corresponding path program 1 times [2018-11-22 23:02:37,824 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-22 23:02:37,825 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-22 23:02:37,854 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-22 23:02:37,854 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-22 23:02:37,854 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-22 23:02:37,938 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-22 23:02:38,055 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-22 23:02:38,057 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-22 23:02:38,057 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-22 23:02:38,060 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-22 23:02:38,060 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-22 23:02:38,060 INFO L82 PathProgramCache]: Analyzing trace with hash 1656542708, now seen corresponding path program 1 times [2018-11-22 23:02:38,060 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-22 23:02:38,060 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-22 23:02:38,061 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-22 23:02:38,061 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-22 23:02:38,061 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-22 23:02:38,072 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-22 23:02:38,126 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-22 23:02:38,126 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-22 23:02:38,126 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-22 23:02:38,128 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-22 23:02:38,137 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-11-22 23:02:38,137 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-22 23:02:38,138 INFO L87 Difference]: Start difference. First operand 6563 states. Second operand 5 states. [2018-11-22 23:02:38,906 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-22 23:02:38,906 INFO L93 Difference]: Finished difference Result 11940 states and 22285 transitions. [2018-11-22 23:02:38,906 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2018-11-22 23:02:38,908 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 11940 states and 22285 transitions. [2018-11-22 23:02:38,951 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 2788 [2018-11-22 23:02:38,993 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 11940 states to 11878 states and 22210 transitions. [2018-11-22 23:02:38,994 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 11878 [2018-11-22 23:02:39,003 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 11878 [2018-11-22 23:02:39,004 INFO L73 IsDeterministic]: Start isDeterministic. Operand 11878 states and 22210 transitions. [2018-11-22 23:02:39,019 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-22 23:02:39,020 INFO L705 BuchiCegarLoop]: Abstraction has 11878 states and 22210 transitions. [2018-11-22 23:02:39,042 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 11878 states and 22210 transitions. [2018-11-22 23:02:39,173 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 11878 to 11362. [2018-11-22 23:02:39,173 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 11362 states. [2018-11-22 23:02:39,189 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 11362 states to 11362 states and 21330 transitions. [2018-11-22 23:02:39,190 INFO L728 BuchiCegarLoop]: Abstraction has 11362 states and 21330 transitions. [2018-11-22 23:02:39,190 INFO L608 BuchiCegarLoop]: Abstraction has 11362 states and 21330 transitions. [2018-11-22 23:02:39,190 INFO L442 BuchiCegarLoop]: ======== Iteration 2============ [2018-11-22 23:02:39,190 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 11362 states and 21330 transitions. [2018-11-22 23:02:39,218 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 2564 [2018-11-22 23:02:39,219 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-22 23:02:39,219 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-22 23:02:39,222 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-22 23:02:39,222 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-22 23:02:39,223 INFO L794 eck$LassoCheckResult]: Stem: 20444#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];call #t~string53.base, #t~string53.offset := #Ultimate.alloc(10);call #t~string55.base, #t~string55.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string55.base, #t~string55.offset, 1);call write~init~int(95, #t~string55.base, 1 + #t~string55.offset, 1);call write~init~int(93, #t~string55.base, 2 + #t~string55.offset, 1);call write~init~int(0, #t~string55.base, 3 + #t~string55.offset, 1);call #t~string57.base, #t~string57.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string57.base, #t~string57.offset, 1);call write~init~int(93, #t~string57.base, 1 + #t~string57.offset, 1);call write~init~int(32, #t~string57.base, 2 + #t~string57.offset, 1);call write~init~int(0, #t~string57.base, 3 + #t~string57.offset, 1);call #t~string59.base, #t~string59.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string59.base, #t~string59.offset, 1);call write~init~int(97, #t~string59.base, 1 + #t~string59.offset, 1);call write~init~int(116, #t~string59.base, 2 + #t~string59.offset, 1);call write~init~int(32, #t~string59.base, 3 + #t~string59.offset, 1);call write~init~int(0, #t~string59.base, 4 + #t~string59.offset, 1);call #t~string61.base, #t~string61.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string61.base, #t~string61.offset, 1);call write~init~int(105, #t~string61.base, 1 + #t~string61.offset, 1);call write~init~int(0, #t~string61.base, 2 + #t~string61.offset, 1);call #t~string63.base, #t~string63.offset := #Ultimate.alloc(10);call #t~string65.base, #t~string65.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string65.base, #t~string65.offset, 1);call write~init~int(112, #t~string65.base, 1 + #t~string65.offset, 1);call write~init~int(0, #t~string65.base, 2 + #t~string65.offset, 1);call #t~string67.base, #t~string67.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string67.base, #t~string67.offset, 1);call write~init~int(111, #t~string67.base, 1 + #t~string67.offset, 1);call write~init~int(119, #t~string67.base, 2 + #t~string67.offset, 1);call write~init~int(110, #t~string67.base, 3 + #t~string67.offset, 1);call write~init~int(0, #t~string67.base, 4 + #t~string67.offset, 1);call #t~string69.base, #t~string69.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string69.base, #t~string69.offset, 1);call write~init~int(73, #t~string69.base, 1 + #t~string69.offset, 1);call write~init~int(76, #t~string69.base, 2 + #t~string69.offset, 1);call write~init~int(95, #t~string69.base, 3 + #t~string69.offset, 1);call write~init~int(112, #t~string69.base, 4 + #t~string69.offset, 1);call write~init~int(58, #t~string69.base, 5 + #t~string69.offset, 1);call write~init~int(0, #t~string69.base, 6 + #t~string69.offset, 1);call #t~string71.base, #t~string71.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string71.base, #t~string71.offset, 1);call write~init~int(37, #t~string71.base, 1 + #t~string71.offset, 1);call write~init~int(105, #t~string71.base, 2 + #t~string71.offset, 1);call write~init~int(0, #t~string71.base, 3 + #t~string71.offset, 1);call #t~string73.base, #t~string73.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string73.base, #t~string73.offset, 1);call write~init~int(37, #t~string73.base, 1 + #t~string73.offset, 1);call write~init~int(105, #t~string73.base, 2 + #t~string73.offset, 1);call write~init~int(0, #t~string73.base, 3 + #t~string73.offset, 1);call #t~string75.base, #t~string75.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string75.base, #t~string75.offset, 1);call write~init~int(37, #t~string75.base, 1 + #t~string75.offset, 1);call write~init~int(105, #t~string75.base, 2 + #t~string75.offset, 1);call write~init~int(0, #t~string75.base, 3 + #t~string75.offset, 1);call #t~string77.base, #t~string77.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string77.base, #t~string77.offset, 1);call write~init~int(37, #t~string77.base, 1 + #t~string77.offset, 1);call write~init~int(105, #t~string77.base, 2 + #t~string77.offset, 1);call write~init~int(0, #t~string77.base, 3 + #t~string77.offset, 1);call #t~string79.base, #t~string79.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string79.base, #t~string79.offset, 1);call write~init~int(37, #t~string79.base, 1 + #t~string79.offset, 1);call write~init~int(105, #t~string79.base, 2 + #t~string79.offset, 1);call write~init~int(0, #t~string79.base, 3 + #t~string79.offset, 1);call #t~string81.base, #t~string81.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string81.base, #t~string81.offset, 1);call write~init~int(70, #t~string81.base, 1 + #t~string81.offset, 1);call write~init~int(95, #t~string81.base, 2 + #t~string81.offset, 1);call write~init~int(112, #t~string81.base, 3 + #t~string81.offset, 1);call write~init~int(58, #t~string81.base, 4 + #t~string81.offset, 1);call write~init~int(0, #t~string81.base, 5 + #t~string81.offset, 1);call #t~string84.base, #t~string84.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string84.base, #t~string84.offset, 1);call write~init~int(37, #t~string84.base, 1 + #t~string84.offset, 1);call write~init~int(105, #t~string84.base, 2 + #t~string84.offset, 1);call write~init~int(0, #t~string84.base, 3 + #t~string84.offset, 1);call #t~string87.base, #t~string87.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string87.base, #t~string87.offset, 1);call write~init~int(37, #t~string87.base, 1 + #t~string87.offset, 1);call write~init~int(105, #t~string87.base, 2 + #t~string87.offset, 1);call write~init~int(0, #t~string87.base, 3 + #t~string87.offset, 1);call #t~string90.base, #t~string90.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string90.base, #t~string90.offset, 1);call write~init~int(37, #t~string90.base, 1 + #t~string90.offset, 1);call write~init~int(105, #t~string90.base, 2 + #t~string90.offset, 1);call write~init~int(0, #t~string90.base, 3 + #t~string90.offset, 1);call #t~string93.base, #t~string93.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string93.base, #t~string93.offset, 1);call write~init~int(37, #t~string93.base, 1 + #t~string93.offset, 1);call write~init~int(105, #t~string93.base, 2 + #t~string93.offset, 1);call write~init~int(0, #t~string93.base, 3 + #t~string93.offset, 1);call #t~string96.base, #t~string96.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string96.base, #t~string96.offset, 1);call write~init~int(37, #t~string96.base, 1 + #t~string96.offset, 1);call write~init~int(105, #t~string96.base, 2 + #t~string96.offset, 1);call write~init~int(0, #t~string96.base, 3 + #t~string96.offset, 1);call #t~string98.base, #t~string98.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string98.base, #t~string98.offset, 1);call write~init~int(0, #t~string98.base, 1 + #t~string98.offset, 1);call #t~string154.base, #t~string154.offset := #Ultimate.alloc(30);call #t~string155.base, #t~string155.offset := #Ultimate.alloc(9);call #t~string156.base, #t~string156.offset := #Ultimate.alloc(21);call #t~string157.base, #t~string157.offset := #Ultimate.alloc(30);call #t~string158.base, #t~string158.offset := #Ultimate.alloc(9);call #t~string159.base, #t~string159.offset := #Ultimate.alloc(21);call #t~string163.base, #t~string163.offset := #Ultimate.alloc(30);call #t~string164.base, #t~string164.offset := #Ultimate.alloc(9);call #t~string165.base, #t~string165.offset := #Ultimate.alloc(25);call #t~string166.base, #t~string166.offset := #Ultimate.alloc(30);call #t~string167.base, #t~string167.offset := #Ultimate.alloc(9);call #t~string168.base, #t~string168.offset := #Ultimate.alloc(25);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~expectedDirection~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 20445#L-1 havoc main_#res;havoc main_#t~ret134, main_~retValue_acc~21, main_~tmp~25;havoc main_~retValue_acc~21;havoc main_~tmp~25; 19941#L3055 havoc valid_product_#res;havoc valid_product_~retValue_acc~26;havoc valid_product_~retValue_acc~26;valid_product_~retValue_acc~26 := 1;valid_product_#res := valid_product_~retValue_acc~26; 18799#L3063 main_#t~ret134 := valid_product_#res;main_~tmp~25 := main_#t~ret134;havoc main_#t~ret134; 18767#L2358 assume 0 != main_~tmp~25; 18768#L2332 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 19636#L2447 havoc bobCall_#t~ret122, bobCall_~tmp~17;havoc bobCall_~tmp~17;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~18;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~18; 21762#L1741 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~18 := 4;getOrigin_#res := getOrigin_~retValue_acc~18; 21707#L1766 bobCall_#t~ret122 := getOrigin_#res;bobCall_~tmp~17 := bobCall_#t~ret122;havoc bobCall_#t~ret122;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~17;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 19099#L2725 assume 0 == initPersonOnFloor_~floor; 19100#L2726 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 20178#L2833-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 20127#L2517 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 18959#L2529-2 havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret107, __utac_acc__Specification3_spec__1_#t~ret108, __utac_acc__Specification3_spec__1_#t~ret109, __utac_acc__Specification3_spec__1_#t~ret110, __utac_acc__Specification3_spec__1_#t~ret111, __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~15, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~7, __utac_acc__Specification3_spec__1_~tmp___2~5, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~15;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~7;havoc __utac_acc__Specification3_spec__1_~tmp___2~5;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 18960#L303 __utac_acc__Specification3_spec__1_#t~ret107 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~15 := __utac_acc__Specification3_spec__1_#t~ret107;havoc __utac_acc__Specification3_spec__1_#t~ret107;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~15;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~4;havoc getCurrentHeading_~retValue_acc~4;getCurrentHeading_~retValue_acc~4 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~4; 20729#L355 __utac_acc__Specification3_spec__1_#t~ret108 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret108;havoc __utac_acc__Specification3_spec__1_#t~ret108; 19133#L1840 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 19134#L1902 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~3;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~3; 23343#L320-5 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~3 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~3; 21703#L341-5 __utac_acc__Specification3_spec__1_#t~ret114 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret114;havoc __utac_acc__Specification3_spec__1_#t~ret114; 23013#L1906 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 21774#L1946 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 22976#L2454 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 22908#L2481 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 24626#L1590 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 21301#L972 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 20735#L303-1 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 20736#L976 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 19371#L989 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 18576#L1127 assume !(0 != timeShift_~tmp___9~2); 18578#L1218 assume !(1 == ~doorState~0); 23029#L1218-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 22974#L2454-3 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 22877#L2481-3 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 24628#L1590-1 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 22158#L855 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 20734#L303-2 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 20721#L868 timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 22393#L1226 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 22394#L912 assume !(1 == ~currentHeading~0); 19892#L922 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 19893#L922-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 26563#L928-5 havoc __utac_acc__Specification3_spec__2_#t~ret119, __utac_acc__Specification3_spec__2_#t~ret120, __utac_acc__Specification3_spec__2_~tmp~16, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~16;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 26560#L1971 assume !(-1 == ~expectedDirection~0); 26557#L1983 assume !(1 == ~expectedDirection~0); 19566#L1984 havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret107, __utac_acc__Specification3_spec__1_#t~ret108, __utac_acc__Specification3_spec__1_#t~ret109, __utac_acc__Specification3_spec__1_#t~ret110, __utac_acc__Specification3_spec__1_#t~ret111, __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~15, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~7, __utac_acc__Specification3_spec__1_~tmp___2~5, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~15;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~7;havoc __utac_acc__Specification3_spec__1_~tmp___2~5;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 19567#L303-4 __utac_acc__Specification3_spec__1_#t~ret107 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~15 := __utac_acc__Specification3_spec__1_#t~ret107;havoc __utac_acc__Specification3_spec__1_#t~ret107;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~15;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~4;havoc getCurrentHeading_~retValue_acc~4;getCurrentHeading_~retValue_acc~4 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~4; 20732#L355-3 __utac_acc__Specification3_spec__1_#t~ret108 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret108;havoc __utac_acc__Specification3_spec__1_#t~ret108; 26511#L1840-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 19132#L1902-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~3;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~3; 23332#L320-17 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~3 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~3; 21955#L341-17 __utac_acc__Specification3_spec__1_#t~ret114 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret114;havoc __utac_acc__Specification3_spec__1_#t~ret114; 22988#L1906-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 21777#L1946-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 23015#L2454-25 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 22437#L2481-25 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 24830#L1590-3 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 21303#L972-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 20730#L303-5 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 20731#L976-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 19376#L989-1 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 18584#L1127-1 assume !(0 != timeShift_~tmp___9~2); 18586#L1218-3 assume !(1 == ~doorState~0); 23027#L1218-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 23016#L2454-28 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 22398#L2481-28 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 24833#L1590-4 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 22165#L855-2 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 22166#L303-6 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 20727#L868-2 timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 22350#L1226-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 22352#L912-3 assume !(1 == ~currentHeading~0); 19885#L922-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 19886#L922-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 19632#L928-11 havoc __utac_acc__Specification3_spec__2_#t~ret119, __utac_acc__Specification3_spec__2_#t~ret120, __utac_acc__Specification3_spec__2_~tmp~16, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~16;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 26574#L1971-1 assume !(-1 == ~expectedDirection~0); 26572#L1983-1 assume !(1 == ~expectedDirection~0); 26548#L1984-1 havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret107, __utac_acc__Specification3_spec__1_#t~ret108, __utac_acc__Specification3_spec__1_#t~ret109, __utac_acc__Specification3_spec__1_#t~ret110, __utac_acc__Specification3_spec__1_#t~ret111, __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~15, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~7, __utac_acc__Specification3_spec__1_~tmp___2~5, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~15;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~7;havoc __utac_acc__Specification3_spec__1_~tmp___2~5;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 26547#L303-8 __utac_acc__Specification3_spec__1_#t~ret107 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~15 := __utac_acc__Specification3_spec__1_#t~ret107;havoc __utac_acc__Specification3_spec__1_#t~ret107;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~15;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~4;havoc getCurrentHeading_~retValue_acc~4;getCurrentHeading_~retValue_acc~4 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~4; 26529#L355-6 __utac_acc__Specification3_spec__1_#t~ret108 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret108;havoc __utac_acc__Specification3_spec__1_#t~ret108; 19125#L1840-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 19126#L1902-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~3;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~3; 23309#L320-29 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~3 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~3; 21924#L341-29 __utac_acc__Specification3_spec__1_#t~ret114 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret114;havoc __utac_acc__Specification3_spec__1_#t~ret114; 22795#L1906-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 21756#L1946-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 22991#L2454-50 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 22321#L2481-50 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 24837#L1590-6 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 21305#L972-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 21307#L303-9 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 21554#L976-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 19362#L989-2 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 18587#L1127-2 assume !(0 != timeShift_~tmp___9~2); 18589#L1218-6 assume 1 == ~doorState~0;~doorState~0 := 0; 23028#L1218-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 22995#L2454-53 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 22329#L2481-53 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 24839#L1590-7 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 22270#L855-4 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 22271#L303-10 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 20693#L868-4 timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 22362#L1226-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 22363#L912-6 assume !(1 == ~currentHeading~0); 19633#L922-18 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 19634#L922-20 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 27420#L928-17 havoc __utac_acc__Specification3_spec__2_#t~ret119, __utac_acc__Specification3_spec__2_#t~ret120, __utac_acc__Specification3_spec__2_~tmp~16, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~16;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 27418#L1971-2 assume !(-1 == ~expectedDirection~0); 27415#L1983-2 assume !(1 == ~expectedDirection~0); 27413#L1984-2 havoc bobCall_#t~ret122, bobCall_~tmp~17;havoc bobCall_~tmp~17;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~18;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~18; 27412#L1741-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~18 := 4;getOrigin_#res := getOrigin_~retValue_acc~18; 27406#L1766-1 bobCall_#t~ret122 := getOrigin_#res;bobCall_~tmp~17 := bobCall_#t~ret122;havoc bobCall_#t~ret122;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~17;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 27405#L2725-1 assume 0 == initPersonOnFloor_~floor; 27378#L2726-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 25224#L2833-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 20118#L2517-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 18951#L2529-5 havoc cleanup_#t~ret128, cleanup_#t~ret129, cleanup_~i~3, cleanup_~tmp~23, cleanup_~tmp___0~12, cleanup_~__cil_tmp4~0;havoc cleanup_~i~3;havoc cleanup_~tmp~23;havoc cleanup_~tmp___0~12;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret107, __utac_acc__Specification3_spec__1_#t~ret108, __utac_acc__Specification3_spec__1_#t~ret109, __utac_acc__Specification3_spec__1_#t~ret110, __utac_acc__Specification3_spec__1_#t~ret111, __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~15, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~7, __utac_acc__Specification3_spec__1_~tmp___2~5, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~15;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~7;havoc __utac_acc__Specification3_spec__1_~tmp___2~5;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 18954#L303-12 __utac_acc__Specification3_spec__1_#t~ret107 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~15 := __utac_acc__Specification3_spec__1_#t~ret107;havoc __utac_acc__Specification3_spec__1_#t~ret107;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~15;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~4;havoc getCurrentHeading_~retValue_acc~4;getCurrentHeading_~retValue_acc~4 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~4; 26463#L355-9 __utac_acc__Specification3_spec__1_#t~ret108 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret108;havoc __utac_acc__Specification3_spec__1_#t~ret108; 26462#L1840-3 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 19243#L1841-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~3;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~3; 19244#L320-36 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~3 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~3; 21878#L341-36 __utac_acc__Specification3_spec__1_#t~ret109 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~3 := __utac_acc__Specification3_spec__1_#t~ret109;havoc __utac_acc__Specification3_spec__1_#t~ret109; 21399#L1845-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3;~expectedDirection~0 := 1; 20497#L1946-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 25969#L2454-75 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 25966#L2481-75 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 25965#L1590-9 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 25964#L972-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 25958#L303-13 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 25941#L976-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 25939#L989-3 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 25938#L1127-3 assume !(0 != timeShift_~tmp___9~2); 25937#L1218-9 assume !(1 == ~doorState~0); 25936#L1218-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 25935#L2454-78 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 25930#L2481-78 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 25929#L1590-10 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 25928#L855-6 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 25364#L303-14 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 25362#L868-6 timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 25359#L1226-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 25358#L912-9 assume !(1 == ~currentHeading~0); 19629#L922-27 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 19630#L922-29 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 28269#L928-23 havoc __utac_acc__Specification3_spec__2_#t~ret119, __utac_acc__Specification3_spec__2_#t~ret120, __utac_acc__Specification3_spec__2_~tmp~16, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~16;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 28267#L1971-3 assume !(-1 == ~expectedDirection~0); 28264#L1983-3 assume !(1 == ~expectedDirection~0); 19563#L1984-3 cleanup_~i~3 := 0; 19564#L2164-2 [2018-11-22 23:02:39,223 INFO L796 eck$LassoCheckResult]: Loop: 19564#L2164-2 assume !false; 20117#L2165 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 20087#L2168 assume cleanup_~i~3 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~0;havoc isBlocked_~retValue_acc~0;isBlocked_~retValue_acc~0 := 0;isBlocked_#res := isBlocked_~retValue_acc~0; 20088#L130 cleanup_#t~ret128 := isBlocked_#res;cleanup_~tmp___0~12 := cleanup_#t~ret128;havoc cleanup_#t~ret128; 20041#L2172 assume 1 != cleanup_~tmp___0~12; 20037#L2172-1 havoc isIdle_#res;havoc isIdle_#t~ret8, isIdle_~retValue_acc~7, isIdle_~tmp~4;havoc isIdle_~retValue_acc~7;havoc isIdle_~tmp~4;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret3, anyStopRequested_#t~ret4, anyStopRequested_#t~ret5, anyStopRequested_#t~ret6, anyStopRequested_#t~ret7, anyStopRequested_~retValue_acc~6, anyStopRequested_~tmp~3, anyStopRequested_~tmp___0~0, anyStopRequested_~tmp___1~0, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~6;havoc anyStopRequested_~tmp~3;havoc anyStopRequested_~tmp___0~0;havoc anyStopRequested_~tmp___1~0;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 20038#L2454-100 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 22477#L2481-100 anyStopRequested_#t~ret3 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret3;havoc anyStopRequested_#t~ret3; 19931#L411 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~6 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~6; 18603#L475 isIdle_#t~ret8 := anyStopRequested_#res;isIdle_~tmp~4 := isIdle_#t~ret8;havoc isIdle_#t~ret8;isIdle_~retValue_acc~7 := (if 0 == isIdle_~tmp~4 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~7; 27370#L488 cleanup_#t~ret129 := isIdle_#res;cleanup_~tmp~23 := cleanup_#t~ret129;havoc cleanup_#t~ret129; 18579#L2184 assume !(0 != cleanup_~tmp~23);havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret107, __utac_acc__Specification3_spec__1_#t~ret108, __utac_acc__Specification3_spec__1_#t~ret109, __utac_acc__Specification3_spec__1_#t~ret110, __utac_acc__Specification3_spec__1_#t~ret111, __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~15, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~7, __utac_acc__Specification3_spec__1_~tmp___2~5, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~15;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~7;havoc __utac_acc__Specification3_spec__1_~tmp___2~5;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 18580#L303-16 __utac_acc__Specification3_spec__1_#t~ret107 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~15 := __utac_acc__Specification3_spec__1_#t~ret107;havoc __utac_acc__Specification3_spec__1_#t~ret107;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~15;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~4;havoc getCurrentHeading_~retValue_acc~4;getCurrentHeading_~retValue_acc~4 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~4; 23198#L355-12 __utac_acc__Specification3_spec__1_#t~ret108 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret108;havoc __utac_acc__Specification3_spec__1_#t~ret108; 24917#L1840-4 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 19251#L1841-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~3;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~3; 19252#L320-48 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~3 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~3; 21694#L341-48 __utac_acc__Specification3_spec__1_#t~ret109 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~3 := __utac_acc__Specification3_spec__1_#t~ret109;havoc __utac_acc__Specification3_spec__1_#t~ret109; 21393#L1845-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3;~expectedDirection~0 := 1; 20480#L1946-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 25814#L2454-105 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 25813#L2481-105 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 25812#L1590-12 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 25806#L972-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 25804#L303-17 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 25798#L976-4 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 25796#L989-4 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 25794#L1127-4 assume !(0 != timeShift_~tmp___9~2); 25793#L1218-12 assume 1 == ~doorState~0;~doorState~0 := 0; 25792#L1218-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 25790#L2454-108 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 25786#L2481-108 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 25785#L1590-13 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 25784#L855-8 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 25438#L303-18 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 25436#L868-8 timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 25435#L1226-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 25434#L912-12 assume !(1 == ~currentHeading~0); 19619#L922-36 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 19620#L922-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 19422#L928-29 havoc __utac_acc__Specification3_spec__2_#t~ret119, __utac_acc__Specification3_spec__2_#t~ret120, __utac_acc__Specification3_spec__2_~tmp~16, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~16;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 19423#L1971-4 assume !(-1 == ~expectedDirection~0); 19520#L1983-4 assume !(1 == ~expectedDirection~0); 19521#L1984-4 cleanup_~i~3 := 1 + cleanup_~i~3; 19564#L2164-2 [2018-11-22 23:02:39,230 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-22 23:02:39,230 INFO L82 PathProgramCache]: Analyzing trace with hash -761631065, now seen corresponding path program 1 times [2018-11-22 23:02:39,230 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-22 23:02:39,230 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-22 23:02:39,231 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-22 23:02:39,231 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-22 23:02:39,231 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-22 23:02:39,263 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-22 23:02:39,336 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-22 23:02:39,337 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-22 23:02:39,337 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-22 23:02:39,337 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-22 23:02:39,337 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-22 23:02:39,337 INFO L82 PathProgramCache]: Analyzing trace with hash 931050651, now seen corresponding path program 1 times [2018-11-22 23:02:39,338 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-22 23:02:39,338 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-22 23:02:39,338 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-22 23:02:39,338 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-22 23:02:39,338 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-22 23:02:39,346 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-22 23:02:39,427 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-22 23:02:39,427 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-22 23:02:39,427 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-22 23:02:39,428 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-22 23:02:39,428 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-11-22 23:02:39,428 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-22 23:02:39,428 INFO L87 Difference]: Start difference. First operand 11362 states and 21330 transitions. cyclomatic complexity: 9969 Second operand 5 states. [2018-11-22 23:02:39,935 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-22 23:02:39,935 INFO L93 Difference]: Finished difference Result 11878 states and 22175 transitions. [2018-11-22 23:02:39,936 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2018-11-22 23:02:39,937 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 11878 states and 22175 transitions. [2018-11-22 23:02:40,104 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 2788 [2018-11-22 23:02:40,137 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 11878 states to 11878 states and 22175 transitions. [2018-11-22 23:02:40,137 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 11878 [2018-11-22 23:02:40,144 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 11878 [2018-11-22 23:02:40,144 INFO L73 IsDeterministic]: Start isDeterministic. Operand 11878 states and 22175 transitions. [2018-11-22 23:02:40,154 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-22 23:02:40,155 INFO L705 BuchiCegarLoop]: Abstraction has 11878 states and 22175 transitions. [2018-11-22 23:02:40,164 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 11878 states and 22175 transitions. [2018-11-22 23:02:40,264 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 11878 to 11362. [2018-11-22 23:02:40,264 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 11362 states. [2018-11-22 23:02:40,277 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 11362 states to 11362 states and 21303 transitions. [2018-11-22 23:02:40,277 INFO L728 BuchiCegarLoop]: Abstraction has 11362 states and 21303 transitions. [2018-11-22 23:02:40,277 INFO L608 BuchiCegarLoop]: Abstraction has 11362 states and 21303 transitions. [2018-11-22 23:02:40,277 INFO L442 BuchiCegarLoop]: ======== Iteration 3============ [2018-11-22 23:02:40,277 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 11362 states and 21303 transitions. [2018-11-22 23:02:40,304 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 2564 [2018-11-22 23:02:40,304 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-22 23:02:40,304 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-22 23:02:40,307 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-22 23:02:40,307 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-22 23:02:40,308 INFO L794 eck$LassoCheckResult]: Stem: 43701#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];call #t~string53.base, #t~string53.offset := #Ultimate.alloc(10);call #t~string55.base, #t~string55.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string55.base, #t~string55.offset, 1);call write~init~int(95, #t~string55.base, 1 + #t~string55.offset, 1);call write~init~int(93, #t~string55.base, 2 + #t~string55.offset, 1);call write~init~int(0, #t~string55.base, 3 + #t~string55.offset, 1);call #t~string57.base, #t~string57.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string57.base, #t~string57.offset, 1);call write~init~int(93, #t~string57.base, 1 + #t~string57.offset, 1);call write~init~int(32, #t~string57.base, 2 + #t~string57.offset, 1);call write~init~int(0, #t~string57.base, 3 + #t~string57.offset, 1);call #t~string59.base, #t~string59.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string59.base, #t~string59.offset, 1);call write~init~int(97, #t~string59.base, 1 + #t~string59.offset, 1);call write~init~int(116, #t~string59.base, 2 + #t~string59.offset, 1);call write~init~int(32, #t~string59.base, 3 + #t~string59.offset, 1);call write~init~int(0, #t~string59.base, 4 + #t~string59.offset, 1);call #t~string61.base, #t~string61.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string61.base, #t~string61.offset, 1);call write~init~int(105, #t~string61.base, 1 + #t~string61.offset, 1);call write~init~int(0, #t~string61.base, 2 + #t~string61.offset, 1);call #t~string63.base, #t~string63.offset := #Ultimate.alloc(10);call #t~string65.base, #t~string65.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string65.base, #t~string65.offset, 1);call write~init~int(112, #t~string65.base, 1 + #t~string65.offset, 1);call write~init~int(0, #t~string65.base, 2 + #t~string65.offset, 1);call #t~string67.base, #t~string67.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string67.base, #t~string67.offset, 1);call write~init~int(111, #t~string67.base, 1 + #t~string67.offset, 1);call write~init~int(119, #t~string67.base, 2 + #t~string67.offset, 1);call write~init~int(110, #t~string67.base, 3 + #t~string67.offset, 1);call write~init~int(0, #t~string67.base, 4 + #t~string67.offset, 1);call #t~string69.base, #t~string69.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string69.base, #t~string69.offset, 1);call write~init~int(73, #t~string69.base, 1 + #t~string69.offset, 1);call write~init~int(76, #t~string69.base, 2 + #t~string69.offset, 1);call write~init~int(95, #t~string69.base, 3 + #t~string69.offset, 1);call write~init~int(112, #t~string69.base, 4 + #t~string69.offset, 1);call write~init~int(58, #t~string69.base, 5 + #t~string69.offset, 1);call write~init~int(0, #t~string69.base, 6 + #t~string69.offset, 1);call #t~string71.base, #t~string71.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string71.base, #t~string71.offset, 1);call write~init~int(37, #t~string71.base, 1 + #t~string71.offset, 1);call write~init~int(105, #t~string71.base, 2 + #t~string71.offset, 1);call write~init~int(0, #t~string71.base, 3 + #t~string71.offset, 1);call #t~string73.base, #t~string73.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string73.base, #t~string73.offset, 1);call write~init~int(37, #t~string73.base, 1 + #t~string73.offset, 1);call write~init~int(105, #t~string73.base, 2 + #t~string73.offset, 1);call write~init~int(0, #t~string73.base, 3 + #t~string73.offset, 1);call #t~string75.base, #t~string75.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string75.base, #t~string75.offset, 1);call write~init~int(37, #t~string75.base, 1 + #t~string75.offset, 1);call write~init~int(105, #t~string75.base, 2 + #t~string75.offset, 1);call write~init~int(0, #t~string75.base, 3 + #t~string75.offset, 1);call #t~string77.base, #t~string77.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string77.base, #t~string77.offset, 1);call write~init~int(37, #t~string77.base, 1 + #t~string77.offset, 1);call write~init~int(105, #t~string77.base, 2 + #t~string77.offset, 1);call write~init~int(0, #t~string77.base, 3 + #t~string77.offset, 1);call #t~string79.base, #t~string79.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string79.base, #t~string79.offset, 1);call write~init~int(37, #t~string79.base, 1 + #t~string79.offset, 1);call write~init~int(105, #t~string79.base, 2 + #t~string79.offset, 1);call write~init~int(0, #t~string79.base, 3 + #t~string79.offset, 1);call #t~string81.base, #t~string81.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string81.base, #t~string81.offset, 1);call write~init~int(70, #t~string81.base, 1 + #t~string81.offset, 1);call write~init~int(95, #t~string81.base, 2 + #t~string81.offset, 1);call write~init~int(112, #t~string81.base, 3 + #t~string81.offset, 1);call write~init~int(58, #t~string81.base, 4 + #t~string81.offset, 1);call write~init~int(0, #t~string81.base, 5 + #t~string81.offset, 1);call #t~string84.base, #t~string84.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string84.base, #t~string84.offset, 1);call write~init~int(37, #t~string84.base, 1 + #t~string84.offset, 1);call write~init~int(105, #t~string84.base, 2 + #t~string84.offset, 1);call write~init~int(0, #t~string84.base, 3 + #t~string84.offset, 1);call #t~string87.base, #t~string87.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string87.base, #t~string87.offset, 1);call write~init~int(37, #t~string87.base, 1 + #t~string87.offset, 1);call write~init~int(105, #t~string87.base, 2 + #t~string87.offset, 1);call write~init~int(0, #t~string87.base, 3 + #t~string87.offset, 1);call #t~string90.base, #t~string90.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string90.base, #t~string90.offset, 1);call write~init~int(37, #t~string90.base, 1 + #t~string90.offset, 1);call write~init~int(105, #t~string90.base, 2 + #t~string90.offset, 1);call write~init~int(0, #t~string90.base, 3 + #t~string90.offset, 1);call #t~string93.base, #t~string93.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string93.base, #t~string93.offset, 1);call write~init~int(37, #t~string93.base, 1 + #t~string93.offset, 1);call write~init~int(105, #t~string93.base, 2 + #t~string93.offset, 1);call write~init~int(0, #t~string93.base, 3 + #t~string93.offset, 1);call #t~string96.base, #t~string96.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string96.base, #t~string96.offset, 1);call write~init~int(37, #t~string96.base, 1 + #t~string96.offset, 1);call write~init~int(105, #t~string96.base, 2 + #t~string96.offset, 1);call write~init~int(0, #t~string96.base, 3 + #t~string96.offset, 1);call #t~string98.base, #t~string98.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string98.base, #t~string98.offset, 1);call write~init~int(0, #t~string98.base, 1 + #t~string98.offset, 1);call #t~string154.base, #t~string154.offset := #Ultimate.alloc(30);call #t~string155.base, #t~string155.offset := #Ultimate.alloc(9);call #t~string156.base, #t~string156.offset := #Ultimate.alloc(21);call #t~string157.base, #t~string157.offset := #Ultimate.alloc(30);call #t~string158.base, #t~string158.offset := #Ultimate.alloc(9);call #t~string159.base, #t~string159.offset := #Ultimate.alloc(21);call #t~string163.base, #t~string163.offset := #Ultimate.alloc(30);call #t~string164.base, #t~string164.offset := #Ultimate.alloc(9);call #t~string165.base, #t~string165.offset := #Ultimate.alloc(25);call #t~string166.base, #t~string166.offset := #Ultimate.alloc(30);call #t~string167.base, #t~string167.offset := #Ultimate.alloc(9);call #t~string168.base, #t~string168.offset := #Ultimate.alloc(25);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~expectedDirection~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 43702#L-1 havoc main_#res;havoc main_#t~ret134, main_~retValue_acc~21, main_~tmp~25;havoc main_~retValue_acc~21;havoc main_~tmp~25; 43184#L3055 havoc valid_product_#res;havoc valid_product_~retValue_acc~26;havoc valid_product_~retValue_acc~26;valid_product_~retValue_acc~26 := 1;valid_product_#res := valid_product_~retValue_acc~26; 42058#L3063 main_#t~ret134 := valid_product_#res;main_~tmp~25 := main_#t~ret134;havoc main_#t~ret134; 42026#L2358 assume 0 != main_~tmp~25; 42027#L2332 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 42883#L2447 havoc bobCall_#t~ret122, bobCall_~tmp~17;havoc bobCall_~tmp~17;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~18;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~18; 45021#L1741 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~18 := 4;getOrigin_#res := getOrigin_~retValue_acc~18; 44968#L1766 bobCall_#t~ret122 := getOrigin_#res;bobCall_~tmp~17 := bobCall_#t~ret122;havoc bobCall_#t~ret122;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~17;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 42352#L2725 assume 0 == initPersonOnFloor_~floor; 42353#L2726 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 43427#L2833-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 43376#L2517 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 42218#L2529-2 havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret107, __utac_acc__Specification3_spec__1_#t~ret108, __utac_acc__Specification3_spec__1_#t~ret109, __utac_acc__Specification3_spec__1_#t~ret110, __utac_acc__Specification3_spec__1_#t~ret111, __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~15, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~7, __utac_acc__Specification3_spec__1_~tmp___2~5, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~15;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~7;havoc __utac_acc__Specification3_spec__1_~tmp___2~5;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 42219#L303 __utac_acc__Specification3_spec__1_#t~ret107 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~15 := __utac_acc__Specification3_spec__1_#t~ret107;havoc __utac_acc__Specification3_spec__1_#t~ret107;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~15;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~4;havoc getCurrentHeading_~retValue_acc~4;getCurrentHeading_~retValue_acc~4 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~4; 43986#L355 __utac_acc__Specification3_spec__1_#t~ret108 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret108;havoc __utac_acc__Specification3_spec__1_#t~ret108; 42390#L1840 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 42391#L1902 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~3;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~3; 46595#L320-5 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~3 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~3; 44964#L341-5 __utac_acc__Specification3_spec__1_#t~ret114 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret114;havoc __utac_acc__Specification3_spec__1_#t~ret114; 46264#L1906 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 45033#L1946 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 46227#L2454 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 46162#L2481 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 47881#L1590 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 44557#L972 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 43993#L303-1 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 43994#L976 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 42621#L989 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 41837#L1127 assume !(0 != timeShift_~tmp___9~2); 41839#L1218 assume !(1 == ~doorState~0); 46280#L1218-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 46225#L2454-3 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 46127#L2481-3 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 47883#L1590-1 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 45414#L855 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 43992#L303-2 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 43978#L868 timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 45647#L1226 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 45648#L912 assume !(1 == ~currentHeading~0); 43135#L922 assume !(0 == ~currentFloorID~0); 43131#L922-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 42748#L928-5 havoc __utac_acc__Specification3_spec__2_#t~ret119, __utac_acc__Specification3_spec__2_#t~ret120, __utac_acc__Specification3_spec__2_~tmp~16, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~16;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 42749#L1971 assume !(-1 == ~expectedDirection~0); 42782#L1983 assume !(1 == ~expectedDirection~0); 42783#L1984 havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret107, __utac_acc__Specification3_spec__1_#t~ret108, __utac_acc__Specification3_spec__1_#t~ret109, __utac_acc__Specification3_spec__1_#t~ret110, __utac_acc__Specification3_spec__1_#t~ret111, __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~15, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~7, __utac_acc__Specification3_spec__1_~tmp___2~5, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~15;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~7;havoc __utac_acc__Specification3_spec__1_~tmp___2~5;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 42815#L303-4 __utac_acc__Specification3_spec__1_#t~ret107 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~15 := __utac_acc__Specification3_spec__1_#t~ret107;havoc __utac_acc__Specification3_spec__1_#t~ret107;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~15;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~4;havoc getCurrentHeading_~retValue_acc~4;getCurrentHeading_~retValue_acc~4 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~4; 48245#L355-3 __utac_acc__Specification3_spec__1_#t~ret108 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret108;havoc __utac_acc__Specification3_spec__1_#t~ret108; 48246#L1840-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 46830#L1902-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~3;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~3; 46584#L320-17 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~3 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~3; 45213#L341-17 __utac_acc__Specification3_spec__1_#t~ret114 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret114;havoc __utac_acc__Specification3_spec__1_#t~ret114; 46239#L1906-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 45036#L1946-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 46266#L2454-25 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 45691#L2481-25 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 48087#L1590-3 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 44559#L972-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 43987#L303-5 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 43988#L976-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 42626#L989-1 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 41843#L1127-1 assume !(0 != timeShift_~tmp___9~2); 41845#L1218-3 assume !(1 == ~doorState~0); 46278#L1218-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 46267#L2454-28 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 45652#L2481-28 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 48090#L1590-4 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 45421#L855-2 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 45422#L303-6 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 43984#L868-2 timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 45606#L1226-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 45607#L912-3 assume !(1 == ~currentHeading~0); 43128#L922-9 assume !(0 == ~currentFloorID~0); 43130#L922-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 42742#L928-11 havoc __utac_acc__Specification3_spec__2_#t~ret119, __utac_acc__Specification3_spec__2_#t~ret120, __utac_acc__Specification3_spec__2_~tmp~16, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~16;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 42743#L1971-1 assume !(-1 == ~expectedDirection~0); 42760#L1983-1 assume !(1 == ~expectedDirection~0); 42761#L1984-1 havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret107, __utac_acc__Specification3_spec__1_#t~ret108, __utac_acc__Specification3_spec__1_#t~ret109, __utac_acc__Specification3_spec__1_#t~ret110, __utac_acc__Specification3_spec__1_#t~ret111, __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~15, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~7, __utac_acc__Specification3_spec__1_~tmp___2~5, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~15;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~7;havoc __utac_acc__Specification3_spec__1_~tmp___2~5;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 42814#L303-8 __utac_acc__Specification3_spec__1_#t~ret107 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~15 := __utac_acc__Specification3_spec__1_#t~ret107;havoc __utac_acc__Specification3_spec__1_#t~ret107;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~15;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~4;havoc getCurrentHeading_~retValue_acc~4;getCurrentHeading_~retValue_acc~4 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~4; 48623#L355-6 __utac_acc__Specification3_spec__1_#t~ret108 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret108;havoc __utac_acc__Specification3_spec__1_#t~ret108; 48621#L1840-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 46832#L1902-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~3;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~3; 46561#L320-29 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~3 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~3; 45182#L341-29 __utac_acc__Specification3_spec__1_#t~ret114 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret114;havoc __utac_acc__Specification3_spec__1_#t~ret114; 46046#L1906-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 45015#L1946-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 46241#L2454-50 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 45575#L2481-50 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 48094#L1590-6 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 44561#L972-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 44563#L303-9 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 44819#L976-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 42612#L989-2 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 41846#L1127-2 assume !(0 != timeShift_~tmp___9~2); 41848#L1218-6 assume 1 == ~doorState~0;~doorState~0 := 0; 46279#L1218-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 46245#L2454-53 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 45585#L2481-53 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 48095#L1590-7 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 45526#L855-4 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 45527#L303-10 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 43950#L868-4 timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 45614#L1226-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 45615#L912-6 assume !(1 == ~currentHeading~0); 42880#L922-18 assume !(0 == ~currentFloorID~0); 42882#L922-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 42732#L928-17 havoc __utac_acc__Specification3_spec__2_#t~ret119, __utac_acc__Specification3_spec__2_#t~ret120, __utac_acc__Specification3_spec__2_~tmp~16, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~16;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 42733#L1971-2 assume !(-1 == ~expectedDirection~0); 42767#L1983-2 assume !(1 == ~expectedDirection~0); 42768#L1984-2 havoc bobCall_#t~ret122, bobCall_~tmp~17;havoc bobCall_~tmp~17;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~18;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~18; 42812#L1741-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~18 := 4;getOrigin_#res := getOrigin_~retValue_acc~18; 44971#L1766-1 bobCall_#t~ret122 := getOrigin_#res;bobCall_~tmp~17 := bobCall_#t~ret122;havoc bobCall_#t~ret122;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~17;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 42337#L2725-1 assume 0 == initPersonOnFloor_~floor; 42338#L2726-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 43431#L2833-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 43368#L2517-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 42210#L2529-5 havoc cleanup_#t~ret128, cleanup_#t~ret129, cleanup_~i~3, cleanup_~tmp~23, cleanup_~tmp___0~12, cleanup_~__cil_tmp4~0;havoc cleanup_~i~3;havoc cleanup_~tmp~23;havoc cleanup_~tmp___0~12;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret107, __utac_acc__Specification3_spec__1_#t~ret108, __utac_acc__Specification3_spec__1_#t~ret109, __utac_acc__Specification3_spec__1_#t~ret110, __utac_acc__Specification3_spec__1_#t~ret111, __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~15, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~7, __utac_acc__Specification3_spec__1_~tmp___2~5, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~15;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~7;havoc __utac_acc__Specification3_spec__1_~tmp___2~5;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 42213#L303-12 __utac_acc__Specification3_spec__1_#t~ret107 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~15 := __utac_acc__Specification3_spec__1_#t~ret107;havoc __utac_acc__Specification3_spec__1_#t~ret107;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~15;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~4;havoc getCurrentHeading_~retValue_acc~4;getCurrentHeading_~retValue_acc~4 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~4; 48215#L355-9 __utac_acc__Specification3_spec__1_#t~ret108 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret108;havoc __utac_acc__Specification3_spec__1_#t~ret108; 48216#L1840-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 46831#L1902-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~3;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~3; 46684#L320-41 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~3 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~3; 45118#L341-41 __utac_acc__Specification3_spec__1_#t~ret114 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret114;havoc __utac_acc__Specification3_spec__1_#t~ret114; 46007#L1906-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 45018#L1946-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 46008#L2454-75 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 45852#L2481-75 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 47414#L1590-9 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 44474#L972-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 44476#L303-13 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 44821#L976-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 42614#L989-3 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 41817#L1127-3 assume !(0 != timeShift_~tmp___9~2); 41819#L1218-9 assume !(1 == ~doorState~0); 46271#L1218-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 45987#L2454-78 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 45828#L2481-78 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 47411#L1590-10 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 45534#L855-6 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 45535#L303-14 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 43962#L868-6 timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 45619#L1226-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 45620#L912-9 assume !(1 == ~currentHeading~0); 42876#L922-27 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 42877#L922-29 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 52374#L928-23 havoc __utac_acc__Specification3_spec__2_#t~ret119, __utac_acc__Specification3_spec__2_#t~ret120, __utac_acc__Specification3_spec__2_~tmp~16, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~16;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 52372#L1971-3 assume !(-1 == ~expectedDirection~0); 51538#L1983-3 assume !(1 == ~expectedDirection~0); 50736#L1984-3 cleanup_~i~3 := 0; 50735#L2164-2 [2018-11-22 23:02:40,308 INFO L796 eck$LassoCheckResult]: Loop: 50735#L2164-2 assume !false; 50734#L2165 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 50733#L2168 assume cleanup_~i~3 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~0;havoc isBlocked_~retValue_acc~0;isBlocked_~retValue_acc~0 := 0;isBlocked_#res := isBlocked_~retValue_acc~0; 50732#L130 cleanup_#t~ret128 := isBlocked_#res;cleanup_~tmp___0~12 := cleanup_#t~ret128;havoc cleanup_#t~ret128; 50731#L2172 assume 1 != cleanup_~tmp___0~12; 50730#L2172-1 havoc isIdle_#res;havoc isIdle_#t~ret8, isIdle_~retValue_acc~7, isIdle_~tmp~4;havoc isIdle_~retValue_acc~7;havoc isIdle_~tmp~4;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret3, anyStopRequested_#t~ret4, anyStopRequested_#t~ret5, anyStopRequested_#t~ret6, anyStopRequested_#t~ret7, anyStopRequested_~retValue_acc~6, anyStopRequested_~tmp~3, anyStopRequested_~tmp___0~0, anyStopRequested_~tmp___1~0, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~6;havoc anyStopRequested_~tmp~3;havoc anyStopRequested_~tmp___0~0;havoc anyStopRequested_~tmp___1~0;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 50729#L2454-100 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 50724#L2481-100 anyStopRequested_#t~ret3 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret3;havoc anyStopRequested_#t~ret3; 50662#L411 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~6 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~6; 50653#L475 isIdle_#t~ret8 := anyStopRequested_#res;isIdle_~tmp~4 := isIdle_#t~ret8;havoc isIdle_#t~ret8;isIdle_~retValue_acc~7 := (if 0 == isIdle_~tmp~4 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~7; 49850#L488 cleanup_#t~ret129 := isIdle_#res;cleanup_~tmp~23 := cleanup_#t~ret129;havoc cleanup_#t~ret129; 49781#L2184 assume !(0 != cleanup_~tmp~23);havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret107, __utac_acc__Specification3_spec__1_#t~ret108, __utac_acc__Specification3_spec__1_#t~ret109, __utac_acc__Specification3_spec__1_#t~ret110, __utac_acc__Specification3_spec__1_#t~ret111, __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~15, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~7, __utac_acc__Specification3_spec__1_~tmp___2~5, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~15;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~7;havoc __utac_acc__Specification3_spec__1_~tmp___2~5;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 46448#L303-16 __utac_acc__Specification3_spec__1_#t~ret107 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~15 := __utac_acc__Specification3_spec__1_#t~ret107;havoc __utac_acc__Specification3_spec__1_#t~ret107;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~15;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~4;havoc getCurrentHeading_~retValue_acc~4;getCurrentHeading_~retValue_acc~4 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~4; 46449#L355-12 __utac_acc__Specification3_spec__1_#t~ret108 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret108;havoc __utac_acc__Specification3_spec__1_#t~ret108; 42386#L1840-4 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 42387#L1841-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~3;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~3; 42506#L320-48 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~3 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~3; 44955#L341-48 __utac_acc__Specification3_spec__1_#t~ret109 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~3 := __utac_acc__Specification3_spec__1_#t~ret109;havoc __utac_acc__Specification3_spec__1_#t~ret109; 44651#L1845-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3;~expectedDirection~0 := 1; 43736#L1946-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 49823#L2454-105 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 49822#L2481-105 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 49817#L1590-12 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 49815#L972-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 49811#L303-17 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 49794#L976-4 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 49792#L989-4 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 49791#L1127-4 assume !(0 != timeShift_~tmp___9~2); 49790#L1218-12 assume 1 == ~doorState~0;~doorState~0 := 0; 49789#L1218-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 49787#L2454-108 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 49783#L2481-108 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 49716#L1590-13 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 48755#L855-8 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 48713#L303-18 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 48712#L868-8 timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 48710#L1226-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 48708#L912-12 assume 1 == ~currentHeading~0;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~24;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~24;isTopFloor_~retValue_acc~24 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~24; 47711#L3028-21 continueInDirection_#t~ret23 := isTopFloor_#res;continueInDirection_~tmp~7 := continueInDirection_#t~ret23;havoc continueInDirection_#t~ret23; 47608#L916-36 assume !(0 != continueInDirection_~tmp~7); 42867#L922-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 50744#L928-29 havoc __utac_acc__Specification3_spec__2_#t~ret119, __utac_acc__Specification3_spec__2_#t~ret120, __utac_acc__Specification3_spec__2_~tmp~16, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~16;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 50742#L1971-4 assume !(-1 == ~expectedDirection~0); 50739#L1983-4 assume !(1 == ~expectedDirection~0); 50737#L1984-4 cleanup_~i~3 := 1 + cleanup_~i~3; 50735#L2164-2 [2018-11-22 23:02:40,314 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-22 23:02:40,315 INFO L82 PathProgramCache]: Analyzing trace with hash 60984132, now seen corresponding path program 1 times [2018-11-22 23:02:40,315 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-22 23:02:40,315 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-22 23:02:40,316 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-22 23:02:40,316 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-22 23:02:40,316 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-22 23:02:40,334 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-22 23:02:40,382 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-22 23:02:40,383 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-22 23:02:40,383 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-22 23:02:40,383 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-22 23:02:40,383 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-22 23:02:40,383 INFO L82 PathProgramCache]: Analyzing trace with hash 659285501, now seen corresponding path program 1 times [2018-11-22 23:02:40,384 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-22 23:02:40,384 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-22 23:02:40,384 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-22 23:02:40,384 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-22 23:02:40,384 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-22 23:02:40,390 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-22 23:02:40,423 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-22 23:02:40,423 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-22 23:02:40,423 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-22 23:02:40,423 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-22 23:02:40,424 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-22 23:02:40,424 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-22 23:02:40,424 INFO L87 Difference]: Start difference. First operand 11362 states and 21303 transitions. cyclomatic complexity: 9942 Second operand 3 states. [2018-11-22 23:02:40,596 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-22 23:02:40,597 INFO L93 Difference]: Finished difference Result 16348 states and 30635 transitions. [2018-11-22 23:02:40,598 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-22 23:02:40,598 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 16348 states and 30635 transitions. [2018-11-22 23:02:40,646 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 3859 [2018-11-22 23:02:40,689 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 16348 states to 16348 states and 30635 transitions. [2018-11-22 23:02:40,689 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 16348 [2018-11-22 23:02:40,700 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 16348 [2018-11-22 23:02:40,700 INFO L73 IsDeterministic]: Start isDeterministic. Operand 16348 states and 30635 transitions. [2018-11-22 23:02:40,714 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-22 23:02:40,714 INFO L705 BuchiCegarLoop]: Abstraction has 16348 states and 30635 transitions. [2018-11-22 23:02:40,726 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 16348 states and 30635 transitions. [2018-11-22 23:02:40,832 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 16348 to 16142. [2018-11-22 23:02:40,832 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 16142 states. [2018-11-22 23:02:40,850 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 16142 states to 16142 states and 30267 transitions. [2018-11-22 23:02:40,850 INFO L728 BuchiCegarLoop]: Abstraction has 16142 states and 30267 transitions. [2018-11-22 23:02:40,850 INFO L608 BuchiCegarLoop]: Abstraction has 16142 states and 30267 transitions. [2018-11-22 23:02:40,850 INFO L442 BuchiCegarLoop]: ======== Iteration 4============ [2018-11-22 23:02:40,850 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 16142 states and 30267 transitions. [2018-11-22 23:02:40,887 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 3759 [2018-11-22 23:02:40,887 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-22 23:02:40,887 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-22 23:02:40,890 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-22 23:02:40,890 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-22 23:02:40,891 INFO L794 eck$LassoCheckResult]: Stem: 71381#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];call #t~string53.base, #t~string53.offset := #Ultimate.alloc(10);call #t~string55.base, #t~string55.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string55.base, #t~string55.offset, 1);call write~init~int(95, #t~string55.base, 1 + #t~string55.offset, 1);call write~init~int(93, #t~string55.base, 2 + #t~string55.offset, 1);call write~init~int(0, #t~string55.base, 3 + #t~string55.offset, 1);call #t~string57.base, #t~string57.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string57.base, #t~string57.offset, 1);call write~init~int(93, #t~string57.base, 1 + #t~string57.offset, 1);call write~init~int(32, #t~string57.base, 2 + #t~string57.offset, 1);call write~init~int(0, #t~string57.base, 3 + #t~string57.offset, 1);call #t~string59.base, #t~string59.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string59.base, #t~string59.offset, 1);call write~init~int(97, #t~string59.base, 1 + #t~string59.offset, 1);call write~init~int(116, #t~string59.base, 2 + #t~string59.offset, 1);call write~init~int(32, #t~string59.base, 3 + #t~string59.offset, 1);call write~init~int(0, #t~string59.base, 4 + #t~string59.offset, 1);call #t~string61.base, #t~string61.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string61.base, #t~string61.offset, 1);call write~init~int(105, #t~string61.base, 1 + #t~string61.offset, 1);call write~init~int(0, #t~string61.base, 2 + #t~string61.offset, 1);call #t~string63.base, #t~string63.offset := #Ultimate.alloc(10);call #t~string65.base, #t~string65.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string65.base, #t~string65.offset, 1);call write~init~int(112, #t~string65.base, 1 + #t~string65.offset, 1);call write~init~int(0, #t~string65.base, 2 + #t~string65.offset, 1);call #t~string67.base, #t~string67.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string67.base, #t~string67.offset, 1);call write~init~int(111, #t~string67.base, 1 + #t~string67.offset, 1);call write~init~int(119, #t~string67.base, 2 + #t~string67.offset, 1);call write~init~int(110, #t~string67.base, 3 + #t~string67.offset, 1);call write~init~int(0, #t~string67.base, 4 + #t~string67.offset, 1);call #t~string69.base, #t~string69.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string69.base, #t~string69.offset, 1);call write~init~int(73, #t~string69.base, 1 + #t~string69.offset, 1);call write~init~int(76, #t~string69.base, 2 + #t~string69.offset, 1);call write~init~int(95, #t~string69.base, 3 + #t~string69.offset, 1);call write~init~int(112, #t~string69.base, 4 + #t~string69.offset, 1);call write~init~int(58, #t~string69.base, 5 + #t~string69.offset, 1);call write~init~int(0, #t~string69.base, 6 + #t~string69.offset, 1);call #t~string71.base, #t~string71.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string71.base, #t~string71.offset, 1);call write~init~int(37, #t~string71.base, 1 + #t~string71.offset, 1);call write~init~int(105, #t~string71.base, 2 + #t~string71.offset, 1);call write~init~int(0, #t~string71.base, 3 + #t~string71.offset, 1);call #t~string73.base, #t~string73.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string73.base, #t~string73.offset, 1);call write~init~int(37, #t~string73.base, 1 + #t~string73.offset, 1);call write~init~int(105, #t~string73.base, 2 + #t~string73.offset, 1);call write~init~int(0, #t~string73.base, 3 + #t~string73.offset, 1);call #t~string75.base, #t~string75.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string75.base, #t~string75.offset, 1);call write~init~int(37, #t~string75.base, 1 + #t~string75.offset, 1);call write~init~int(105, #t~string75.base, 2 + #t~string75.offset, 1);call write~init~int(0, #t~string75.base, 3 + #t~string75.offset, 1);call #t~string77.base, #t~string77.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string77.base, #t~string77.offset, 1);call write~init~int(37, #t~string77.base, 1 + #t~string77.offset, 1);call write~init~int(105, #t~string77.base, 2 + #t~string77.offset, 1);call write~init~int(0, #t~string77.base, 3 + #t~string77.offset, 1);call #t~string79.base, #t~string79.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string79.base, #t~string79.offset, 1);call write~init~int(37, #t~string79.base, 1 + #t~string79.offset, 1);call write~init~int(105, #t~string79.base, 2 + #t~string79.offset, 1);call write~init~int(0, #t~string79.base, 3 + #t~string79.offset, 1);call #t~string81.base, #t~string81.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string81.base, #t~string81.offset, 1);call write~init~int(70, #t~string81.base, 1 + #t~string81.offset, 1);call write~init~int(95, #t~string81.base, 2 + #t~string81.offset, 1);call write~init~int(112, #t~string81.base, 3 + #t~string81.offset, 1);call write~init~int(58, #t~string81.base, 4 + #t~string81.offset, 1);call write~init~int(0, #t~string81.base, 5 + #t~string81.offset, 1);call #t~string84.base, #t~string84.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string84.base, #t~string84.offset, 1);call write~init~int(37, #t~string84.base, 1 + #t~string84.offset, 1);call write~init~int(105, #t~string84.base, 2 + #t~string84.offset, 1);call write~init~int(0, #t~string84.base, 3 + #t~string84.offset, 1);call #t~string87.base, #t~string87.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string87.base, #t~string87.offset, 1);call write~init~int(37, #t~string87.base, 1 + #t~string87.offset, 1);call write~init~int(105, #t~string87.base, 2 + #t~string87.offset, 1);call write~init~int(0, #t~string87.base, 3 + #t~string87.offset, 1);call #t~string90.base, #t~string90.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string90.base, #t~string90.offset, 1);call write~init~int(37, #t~string90.base, 1 + #t~string90.offset, 1);call write~init~int(105, #t~string90.base, 2 + #t~string90.offset, 1);call write~init~int(0, #t~string90.base, 3 + #t~string90.offset, 1);call #t~string93.base, #t~string93.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string93.base, #t~string93.offset, 1);call write~init~int(37, #t~string93.base, 1 + #t~string93.offset, 1);call write~init~int(105, #t~string93.base, 2 + #t~string93.offset, 1);call write~init~int(0, #t~string93.base, 3 + #t~string93.offset, 1);call #t~string96.base, #t~string96.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string96.base, #t~string96.offset, 1);call write~init~int(37, #t~string96.base, 1 + #t~string96.offset, 1);call write~init~int(105, #t~string96.base, 2 + #t~string96.offset, 1);call write~init~int(0, #t~string96.base, 3 + #t~string96.offset, 1);call #t~string98.base, #t~string98.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string98.base, #t~string98.offset, 1);call write~init~int(0, #t~string98.base, 1 + #t~string98.offset, 1);call #t~string154.base, #t~string154.offset := #Ultimate.alloc(30);call #t~string155.base, #t~string155.offset := #Ultimate.alloc(9);call #t~string156.base, #t~string156.offset := #Ultimate.alloc(21);call #t~string157.base, #t~string157.offset := #Ultimate.alloc(30);call #t~string158.base, #t~string158.offset := #Ultimate.alloc(9);call #t~string159.base, #t~string159.offset := #Ultimate.alloc(21);call #t~string163.base, #t~string163.offset := #Ultimate.alloc(30);call #t~string164.base, #t~string164.offset := #Ultimate.alloc(9);call #t~string165.base, #t~string165.offset := #Ultimate.alloc(25);call #t~string166.base, #t~string166.offset := #Ultimate.alloc(30);call #t~string167.base, #t~string167.offset := #Ultimate.alloc(9);call #t~string168.base, #t~string168.offset := #Ultimate.alloc(25);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~expectedDirection~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 71382#L-1 havoc main_#res;havoc main_#t~ret134, main_~retValue_acc~21, main_~tmp~25;havoc main_~retValue_acc~21;havoc main_~tmp~25; 70898#L3055 havoc valid_product_#res;havoc valid_product_~retValue_acc~26;havoc valid_product_~retValue_acc~26;valid_product_~retValue_acc~26 := 1;valid_product_#res := valid_product_~retValue_acc~26; 69776#L3063 main_#t~ret134 := valid_product_#res;main_~tmp~25 := main_#t~ret134;havoc main_#t~ret134; 69744#L2358 assume 0 != main_~tmp~25; 69745#L2332 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 70598#L2447 havoc bobCall_#t~ret122, bobCall_~tmp~17;havoc bobCall_~tmp~17;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~18;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~18; 72683#L1741 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~18 := 4;getOrigin_#res := getOrigin_~retValue_acc~18; 72632#L1766 bobCall_#t~ret122 := getOrigin_#res;bobCall_~tmp~17 := bobCall_#t~ret122;havoc bobCall_#t~ret122;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~17;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 70070#L2725 assume 0 == initPersonOnFloor_~floor; 70071#L2726 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 71123#L2833-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 71074#L2517 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 69936#L2529-2 havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret107, __utac_acc__Specification3_spec__1_#t~ret108, __utac_acc__Specification3_spec__1_#t~ret109, __utac_acc__Specification3_spec__1_#t~ret110, __utac_acc__Specification3_spec__1_#t~ret111, __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~15, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~7, __utac_acc__Specification3_spec__1_~tmp___2~5, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~15;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~7;havoc __utac_acc__Specification3_spec__1_~tmp___2~5;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 69937#L303 __utac_acc__Specification3_spec__1_#t~ret107 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~15 := __utac_acc__Specification3_spec__1_#t~ret107;havoc __utac_acc__Specification3_spec__1_#t~ret107;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~15;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~4;havoc getCurrentHeading_~retValue_acc~4;getCurrentHeading_~retValue_acc~4 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~4; 71667#L355 __utac_acc__Specification3_spec__1_#t~ret108 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret108;havoc __utac_acc__Specification3_spec__1_#t~ret108; 70104#L1840 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 70105#L1902 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~3;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~3; 74246#L320-5 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~3 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~3; 72628#L341-5 __utac_acc__Specification3_spec__1_#t~ret114 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret114;havoc __utac_acc__Specification3_spec__1_#t~ret114; 73918#L1906 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 72693#L1946 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 73881#L2454 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 73817#L2481 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 75452#L1590 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 72240#L972 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 71673#L303-1 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 71674#L976 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 70335#L989 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 69553#L1127 assume !(0 != timeShift_~tmp___9~2); 69555#L1218 assume !(1 == ~doorState~0); 73935#L1218-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 73879#L2454-3 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 73786#L2481-3 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 75454#L1590-1 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 73068#L855 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 71672#L303-2 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 71659#L868 timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 73305#L1226 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 73306#L912 assume !(1 == ~currentHeading~0); 70849#L922 assume !(0 == ~currentFloorID~0); 70845#L922-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 70840#L928-5 havoc __utac_acc__Specification3_spec__2_#t~ret119, __utac_acc__Specification3_spec__2_#t~ret120, __utac_acc__Specification3_spec__2_~tmp~16, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~16;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 83426#L1971 assume !(-1 == ~expectedDirection~0); 83080#L1983 assume !(1 == ~expectedDirection~0); 77132#L1984 havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret107, __utac_acc__Specification3_spec__1_#t~ret108, __utac_acc__Specification3_spec__1_#t~ret109, __utac_acc__Specification3_spec__1_#t~ret110, __utac_acc__Specification3_spec__1_#t~ret111, __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~15, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~7, __utac_acc__Specification3_spec__1_~tmp___2~5, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~15;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~7;havoc __utac_acc__Specification3_spec__1_~tmp___2~5;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 77131#L303-4 __utac_acc__Specification3_spec__1_#t~ret107 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~15 := __utac_acc__Specification3_spec__1_#t~ret107;havoc __utac_acc__Specification3_spec__1_#t~ret107;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~15;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~4;havoc getCurrentHeading_~retValue_acc~4;getCurrentHeading_~retValue_acc~4 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~4; 75810#L355-3 __utac_acc__Specification3_spec__1_#t~ret108 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret108;havoc __utac_acc__Specification3_spec__1_#t~ret108; 75811#L1840-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 74445#L1902-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~3;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~3; 74235#L320-17 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~3 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~3; 72870#L341-17 __utac_acc__Specification3_spec__1_#t~ret114 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret114;havoc __utac_acc__Specification3_spec__1_#t~ret114; 73894#L1906-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 72696#L1946-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 77457#L2454-25 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 77453#L2481-25 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 77452#L1590-3 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 77434#L972-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 77429#L303-5 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 77421#L976-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 77418#L989-1 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 77417#L1127-1 assume !(0 != timeShift_~tmp___9~2); 77416#L1218-3 assume !(1 == ~doorState~0); 77415#L1218-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 77408#L2454-28 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 77315#L2481-28 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 77262#L1590-4 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 77256#L855-2 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 77194#L303-6 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 77147#L868-2 timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 77143#L1226-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 77141#L912-3 assume !(1 == ~currentHeading~0); 70841#L922-9 assume !(0 == ~currentFloorID~0); 70843#L922-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 77464#L928-11 havoc __utac_acc__Specification3_spec__2_#t~ret119, __utac_acc__Specification3_spec__2_#t~ret120, __utac_acc__Specification3_spec__2_~tmp~16, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~16;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 77462#L1971-1 assume !(-1 == ~expectedDirection~0); 77460#L1983-1 assume !(1 == ~expectedDirection~0); 76168#L1984-1 havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret107, __utac_acc__Specification3_spec__1_#t~ret108, __utac_acc__Specification3_spec__1_#t~ret109, __utac_acc__Specification3_spec__1_#t~ret110, __utac_acc__Specification3_spec__1_#t~ret111, __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~15, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~7, __utac_acc__Specification3_spec__1_~tmp___2~5, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~15;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~7;havoc __utac_acc__Specification3_spec__1_~tmp___2~5;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 76166#L303-8 __utac_acc__Specification3_spec__1_#t~ret107 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~15 := __utac_acc__Specification3_spec__1_#t~ret107;havoc __utac_acc__Specification3_spec__1_#t~ret107;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~15;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~4;havoc getCurrentHeading_~retValue_acc~4;getCurrentHeading_~retValue_acc~4 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~4; 76164#L355-6 __utac_acc__Specification3_spec__1_#t~ret108 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret108;havoc __utac_acc__Specification3_spec__1_#t~ret108; 76163#L1840-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 74447#L1902-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~3;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~3; 74212#L320-29 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~3 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~3; 72839#L341-29 __utac_acc__Specification3_spec__1_#t~ret114 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret114;havoc __utac_acc__Specification3_spec__1_#t~ret114; 73707#L1906-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 72677#L1946-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 76822#L2454-50 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 76817#L2481-50 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 76816#L1590-6 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 76814#L972-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 76815#L303-9 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 76783#L976-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 76781#L989-2 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 76777#L1127-2 assume !(0 != timeShift_~tmp___9~2); 76775#L1218-6 assume 1 == ~doorState~0;~doorState~0 := 0; 76772#L1218-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 76761#L2454-53 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 76758#L2481-53 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 76757#L1590-7 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 76756#L855-4 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 76703#L303-10 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 76702#L868-4 timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 76700#L1226-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 76701#L912-6 assume !(1 == ~currentHeading~0); 70595#L922-18 assume !(0 == ~currentFloorID~0); 70597#L922-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 79533#L928-17 havoc __utac_acc__Specification3_spec__2_#t~ret119, __utac_acc__Specification3_spec__2_#t~ret120, __utac_acc__Specification3_spec__2_~tmp~16, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~16;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 80156#L1971-2 assume !(-1 == ~expectedDirection~0); 80123#L1983-2 assume !(1 == ~expectedDirection~0); 80120#L1984-2 havoc bobCall_#t~ret122, bobCall_~tmp~17;havoc bobCall_~tmp~17;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~18;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~18; 80116#L1741-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~18 := 4;getOrigin_#res := getOrigin_~retValue_acc~18; 80109#L1766-1 bobCall_#t~ret122 := getOrigin_#res;bobCall_~tmp~17 := bobCall_#t~ret122;havoc bobCall_#t~ret122;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~17;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 80107#L2725-1 assume 0 == initPersonOnFloor_~floor; 80076#L2726-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 80068#L2833-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 80065#L2517-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 76944#L2529-5 havoc cleanup_#t~ret128, cleanup_#t~ret129, cleanup_~i~3, cleanup_~tmp~23, cleanup_~tmp___0~12, cleanup_~__cil_tmp4~0;havoc cleanup_~i~3;havoc cleanup_~tmp~23;havoc cleanup_~tmp___0~12;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret107, __utac_acc__Specification3_spec__1_#t~ret108, __utac_acc__Specification3_spec__1_#t~ret109, __utac_acc__Specification3_spec__1_#t~ret110, __utac_acc__Specification3_spec__1_#t~ret111, __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~15, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~7, __utac_acc__Specification3_spec__1_~tmp___2~5, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~15;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~7;havoc __utac_acc__Specification3_spec__1_~tmp___2~5;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 76943#L303-12 __utac_acc__Specification3_spec__1_#t~ret107 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~15 := __utac_acc__Specification3_spec__1_#t~ret107;havoc __utac_acc__Specification3_spec__1_#t~ret107;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~15;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~4;havoc getCurrentHeading_~retValue_acc~4;getCurrentHeading_~retValue_acc~4 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~4; 75786#L355-9 __utac_acc__Specification3_spec__1_#t~ret108 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret108;havoc __utac_acc__Specification3_spec__1_#t~ret108; 75787#L1840-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 74446#L1902-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~3;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~3; 74330#L320-41 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~3 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~3; 72775#L341-41 __utac_acc__Specification3_spec__1_#t~ret114 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret114;havoc __utac_acc__Specification3_spec__1_#t~ret114; 73669#L1906-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 72680#L1946-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 76378#L2454-75 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 76375#L2481-75 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 76374#L1590-9 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 76372#L972-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 76373#L303-13 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 76355#L976-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 76352#L989-3 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 76350#L1127-3 assume !(0 != timeShift_~tmp___9~2); 76349#L1218-9 assume !(1 == ~doorState~0); 76343#L1218-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 76341#L2454-78 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 76336#L2481-78 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 76335#L1590-10 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 76334#L855-6 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 76245#L303-14 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 76244#L868-6 timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 76241#L1226-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 76242#L912-9 assume !(1 == ~currentHeading~0); 70591#L922-27 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 70592#L922-29 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 79447#L928-23 havoc __utac_acc__Specification3_spec__2_#t~ret119, __utac_acc__Specification3_spec__2_#t~ret120, __utac_acc__Specification3_spec__2_~tmp~16, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~16;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 79445#L1971-3 assume !(-1 == ~expectedDirection~0); 75144#L1983-3 assume !(1 == ~expectedDirection~0); 70520#L1984-3 cleanup_~i~3 := 0; 70521#L2164-2 [2018-11-22 23:02:40,891 INFO L796 eck$LassoCheckResult]: Loop: 70521#L2164-2 assume !false; 71067#L2165 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 71039#L2168 assume cleanup_~i~3 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~0;havoc isBlocked_~retValue_acc~0;isBlocked_~retValue_acc~0 := 0;isBlocked_#res := isBlocked_~retValue_acc~0; 71040#L130 cleanup_#t~ret128 := isBlocked_#res;cleanup_~tmp___0~12 := cleanup_#t~ret128;havoc cleanup_#t~ret128; 70998#L2172 assume 1 != cleanup_~tmp___0~12; 70994#L2172-1 havoc isIdle_#res;havoc isIdle_#t~ret8, isIdle_~retValue_acc~7, isIdle_~tmp~4;havoc isIdle_~retValue_acc~7;havoc isIdle_~tmp~4;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret3, anyStopRequested_#t~ret4, anyStopRequested_#t~ret5, anyStopRequested_#t~ret6, anyStopRequested_#t~ret7, anyStopRequested_~retValue_acc~6, anyStopRequested_~tmp~3, anyStopRequested_~tmp___0~0, anyStopRequested_~tmp___1~0, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~6;havoc anyStopRequested_~tmp~3;havoc anyStopRequested_~tmp___0~0;havoc anyStopRequested_~tmp___1~0;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 70995#L2454-100 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 73389#L2481-100 anyStopRequested_#t~ret3 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret3;havoc anyStopRequested_#t~ret3; 70888#L411 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~6 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~6; 69580#L475 isIdle_#t~ret8 := anyStopRequested_#res;isIdle_~tmp~4 := isIdle_#t~ret8;havoc isIdle_#t~ret8;isIdle_~retValue_acc~7 := (if 0 == isIdle_~tmp~4 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~7; 77459#L488 cleanup_#t~ret129 := isIdle_#res;cleanup_~tmp~23 := cleanup_#t~ret129;havoc cleanup_#t~ret129; 69556#L2184 assume !(0 != cleanup_~tmp~23);havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret107, __utac_acc__Specification3_spec__1_#t~ret108, __utac_acc__Specification3_spec__1_#t~ret109, __utac_acc__Specification3_spec__1_#t~ret110, __utac_acc__Specification3_spec__1_#t~ret111, __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~15, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~7, __utac_acc__Specification3_spec__1_~tmp___2~5, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~15;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~7;havoc __utac_acc__Specification3_spec__1_~tmp___2~5;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 69557#L303-16 __utac_acc__Specification3_spec__1_#t~ret107 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~15 := __utac_acc__Specification3_spec__1_#t~ret107;havoc __utac_acc__Specification3_spec__1_#t~ret107;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~15;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~4;havoc getCurrentHeading_~retValue_acc~4;getCurrentHeading_~retValue_acc~4 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~4; 74103#L355-12 __utac_acc__Specification3_spec__1_#t~ret108 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret108;havoc __utac_acc__Specification3_spec__1_#t~ret108; 70100#L1840-4 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 70101#L1841-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0); 70219#L1851-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 1); 72216#L1862-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 2); 71234#L1873-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 3); 71236#L1884-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 4); 71786#L1946-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 73857#L2454-105 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 73858#L2481-105 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 75000#L1590-12 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 72163#L972-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 72165#L303-17 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 72487#L976-4 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 70314#L989-4 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 69538#L1127-4 assume !(0 != timeShift_~tmp___9~2); 69539#L1218-12 assume 1 == ~doorState~0;~doorState~0 := 0; 73929#L1218-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 73864#L2454-108 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 73865#L2481-108 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 75002#L1590-13 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 73194#L855-8 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 73195#L303-18 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 71653#L868-8 timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 73282#L1226-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 73283#L912-12 assume 1 == ~currentHeading~0;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~24;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~24;isTopFloor_~retValue_acc~24 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~24; 75281#L3028-21 continueInDirection_#t~ret23 := isTopFloor_#res;continueInDirection_~tmp~7 := continueInDirection_#t~ret23;havoc continueInDirection_#t~ret23; 75195#L916-36 assume !(0 != continueInDirection_~tmp~7); 70581#L922-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 83662#L928-29 havoc __utac_acc__Specification3_spec__2_#t~ret119, __utac_acc__Specification3_spec__2_#t~ret120, __utac_acc__Specification3_spec__2_~tmp~16, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~16;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 79887#L1971-4 assume !(-1 == ~expectedDirection~0); 75140#L1983-4 assume !(1 == ~expectedDirection~0); 70522#L1984-4 cleanup_~i~3 := 1 + cleanup_~i~3; 70521#L2164-2 [2018-11-22 23:02:40,897 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-22 23:02:40,897 INFO L82 PathProgramCache]: Analyzing trace with hash 60984132, now seen corresponding path program 2 times [2018-11-22 23:02:40,897 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-22 23:02:40,897 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-22 23:02:40,898 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-22 23:02:40,898 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-22 23:02:40,898 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-22 23:02:40,915 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-22 23:02:40,973 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-22 23:02:40,973 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-22 23:02:40,973 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-22 23:02:40,973 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-22 23:02:40,973 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-22 23:02:40,973 INFO L82 PathProgramCache]: Analyzing trace with hash 1601443480, now seen corresponding path program 1 times [2018-11-22 23:02:40,974 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-22 23:02:40,974 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-22 23:02:40,974 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-22 23:02:40,974 INFO L101 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2018-11-22 23:02:40,974 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-22 23:02:40,980 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-22 23:02:41,107 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-22 23:02:41,108 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-22 23:02:41,108 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [15] imperfect sequences [] total 15 [2018-11-22 23:02:41,108 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-22 23:02:41,108 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 15 interpolants. [2018-11-22 23:02:41,108 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=29, Invalid=181, Unknown=0, NotChecked=0, Total=210 [2018-11-22 23:02:41,108 INFO L87 Difference]: Start difference. First operand 16142 states and 30267 transitions. cyclomatic complexity: 14126 Second operand 15 states. [2018-11-22 23:02:49,811 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-22 23:02:49,811 INFO L93 Difference]: Finished difference Result 34428 states and 63356 transitions. [2018-11-22 23:02:49,811 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 91 states. [2018-11-22 23:02:49,812 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 34428 states and 63356 transitions. [2018-11-22 23:02:49,932 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 8831 [2018-11-22 23:02:50,040 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 34428 states to 34428 states and 63356 transitions. [2018-11-22 23:02:50,041 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 34428 [2018-11-22 23:02:50,069 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 34428 [2018-11-22 23:02:50,069 INFO L73 IsDeterministic]: Start isDeterministic. Operand 34428 states and 63356 transitions. [2018-11-22 23:02:50,103 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-22 23:02:50,103 INFO L705 BuchiCegarLoop]: Abstraction has 34428 states and 63356 transitions. [2018-11-22 23:02:50,125 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 34428 states and 63356 transitions. [2018-11-22 23:02:50,423 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 34428 to 25636. [2018-11-22 23:02:50,423 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 25636 states. [2018-11-22 23:02:50,458 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 25636 states to 25636 states and 47490 transitions. [2018-11-22 23:02:50,458 INFO L728 BuchiCegarLoop]: Abstraction has 25636 states and 47490 transitions. [2018-11-22 23:02:50,458 INFO L608 BuchiCegarLoop]: Abstraction has 25636 states and 47490 transitions. [2018-11-22 23:02:50,458 INFO L442 BuchiCegarLoop]: ======== Iteration 5============ [2018-11-22 23:02:50,458 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 25636 states and 47490 transitions. [2018-11-22 23:02:50,514 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 6187 [2018-11-22 23:02:50,514 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-22 23:02:50,514 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-22 23:02:50,519 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-22 23:02:50,519 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-22 23:02:50,519 INFO L794 eck$LassoCheckResult]: Stem: 122255#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];call #t~string53.base, #t~string53.offset := #Ultimate.alloc(10);call #t~string55.base, #t~string55.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string55.base, #t~string55.offset, 1);call write~init~int(95, #t~string55.base, 1 + #t~string55.offset, 1);call write~init~int(93, #t~string55.base, 2 + #t~string55.offset, 1);call write~init~int(0, #t~string55.base, 3 + #t~string55.offset, 1);call #t~string57.base, #t~string57.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string57.base, #t~string57.offset, 1);call write~init~int(93, #t~string57.base, 1 + #t~string57.offset, 1);call write~init~int(32, #t~string57.base, 2 + #t~string57.offset, 1);call write~init~int(0, #t~string57.base, 3 + #t~string57.offset, 1);call #t~string59.base, #t~string59.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string59.base, #t~string59.offset, 1);call write~init~int(97, #t~string59.base, 1 + #t~string59.offset, 1);call write~init~int(116, #t~string59.base, 2 + #t~string59.offset, 1);call write~init~int(32, #t~string59.base, 3 + #t~string59.offset, 1);call write~init~int(0, #t~string59.base, 4 + #t~string59.offset, 1);call #t~string61.base, #t~string61.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string61.base, #t~string61.offset, 1);call write~init~int(105, #t~string61.base, 1 + #t~string61.offset, 1);call write~init~int(0, #t~string61.base, 2 + #t~string61.offset, 1);call #t~string63.base, #t~string63.offset := #Ultimate.alloc(10);call #t~string65.base, #t~string65.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string65.base, #t~string65.offset, 1);call write~init~int(112, #t~string65.base, 1 + #t~string65.offset, 1);call write~init~int(0, #t~string65.base, 2 + #t~string65.offset, 1);call #t~string67.base, #t~string67.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string67.base, #t~string67.offset, 1);call write~init~int(111, #t~string67.base, 1 + #t~string67.offset, 1);call write~init~int(119, #t~string67.base, 2 + #t~string67.offset, 1);call write~init~int(110, #t~string67.base, 3 + #t~string67.offset, 1);call write~init~int(0, #t~string67.base, 4 + #t~string67.offset, 1);call #t~string69.base, #t~string69.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string69.base, #t~string69.offset, 1);call write~init~int(73, #t~string69.base, 1 + #t~string69.offset, 1);call write~init~int(76, #t~string69.base, 2 + #t~string69.offset, 1);call write~init~int(95, #t~string69.base, 3 + #t~string69.offset, 1);call write~init~int(112, #t~string69.base, 4 + #t~string69.offset, 1);call write~init~int(58, #t~string69.base, 5 + #t~string69.offset, 1);call write~init~int(0, #t~string69.base, 6 + #t~string69.offset, 1);call #t~string71.base, #t~string71.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string71.base, #t~string71.offset, 1);call write~init~int(37, #t~string71.base, 1 + #t~string71.offset, 1);call write~init~int(105, #t~string71.base, 2 + #t~string71.offset, 1);call write~init~int(0, #t~string71.base, 3 + #t~string71.offset, 1);call #t~string73.base, #t~string73.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string73.base, #t~string73.offset, 1);call write~init~int(37, #t~string73.base, 1 + #t~string73.offset, 1);call write~init~int(105, #t~string73.base, 2 + #t~string73.offset, 1);call write~init~int(0, #t~string73.base, 3 + #t~string73.offset, 1);call #t~string75.base, #t~string75.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string75.base, #t~string75.offset, 1);call write~init~int(37, #t~string75.base, 1 + #t~string75.offset, 1);call write~init~int(105, #t~string75.base, 2 + #t~string75.offset, 1);call write~init~int(0, #t~string75.base, 3 + #t~string75.offset, 1);call #t~string77.base, #t~string77.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string77.base, #t~string77.offset, 1);call write~init~int(37, #t~string77.base, 1 + #t~string77.offset, 1);call write~init~int(105, #t~string77.base, 2 + #t~string77.offset, 1);call write~init~int(0, #t~string77.base, 3 + #t~string77.offset, 1);call #t~string79.base, #t~string79.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string79.base, #t~string79.offset, 1);call write~init~int(37, #t~string79.base, 1 + #t~string79.offset, 1);call write~init~int(105, #t~string79.base, 2 + #t~string79.offset, 1);call write~init~int(0, #t~string79.base, 3 + #t~string79.offset, 1);call #t~string81.base, #t~string81.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string81.base, #t~string81.offset, 1);call write~init~int(70, #t~string81.base, 1 + #t~string81.offset, 1);call write~init~int(95, #t~string81.base, 2 + #t~string81.offset, 1);call write~init~int(112, #t~string81.base, 3 + #t~string81.offset, 1);call write~init~int(58, #t~string81.base, 4 + #t~string81.offset, 1);call write~init~int(0, #t~string81.base, 5 + #t~string81.offset, 1);call #t~string84.base, #t~string84.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string84.base, #t~string84.offset, 1);call write~init~int(37, #t~string84.base, 1 + #t~string84.offset, 1);call write~init~int(105, #t~string84.base, 2 + #t~string84.offset, 1);call write~init~int(0, #t~string84.base, 3 + #t~string84.offset, 1);call #t~string87.base, #t~string87.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string87.base, #t~string87.offset, 1);call write~init~int(37, #t~string87.base, 1 + #t~string87.offset, 1);call write~init~int(105, #t~string87.base, 2 + #t~string87.offset, 1);call write~init~int(0, #t~string87.base, 3 + #t~string87.offset, 1);call #t~string90.base, #t~string90.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string90.base, #t~string90.offset, 1);call write~init~int(37, #t~string90.base, 1 + #t~string90.offset, 1);call write~init~int(105, #t~string90.base, 2 + #t~string90.offset, 1);call write~init~int(0, #t~string90.base, 3 + #t~string90.offset, 1);call #t~string93.base, #t~string93.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string93.base, #t~string93.offset, 1);call write~init~int(37, #t~string93.base, 1 + #t~string93.offset, 1);call write~init~int(105, #t~string93.base, 2 + #t~string93.offset, 1);call write~init~int(0, #t~string93.base, 3 + #t~string93.offset, 1);call #t~string96.base, #t~string96.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string96.base, #t~string96.offset, 1);call write~init~int(37, #t~string96.base, 1 + #t~string96.offset, 1);call write~init~int(105, #t~string96.base, 2 + #t~string96.offset, 1);call write~init~int(0, #t~string96.base, 3 + #t~string96.offset, 1);call #t~string98.base, #t~string98.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string98.base, #t~string98.offset, 1);call write~init~int(0, #t~string98.base, 1 + #t~string98.offset, 1);call #t~string154.base, #t~string154.offset := #Ultimate.alloc(30);call #t~string155.base, #t~string155.offset := #Ultimate.alloc(9);call #t~string156.base, #t~string156.offset := #Ultimate.alloc(21);call #t~string157.base, #t~string157.offset := #Ultimate.alloc(30);call #t~string158.base, #t~string158.offset := #Ultimate.alloc(9);call #t~string159.base, #t~string159.offset := #Ultimate.alloc(21);call #t~string163.base, #t~string163.offset := #Ultimate.alloc(30);call #t~string164.base, #t~string164.offset := #Ultimate.alloc(9);call #t~string165.base, #t~string165.offset := #Ultimate.alloc(25);call #t~string166.base, #t~string166.offset := #Ultimate.alloc(30);call #t~string167.base, #t~string167.offset := #Ultimate.alloc(9);call #t~string168.base, #t~string168.offset := #Ultimate.alloc(25);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~expectedDirection~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 122256#L-1 havoc main_#res;havoc main_#t~ret134, main_~retValue_acc~21, main_~tmp~25;havoc main_~retValue_acc~21;havoc main_~tmp~25; 121756#L3055 havoc valid_product_#res;havoc valid_product_~retValue_acc~26;havoc valid_product_~retValue_acc~26;valid_product_~retValue_acc~26 := 1;valid_product_#res := valid_product_~retValue_acc~26; 120559#L3063 main_#t~ret134 := valid_product_#res;main_~tmp~25 := main_#t~ret134;havoc main_#t~ret134; 120527#L2358 assume 0 != main_~tmp~25; 120528#L2332 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 121451#L2447 havoc bobCall_#t~ret122, bobCall_~tmp~17;havoc bobCall_~tmp~17;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~18;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~18; 123636#L1741 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~18 := 4;getOrigin_#res := getOrigin_~retValue_acc~18; 123583#L1766 bobCall_#t~ret122 := getOrigin_#res;bobCall_~tmp~17 := bobCall_#t~ret122;havoc bobCall_#t~ret122;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~17;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 120891#L2725 assume 0 == initPersonOnFloor_~floor; 120892#L2726 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 121995#L2833-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 121938#L2517 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 120754#L2529-2 havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret107, __utac_acc__Specification3_spec__1_#t~ret108, __utac_acc__Specification3_spec__1_#t~ret109, __utac_acc__Specification3_spec__1_#t~ret110, __utac_acc__Specification3_spec__1_#t~ret111, __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~15, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~7, __utac_acc__Specification3_spec__1_~tmp___2~5, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~15;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~7;havoc __utac_acc__Specification3_spec__1_~tmp___2~5;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 120755#L303 __utac_acc__Specification3_spec__1_#t~ret107 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~15 := __utac_acc__Specification3_spec__1_#t~ret107;havoc __utac_acc__Specification3_spec__1_#t~ret107;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~15;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~4;havoc getCurrentHeading_~retValue_acc~4;getCurrentHeading_~retValue_acc~4 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~4; 122553#L355 __utac_acc__Specification3_spec__1_#t~ret108 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret108;havoc __utac_acc__Specification3_spec__1_#t~ret108; 120925#L1840 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 120926#L1902 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~3;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~3; 125282#L320-5 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~3 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~3; 123579#L341-5 __utac_acc__Specification3_spec__1_#t~ret114 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret114;havoc __utac_acc__Specification3_spec__1_#t~ret114; 124907#L1906 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 123646#L1946 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 124852#L2454 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 124786#L2481 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 126672#L1590 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 123152#L972 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 122560#L303-1 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 122561#L976 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 121165#L989 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 120336#L1127 assume !(0 != timeShift_~tmp___9~2); 120338#L1218 assume !(1 == ~doorState~0); 124949#L1218-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 124850#L2454-3 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 124750#L2481-3 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 126674#L1590-1 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 124027#L855 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 122559#L303-2 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 122544#L868 timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 124259#L1226 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 124260#L912 assume !(1 == ~currentHeading~0); 121707#L922 assume !(0 == ~currentFloorID~0); 121703#L922-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 121307#L928-5 havoc __utac_acc__Specification3_spec__2_#t~ret119, __utac_acc__Specification3_spec__2_#t~ret120, __utac_acc__Specification3_spec__2_~tmp~16, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~16;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 121308#L1971 assume !(-1 == ~expectedDirection~0); 121340#L1983 assume !(1 == ~expectedDirection~0); 121341#L1984 havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret107, __utac_acc__Specification3_spec__1_#t~ret108, __utac_acc__Specification3_spec__1_#t~ret109, __utac_acc__Specification3_spec__1_#t~ret110, __utac_acc__Specification3_spec__1_#t~ret111, __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~15, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~7, __utac_acc__Specification3_spec__1_~tmp___2~5, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~15;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~7;havoc __utac_acc__Specification3_spec__1_~tmp___2~5;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 121375#L303-4 __utac_acc__Specification3_spec__1_#t~ret107 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~15 := __utac_acc__Specification3_spec__1_#t~ret107;havoc __utac_acc__Specification3_spec__1_#t~ret107;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~15;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~4;havoc getCurrentHeading_~retValue_acc~4;getCurrentHeading_~retValue_acc~4 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~4; 127057#L355-3 __utac_acc__Specification3_spec__1_#t~ret108 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret108;havoc __utac_acc__Specification3_spec__1_#t~ret108; 127058#L1840-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 125500#L1902-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~3;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~3; 125271#L320-17 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~3 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~3; 123828#L341-17 __utac_acc__Specification3_spec__1_#t~ret114 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret114;havoc __utac_acc__Specification3_spec__1_#t~ret114; 124870#L1906-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 123650#L1946-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 128700#L2454-25 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 128696#L2481-25 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 128691#L1590-3 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 128688#L972-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 128684#L303-5 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 128682#L976-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 128679#L989-1 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 128676#L1127-1 assume !(0 != timeShift_~tmp___9~2); 128613#L1218-3 assume !(1 == ~doorState~0); 128612#L1218-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 128609#L2454-28 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 128606#L2481-28 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 128605#L1590-4 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 128603#L855-2 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 128529#L303-6 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 128482#L868-2 timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 128478#L1226-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 128476#L912-3 assume !(1 == ~currentHeading~0); 121699#L922-9 assume !(0 == ~currentFloorID~0); 121701#L922-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 121692#L928-11 havoc __utac_acc__Specification3_spec__2_#t~ret119, __utac_acc__Specification3_spec__2_#t~ret120, __utac_acc__Specification3_spec__2_~tmp~16, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~16;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 133535#L1971-1 assume !(-1 == ~expectedDirection~0); 133533#L1983-1 assume !(1 == ~expectedDirection~0); 127502#L1984-1 havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret107, __utac_acc__Specification3_spec__1_#t~ret108, __utac_acc__Specification3_spec__1_#t~ret109, __utac_acc__Specification3_spec__1_#t~ret110, __utac_acc__Specification3_spec__1_#t~ret111, __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~15, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~7, __utac_acc__Specification3_spec__1_~tmp___2~5, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~15;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~7;havoc __utac_acc__Specification3_spec__1_~tmp___2~5;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 127500#L303-8 __utac_acc__Specification3_spec__1_#t~ret107 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~15 := __utac_acc__Specification3_spec__1_#t~ret107;havoc __utac_acc__Specification3_spec__1_#t~ret107;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~15;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~4;havoc getCurrentHeading_~retValue_acc~4;getCurrentHeading_~retValue_acc~4 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~4; 127498#L355-6 __utac_acc__Specification3_spec__1_#t~ret108 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret108;havoc __utac_acc__Specification3_spec__1_#t~ret108; 127497#L1840-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 125502#L1902-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~3;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~3; 125244#L320-29 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~3 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~3; 123797#L341-29 __utac_acc__Specification3_spec__1_#t~ret114 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret114;havoc __utac_acc__Specification3_spec__1_#t~ret114; 124665#L1906-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 123630#L1946-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 127844#L2454-50 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 127839#L2481-50 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 127838#L1590-6 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 127836#L972-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 127837#L303-9 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 127805#L976-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 127804#L989-2 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 127797#L1127-2 assume !(0 != timeShift_~tmp___9~2); 127795#L1218-6 assume 1 == ~doorState~0;~doorState~0 := 0; 127794#L1218-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 127789#L2454-53 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 127786#L2481-53 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 127784#L1590-7 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 127578#L855-4 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 127527#L303-10 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 127523#L868-4 timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 127519#L1226-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 127515#L912-6 assume !(1 == ~currentHeading~0); 121448#L922-18 assume !(0 == ~currentFloorID~0); 121450#L922-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 121439#L928-17 havoc __utac_acc__Specification3_spec__2_#t~ret119, __utac_acc__Specification3_spec__2_#t~ret120, __utac_acc__Specification3_spec__2_~tmp~16, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~16;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 134656#L1971-2 assume !(-1 == ~expectedDirection~0); 134653#L1983-2 assume !(1 == ~expectedDirection~0); 134651#L1984-2 havoc bobCall_#t~ret122, bobCall_~tmp~17;havoc bobCall_~tmp~17;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~18;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~18; 134650#L1741-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~18 := 4;getOrigin_#res := getOrigin_~retValue_acc~18; 134644#L1766-1 bobCall_#t~ret122 := getOrigin_#res;bobCall_~tmp~17 := bobCall_#t~ret122;havoc bobCall_#t~ret122;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~17;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 134643#L2725-1 assume 0 == initPersonOnFloor_~floor; 134616#L2726-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 134608#L2833-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 134524#L2517-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 128473#L2529-5 havoc cleanup_#t~ret128, cleanup_#t~ret129, cleanup_~i~3, cleanup_~tmp~23, cleanup_~tmp___0~12, cleanup_~__cil_tmp4~0;havoc cleanup_~i~3;havoc cleanup_~tmp~23;havoc cleanup_~tmp___0~12;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret107, __utac_acc__Specification3_spec__1_#t~ret108, __utac_acc__Specification3_spec__1_#t~ret109, __utac_acc__Specification3_spec__1_#t~ret110, __utac_acc__Specification3_spec__1_#t~ret111, __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~15, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~7, __utac_acc__Specification3_spec__1_~tmp___2~5, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~15;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~7;havoc __utac_acc__Specification3_spec__1_~tmp___2~5;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 128472#L303-12 __utac_acc__Specification3_spec__1_#t~ret107 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~15 := __utac_acc__Specification3_spec__1_#t~ret107;havoc __utac_acc__Specification3_spec__1_#t~ret107;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~15;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~4;havoc getCurrentHeading_~retValue_acc~4;getCurrentHeading_~retValue_acc~4 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~4; 128471#L355-9 __utac_acc__Specification3_spec__1_#t~ret108 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret108;havoc __utac_acc__Specification3_spec__1_#t~ret108; 127496#L1840-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 125501#L1902-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~3;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~3; 125376#L320-41 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~3 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~3; 123733#L341-41 __utac_acc__Specification3_spec__1_#t~ret114 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret114;havoc __utac_acc__Specification3_spec__1_#t~ret114; 124624#L1906-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 123633#L1946-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 128191#L2454-75 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 128184#L2481-75 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 128183#L1590-9 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 128171#L972-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 128164#L303-13 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 128153#L976-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 128151#L989-3 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 128149#L1127-3 assume !(0 != timeShift_~tmp___9~2); 128148#L1218-9 assume !(1 == ~doorState~0); 128147#L1218-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 128146#L2454-78 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 128141#L2481-78 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 127675#L1590-10 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 127532#L855-6 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 127525#L303-14 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 127522#L868-6 timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 127517#L1226-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 127514#L912-9 assume !(1 == ~currentHeading~0); 121444#L922-27 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 121445#L922-29 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 135705#L928-23 havoc __utac_acc__Specification3_spec__2_#t~ret119, __utac_acc__Specification3_spec__2_#t~ret120, __utac_acc__Specification3_spec__2_~tmp~16, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~16;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 135699#L1971-3 assume !(-1 == ~expectedDirection~0); 135693#L1983-3 assume !(1 == ~expectedDirection~0); 135690#L1984-3 cleanup_~i~3 := 0; 135689#L2164-2 [2018-11-22 23:02:50,519 INFO L796 eck$LassoCheckResult]: Loop: 135689#L2164-2 assume !false; 135686#L2165 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 135685#L2168 assume cleanup_~i~3 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~0;havoc isBlocked_~retValue_acc~0;isBlocked_~retValue_acc~0 := 0;isBlocked_#res := isBlocked_~retValue_acc~0; 132625#L130 cleanup_#t~ret128 := isBlocked_#res;cleanup_~tmp___0~12 := cleanup_#t~ret128;havoc cleanup_#t~ret128; 132624#L2172 assume 1 != cleanup_~tmp___0~12; 132623#L2172-1 havoc isIdle_#res;havoc isIdle_#t~ret8, isIdle_~retValue_acc~7, isIdle_~tmp~4;havoc isIdle_~retValue_acc~7;havoc isIdle_~tmp~4;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret3, anyStopRequested_#t~ret4, anyStopRequested_#t~ret5, anyStopRequested_#t~ret6, anyStopRequested_#t~ret7, anyStopRequested_~retValue_acc~6, anyStopRequested_~tmp~3, anyStopRequested_~tmp___0~0, anyStopRequested_~tmp___1~0, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~6;havoc anyStopRequested_~tmp~3;havoc anyStopRequested_~tmp___0~0;havoc anyStopRequested_~tmp___1~0;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 131706#L2454-100 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 131690#L2481-100 anyStopRequested_#t~ret3 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret3;havoc anyStopRequested_#t~ret3; 131681#L411 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~6 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~6; 130609#L475 isIdle_#t~ret8 := anyStopRequested_#res;isIdle_~tmp~4 := isIdle_#t~ret8;havoc isIdle_#t~ret8;isIdle_~retValue_acc~7 := (if 0 == isIdle_~tmp~4 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~7; 129535#L488 cleanup_#t~ret129 := isIdle_#res;cleanup_~tmp~23 := cleanup_#t~ret129;havoc cleanup_#t~ret129; 128805#L2184 assume !(0 != cleanup_~tmp~23);havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret107, __utac_acc__Specification3_spec__1_#t~ret108, __utac_acc__Specification3_spec__1_#t~ret109, __utac_acc__Specification3_spec__1_#t~ret110, __utac_acc__Specification3_spec__1_#t~ret111, __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~15, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~7, __utac_acc__Specification3_spec__1_~tmp___2~5, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~15;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~7;havoc __utac_acc__Specification3_spec__1_~tmp___2~5;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 128804#L303-16 __utac_acc__Specification3_spec__1_#t~ret107 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~15 := __utac_acc__Specification3_spec__1_#t~ret107;havoc __utac_acc__Specification3_spec__1_#t~ret107;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~15;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~4;havoc getCurrentHeading_~retValue_acc~4;getCurrentHeading_~retValue_acc~4 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~4; 128803#L355-12 __utac_acc__Specification3_spec__1_#t~ret108 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret108;havoc __utac_acc__Specification3_spec__1_#t~ret108; 128802#L1840-4 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 128801#L1841-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~3;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~3; 125367#L320-48 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~3 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~3; 123570#L341-48 __utac_acc__Specification3_spec__1_#t~ret109 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~3 := __utac_acc__Specification3_spec__1_#t~ret109;havoc __utac_acc__Specification3_spec__1_#t~ret109; 123254#L1845-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3;~expectedDirection~0 := 1; 122294#L1946-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 128999#L2454-105 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 128998#L2481-105 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 128997#L1590-12 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 128995#L972-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 128994#L303-17 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 128984#L976-4 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 128980#L989-4 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 128975#L1127-4 assume !(0 != timeShift_~tmp___9~2); 128976#L1218-12 assume 1 == ~doorState~0;~doorState~0 := 0; 137772#L1218-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 137770#L2454-108 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 137766#L2481-108 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 137765#L1590-13 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 137764#L855-8 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 129206#L303-18 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 129202#L868-8 timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 129200#L1226-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 129201#L912-12 assume 1 == ~currentHeading~0;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~24;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~24;isTopFloor_~retValue_acc~24 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~24; 137854#L3028-21 continueInDirection_#t~ret23 := isTopFloor_#res;continueInDirection_~tmp~7 := continueInDirection_#t~ret23;havoc continueInDirection_#t~ret23; 137850#L916-36 assume !(0 != continueInDirection_~tmp~7); 137845#L922-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 137839#L928-29 havoc __utac_acc__Specification3_spec__2_#t~ret119, __utac_acc__Specification3_spec__2_#t~ret120, __utac_acc__Specification3_spec__2_~tmp~16, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~16;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 136763#L1971-4 assume !(-1 == ~expectedDirection~0); 135706#L1983-4 assume 1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~4;havoc getCurrentHeading_~retValue_acc~4;getCurrentHeading_~retValue_acc~4 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~4; 135697#L355-14 __utac_acc__Specification3_spec__2_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp~16 := __utac_acc__Specification3_spec__2_#t~ret120;havoc __utac_acc__Specification3_spec__2_#t~ret120; 135695#L1988-8 assume !(0 == __utac_acc__Specification3_spec__2_~tmp~16); 135691#L1984-4 cleanup_~i~3 := 1 + cleanup_~i~3; 135689#L2164-2 [2018-11-22 23:02:50,527 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-22 23:02:50,528 INFO L82 PathProgramCache]: Analyzing trace with hash 60984132, now seen corresponding path program 3 times [2018-11-22 23:02:50,528 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-22 23:02:50,528 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-22 23:02:50,529 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-22 23:02:50,529 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-22 23:02:50,529 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-22 23:02:50,545 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-22 23:02:50,621 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-22 23:02:50,621 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-22 23:02:50,621 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-22 23:02:50,623 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-22 23:02:50,623 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-22 23:02:50,623 INFO L82 PathProgramCache]: Analyzing trace with hash -2081193854, now seen corresponding path program 1 times [2018-11-22 23:02:50,623 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-22 23:02:50,624 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-22 23:02:50,624 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-22 23:02:50,624 INFO L101 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2018-11-22 23:02:50,624 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-22 23:02:50,635 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2018-11-22 23:02:50,643 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2018-11-22 23:02:51,105 WARN L180 SmtUtils]: Spent 428.00 ms on a formula simplification. DAG size of input: 210 DAG size of output: 187 [2018-11-22 23:02:51,665 WARN L180 SmtUtils]: Spent 525.00 ms on a formula simplification. DAG size of input: 173 DAG size of output: 144 [2018-11-22 23:02:51,673 INFO L216 LassoAnalysis]: Preferences: [2018-11-22 23:02:51,674 INFO L124 ssoRankerPreferences]: Compute integeral hull: false [2018-11-22 23:02:51,674 INFO L125 ssoRankerPreferences]: Enable LassoPartitioneer: true [2018-11-22 23:02:51,674 INFO L126 ssoRankerPreferences]: Term annotations enabled: false [2018-11-22 23:02:51,674 INFO L127 ssoRankerPreferences]: Use exernal solver: true [2018-11-22 23:02:51,674 INFO L128 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-22 23:02:51,674 INFO L129 ssoRankerPreferences]: Dump SMT script to file: false [2018-11-22 23:02:51,674 INFO L130 ssoRankerPreferences]: Path of dumped script: [2018-11-22 23:02:51,675 INFO L131 ssoRankerPreferences]: Filename of dumped script: elevator_spec3_product27_false-unreach-call_true-termination.cil.c_Iteration5_Loop [2018-11-22 23:02:51,675 INFO L132 ssoRankerPreferences]: MapElimAlgo: Frank [2018-11-22 23:02:51,675 INFO L282 LassoAnalysis]: Starting lasso preprocessing... [2018-11-22 23:02:51,694 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:51,711 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:51,713 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:51,744 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:51,750 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:51,752 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:51,754 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:51,755 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:51,758 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:51,762 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:51,764 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:51,765 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:51,767 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:51,768 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:51,770 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:51,771 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:51,773 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:51,874 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:51,879 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:51,886 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:51,891 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:51,903 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:51,906 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:51,911 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:51,914 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:51,916 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:51,926 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:51,930 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:51,932 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:51,934 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:51,939 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:51,940 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:51,944 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:51,945 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:51,947 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:51,951 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:51,953 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:51,957 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:51,958 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:51,959 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:51,961 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:51,964 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:51,967 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:51,969 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:51,971 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:51,972 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:51,974 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:51,978 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:51,980 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:51,986 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:51,987 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:51,989 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:51,991 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:51,993 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:51,995 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:51,996 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:51,997 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:51,999 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:52,001 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:52,003 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:52,023 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:52,024 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:52,026 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:52,031 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:52,034 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:52,035 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:52,038 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:52,039 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:52,042 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:52,044 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:52,045 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:52,046 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:52,047 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:52,054 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:52,055 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:52,056 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:52,057 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:52,058 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:52,059 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:52,060 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:52,060 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:52,061 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:52,062 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:52,063 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:52,064 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:52,065 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:52,459 INFO L300 LassoAnalysis]: Preprocessing complete. [2018-11-22 23:02:52,460 INFO L412 LassoAnalysis]: Checking for nontermination... No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_02c6a6e3-37fc-44c0-8191-1c7653105f5f/bin-2019/uautomizer/z3 Starting monitored process 2 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 2 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-22 23:02:52,470 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-22 23:02:52,471 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-22 23:02:52,476 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-22 23:02:52,476 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_~__cil_tmp7~0=1} Honda state: {ULTIMATE.start_stopRequestedInDirection_~__cil_tmp7~0=1} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_02c6a6e3-37fc-44c0-8191-1c7653105f5f/bin-2019/uautomizer/z3 Starting monitored process 3 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 3 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-22 23:02:52,500 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-22 23:02:52,500 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-22 23:02:52,503 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-22 23:02:52,503 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_#t~ret20=0} Honda state: {ULTIMATE.start_stopRequestedInDirection_#t~ret20=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_02c6a6e3-37fc-44c0-8191-1c7653105f5f/bin-2019/uautomizer/z3 Starting monitored process 4 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 4 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-22 23:02:52,528 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-22 23:02:52,528 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-22 23:02:52,534 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-22 23:02:52,534 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_buttonForFloorIsPressed_~retValue_acc~3=-8, ULTIMATE.start_buttonForFloorIsPressed_#res=-8, ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___4~3=-8, ~floorButtons_0~0=-8} Honda state: {ULTIMATE.start_buttonForFloorIsPressed_~retValue_acc~3=-8, ULTIMATE.start_buttonForFloorIsPressed_#res=-8, ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___4~3=-8, ~floorButtons_0~0=-8} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_02c6a6e3-37fc-44c0-8191-1c7653105f5f/bin-2019/uautomizer/z3 Starting monitored process 5 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 5 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-22 23:02:52,561 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-22 23:02:52,561 INFO L163 nArgumentSynthesizer]: Using integer mode. No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_02c6a6e3-37fc-44c0-8191-1c7653105f5f/bin-2019/uautomizer/z3 Starting monitored process 6 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 6 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-22 23:02:52,589 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 3 Nilpotent components: true [2018-11-22 23:02:52,589 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-22 23:02:53,056 INFO L452 LassoAnalysis]: Proving nontermination failed: No geometric nontermination argument exists. [2018-11-22 23:02:53,058 INFO L216 LassoAnalysis]: Preferences: [2018-11-22 23:02:53,058 INFO L124 ssoRankerPreferences]: Compute integeral hull: false [2018-11-22 23:02:53,058 INFO L125 ssoRankerPreferences]: Enable LassoPartitioneer: true [2018-11-22 23:02:53,058 INFO L126 ssoRankerPreferences]: Term annotations enabled: false [2018-11-22 23:02:53,058 INFO L127 ssoRankerPreferences]: Use exernal solver: false [2018-11-22 23:02:53,058 INFO L128 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-22 23:02:53,058 INFO L129 ssoRankerPreferences]: Dump SMT script to file: false [2018-11-22 23:02:53,059 INFO L130 ssoRankerPreferences]: Path of dumped script: [2018-11-22 23:02:53,059 INFO L131 ssoRankerPreferences]: Filename of dumped script: elevator_spec3_product27_false-unreach-call_true-termination.cil.c_Iteration5_Loop [2018-11-22 23:02:53,059 INFO L132 ssoRankerPreferences]: MapElimAlgo: Frank [2018-11-22 23:02:53,059 INFO L282 LassoAnalysis]: Starting lasso preprocessing... [2018-11-22 23:02:53,061 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:53,126 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:53,129 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:53,134 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:53,159 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:53,160 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:53,190 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:53,192 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:53,194 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:53,196 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:53,207 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:53,209 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:53,211 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:53,213 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:53,218 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:53,223 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:53,226 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:53,234 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:53,237 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:53,239 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:53,242 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:53,255 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:53,258 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:53,261 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:53,263 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:53,265 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:53,268 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:53,274 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:53,276 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:53,278 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:53,280 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:53,285 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:53,287 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:53,292 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:53,295 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:53,297 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:53,303 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:53,304 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:53,308 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:53,309 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:53,310 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:53,311 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:53,333 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:53,339 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:53,342 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:53,343 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:53,344 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:53,345 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:53,346 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:53,348 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:53,349 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:53,350 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:53,351 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:53,352 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:53,364 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:53,366 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:53,367 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:53,370 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:53,372 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:53,374 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:53,375 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:53,378 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:53,379 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:53,384 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:53,385 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:53,389 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:53,393 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:53,394 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:53,395 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:53,396 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:53,397 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:53,398 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:53,399 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:53,400 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:53,401 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:53,422 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:53,427 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:53,429 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:53,432 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:53,435 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:53,437 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:53,440 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:53,447 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:53,456 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:53,463 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:53,464 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-22 23:02:53,839 INFO L300 LassoAnalysis]: Preprocessing complete. [2018-11-22 23:02:53,844 INFO L497 LassoAnalysis]: Using template 'affine'. [2018-11-22 23:02:53,846 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-22 23:02:53,851 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-22 23:02:53,851 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-22 23:02:53,852 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-22 23:02:53,852 INFO L206 nArgumentSynthesizer]: 2 loop disjuncts [2018-11-22 23:02:53,852 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-22 23:02:53,859 INFO L402 nArgumentSynthesizer]: We have 4 Motzkin's Theorem applications. [2018-11-22 23:02:53,859 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-22 23:02:53,864 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-22 23:02:53,865 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-22 23:02:53,865 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-22 23:02:53,865 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-22 23:02:53,865 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-22 23:02:53,865 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-22 23:02:53,866 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-22 23:02:53,866 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-22 23:02:53,866 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-22 23:02:53,867 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-22 23:02:53,867 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-22 23:02:53,868 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-22 23:02:53,868 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-22 23:02:53,868 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-22 23:02:53,868 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-22 23:02:53,868 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-22 23:02:53,869 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-22 23:02:53,869 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-22 23:02:53,869 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-22 23:02:53,869 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-22 23:02:53,870 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-22 23:02:53,870 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-22 23:02:53,870 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-22 23:02:53,870 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-22 23:02:53,870 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-22 23:02:53,871 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-22 23:02:53,871 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-22 23:02:53,873 INFO L421 nArgumentSynthesizer]: Found a termination argument, trying to simplify. [2018-11-22 23:02:53,875 INFO L443 ModelExtractionUtils]: Simplification made 4 calls to the SMT solver. [2018-11-22 23:02:53,875 INFO L444 ModelExtractionUtils]: 1 out of 5 variables were initially zero. Simplification set additionally 1 variables to zero. [2018-11-22 23:02:53,877 INFO L437 nArgumentSynthesizer]: Simplifying supporting invariants... [2018-11-22 23:02:53,877 INFO L440 nArgumentSynthesizer]: Removed 0 redundant supporting invariants from a total of 0. [2018-11-22 23:02:53,877 INFO L518 LassoAnalysis]: Proved termination. [2018-11-22 23:02:53,878 INFO L520 LassoAnalysis]: Termination argument consisting of: Ranking function f(~cleanupTimeShifts~0, ULTIMATE.start_cleanup_~i~3) = 1*~cleanupTimeShifts~0 - 1*ULTIMATE.start_cleanup_~i~3 Supporting invariants [] [2018-11-22 23:02:53,879 INFO L297 tatePredicateManager]: 0 out of 0 supporting invariants were superfluous and have been removed [2018-11-22 23:02:53,923 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-22 23:02:54,070 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-22 23:02:54,079 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-22 23:02:54,123 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-22 23:02:54,125 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-22 23:02:54,146 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-22 23:02:54,150 INFO L152 lantAutomatonBouncer]: Defining deterministic Buchi interpolant automaton with honda bouncer for stem and without honda bouncer for loop.1 stem predicates 3 loop predicates [2018-11-22 23:02:54,151 INFO L72 iDifferenceNCSBLazy3]: Start buchiDifferenceNCSBLazy3. First operand 25636 states and 47490 transitions. cyclomatic complexity: 21855 Second operand 5 states. [2018-11-22 23:02:54,532 INFO L76 iDifferenceNCSBLazy3]: Finished buchiDifferenceNCSBLazy3. First operand 25636 states and 47490 transitions. cyclomatic complexity: 21855. Second operand 5 states. Result 31823 states and 58922 transitions. Complement of second has 8 states. [2018-11-22 23:02:54,533 INFO L142 InterpolantAutomaton]: Switched to read-only mode: Buchi interpolant automaton has 5 states 1 stem states 3 non-accepting loop states 1 accepting loop states [2018-11-22 23:02:54,533 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2018-11-22 23:02:54,542 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 12222 transitions. [2018-11-22 23:02:54,544 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 5 states and 12222 transitions. Stem has 149 letters. Loop has 47 letters. [2018-11-22 23:02:54,545 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2018-11-22 23:02:54,545 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 5 states and 12222 transitions. Stem has 196 letters. Loop has 47 letters. [2018-11-22 23:02:54,547 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2018-11-22 23:02:54,547 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 5 states and 12222 transitions. Stem has 149 letters. Loop has 94 letters. [2018-11-22 23:02:54,548 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2018-11-22 23:02:54,548 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 31823 states and 58922 transitions. [2018-11-22 23:02:54,639 INFO L131 ngComponentsAnalysis]: Automaton has 0 accepting balls. 0 [2018-11-22 23:02:54,640 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 31823 states to 0 states and 0 transitions. [2018-11-22 23:02:54,640 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 0 [2018-11-22 23:02:54,640 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 0 [2018-11-22 23:02:54,640 INFO L73 IsDeterministic]: Start isDeterministic. Operand 0 states and 0 transitions. [2018-11-22 23:02:54,640 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-22 23:02:54,640 INFO L705 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2018-11-22 23:02:54,640 INFO L728 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2018-11-22 23:02:54,640 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-22 23:02:54,640 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-22 23:02:54,641 INFO L87 Difference]: Start difference. First operand 0 states and 0 transitions. Second operand 4 states. [2018-11-22 23:02:54,641 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-22 23:02:54,641 INFO L93 Difference]: Finished difference Result 0 states and 0 transitions. [2018-11-22 23:02:54,641 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2018-11-22 23:02:54,641 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 0 states and 0 transitions. [2018-11-22 23:02:54,641 INFO L131 ngComponentsAnalysis]: Automaton has 0 accepting balls. 0 [2018-11-22 23:02:54,641 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 0 states to 0 states and 0 transitions. [2018-11-22 23:02:54,641 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 0 [2018-11-22 23:02:54,641 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 0 [2018-11-22 23:02:54,641 INFO L73 IsDeterministic]: Start isDeterministic. Operand 0 states and 0 transitions. [2018-11-22 23:02:54,641 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-22 23:02:54,642 INFO L705 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2018-11-22 23:02:54,642 INFO L728 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2018-11-22 23:02:54,642 INFO L608 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2018-11-22 23:02:54,642 INFO L442 BuchiCegarLoop]: ======== Iteration 6============ [2018-11-22 23:02:54,642 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 0 states and 0 transitions. [2018-11-22 23:02:54,642 INFO L131 ngComponentsAnalysis]: Automaton has 0 accepting balls. 0 [2018-11-22 23:02:54,642 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is true [2018-11-22 23:02:54,647 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer CFG 22.11 11:02:54 BoogieIcfgContainer [2018-11-22 23:02:54,647 INFO L132 PluginConnector]: ------------------------ END BuchiAutomizer---------------------------- [2018-11-22 23:02:54,648 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2018-11-22 23:02:54,648 INFO L271 PluginConnector]: Initializing Witness Printer... [2018-11-22 23:02:54,648 INFO L276 PluginConnector]: Witness Printer initialized [2018-11-22 23:02:54,648 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 22.11 11:02:37" (3/4) ... [2018-11-22 23:02:54,652 INFO L147 WitnessPrinter]: No result that supports witness generation found [2018-11-22 23:02:54,652 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2018-11-22 23:02:54,652 INFO L168 Benchmark]: Toolchain (without parser) took 24386.57 ms. Allocated memory was 1.0 GB in the beginning and 2.3 GB in the end (delta: 1.3 GB). Free memory was 951.1 MB in the beginning and 1.1 GB in the end (delta: -147.7 MB). Peak memory consumption was 1.1 GB. Max. memory is 11.5 GB. [2018-11-22 23:02:54,653 INFO L168 Benchmark]: CDTParser took 0.16 ms. Allocated memory is still 1.0 GB. Free memory is still 980.1 MB. There was no memory consumed. Max. memory is 11.5 GB. [2018-11-22 23:02:54,654 INFO L168 Benchmark]: CACSL2BoogieTranslator took 578.49 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 162.5 MB). Free memory was 951.1 MB in the beginning and 1.1 GB in the end (delta: -176.9 MB). Peak memory consumption was 53.1 MB. Max. memory is 11.5 GB. [2018-11-22 23:02:54,654 INFO L168 Benchmark]: Boogie Procedure Inliner took 188.95 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 65.3 MB). Peak memory consumption was 65.3 MB. Max. memory is 11.5 GB. [2018-11-22 23:02:54,654 INFO L168 Benchmark]: Boogie Preprocessor took 238.44 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.0 GB in the end (delta: 59.6 MB). Peak memory consumption was 59.6 MB. Max. memory is 11.5 GB. [2018-11-22 23:02:54,655 INFO L168 Benchmark]: RCFGBuilder took 6236.67 ms. Allocated memory was 1.2 GB in the beginning and 1.6 GB in the end (delta: 426.2 MB). Free memory was 1.0 GB in the beginning and 1.5 GB in the end (delta: -468.8 MB). Peak memory consumption was 447.2 MB. Max. memory is 11.5 GB. [2018-11-22 23:02:54,655 INFO L168 Benchmark]: BuchiAutomizer took 17136.46 ms. Allocated memory was 1.6 GB in the beginning and 2.3 GB in the end (delta: 685.8 MB). Free memory was 1.5 GB in the beginning and 1.1 GB in the end (delta: 373.1 MB). Peak memory consumption was 1.1 GB. Max. memory is 11.5 GB. [2018-11-22 23:02:54,656 INFO L168 Benchmark]: Witness Printer took 4.07 ms. Allocated memory is still 2.3 GB. Free memory is still 1.1 GB. There was no memory consumed. Max. memory is 11.5 GB. [2018-11-22 23:02:54,659 INFO L336 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.16 ms. Allocated memory is still 1.0 GB. Free memory is still 980.1 MB. There was no memory consumed. Max. memory is 11.5 GB. * CACSL2BoogieTranslator took 578.49 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 162.5 MB). Free memory was 951.1 MB in the beginning and 1.1 GB in the end (delta: -176.9 MB). Peak memory consumption was 53.1 MB. Max. memory is 11.5 GB. * Boogie Procedure Inliner took 188.95 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 65.3 MB). Peak memory consumption was 65.3 MB. Max. memory is 11.5 GB. * Boogie Preprocessor took 238.44 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.0 GB in the end (delta: 59.6 MB). Peak memory consumption was 59.6 MB. Max. memory is 11.5 GB. * RCFGBuilder took 6236.67 ms. Allocated memory was 1.2 GB in the beginning and 1.6 GB in the end (delta: 426.2 MB). Free memory was 1.0 GB in the beginning and 1.5 GB in the end (delta: -468.8 MB). Peak memory consumption was 447.2 MB. Max. memory is 11.5 GB. * BuchiAutomizer took 17136.46 ms. Allocated memory was 1.6 GB in the beginning and 2.3 GB in the end (delta: 685.8 MB). Free memory was 1.5 GB in the beginning and 1.1 GB in the end (delta: 373.1 MB). Peak memory consumption was 1.1 GB. Max. memory is 11.5 GB. * Witness Printer took 4.07 ms. Allocated memory is still 2.3 GB. Free memory is still 1.1 GB. There was no memory consumed. Max. memory is 11.5 GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: Constructed decomposition of program Your program was decomposed into 6 terminating modules (5 trivial, 1 deterministic, 0 nondeterministic). One deterministic module has affine ranking function cleanupTimeShifts + -1 * i and consists of 5 locations. 5 modules have a trivial ranking function, the largest among these consists of 15 locations. - StatisticsResult: Timing statistics BüchiAutomizer plugin needed 17.1s and 6 iterations. TraceHistogramMax:1. Analysis of lassos took 4.2s. Construction of modules took 6.2s. Büchi inclusion checks took 4.5s. Highest rank in rank-based complementation 3. Minimization of det autom 6. Minimization of nondet autom 0. Automata minimization 0.7s AutomataMinimizationTime, 4 MinimizatonAttempts, 10030 StatesRemovedByMinimization, 4 NontrivialMinimizations. Non-live state removal took 0.6s Buchi closure took 0.0s. Biggest automaton had 25636 states and ocurred in iteration 4. Nontrivial modules had stage [1, 0, 0, 0, 0]. InterpolantCoveringCapabilityFinite: 0/0 InterpolantCoveringCapabilityBuchi: 0/0 HoareTripleCheckerStatistics: 80016 SDtfs, 255714 SDslu, 221476 SDs, 0 SdLazy, 16391 SolverSat, 1436 SolverUnsat, 0 SolverUnknown, 0 SolverNotchecked, 6.2s Time LassoAnalysisResults: nont0 unkn0 SFLI0 SFLT0 conc0 concLT0 SILN0 SILU0 SILI4 SILT1 lasso0 LassoPreprocessingBenchmarks: Lassos: inital211 mio100 ax100 hnf100 lsp20 ukn100 mio100 lsp100 div100 bol100 ite100 ukn100 eq216 hnf87 smp100 dnf118 smp100 tf102 neg97 sie104 LassoTerminationAnalysisBenchmarks: ConstraintsSatisfiability: unsat Degree: 0 Time: 19ms VariablesStem: 0 VariablesLoop: 4 DisjunctsStem: 1 DisjunctsLoop: 2 SupportingInvariants: 0 MotzkinApplications: 4 LassoTerminationAnalysisBenchmarks: LassoNonterminationAnalysisSatFixpoint: 3 LassoNonterminationAnalysisSatUnbounded: 0 LassoNonterminationAnalysisUnsat: 1 LassoNonterminationAnalysisUnknown: 0 LassoNonterminationAnalysisTime: 0.5s - TerminationAnalysisResult: Termination proven Buchi Automizer proved that your program is terminating RESULT: Ultimate proved your program to be correct! Received shutdown request...