./Ultimate.py --spec ../../sv-benchmarks/c/properties/termination.prp --file ../../sv-benchmarks/c/product-lines/elevator_spec3_product27_false-unreach-call_true-termination.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for termination Using default analysis Version 0cd3be1d Calling Ultimate with: java -Dosgi.configuration.area=/tmp/vcloud-vcloud-master/worker/working_dir_5dbd214c-3e27-4a76-8832-000731adef50/bin-2019/uautomizer/data/config -Xmx12G -Xms1G -jar /tmp/vcloud-vcloud-master/worker/working_dir_5dbd214c-3e27-4a76-8832-000731adef50/bin-2019/uautomizer/plugins/org.eclipse.equinox.launcher_1.3.100.v20150511-1540.jar -data @noDefault -ultimatedata /tmp/vcloud-vcloud-master/worker/working_dir_5dbd214c-3e27-4a76-8832-000731adef50/bin-2019/uautomizer/data -tc /tmp/vcloud-vcloud-master/worker/working_dir_5dbd214c-3e27-4a76-8832-000731adef50/bin-2019/uautomizer/config/AutomizerTermination.xml -i ../../sv-benchmarks/c/product-lines/elevator_spec3_product27_false-unreach-call_true-termination.cil.c -s /tmp/vcloud-vcloud-master/worker/working_dir_5dbd214c-3e27-4a76-8832-000731adef50/bin-2019/uautomizer/config/svcomp-Termination-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud-vcloud-master/worker/working_dir_5dbd214c-3e27-4a76-8832-000731adef50/bin-2019/uautomizer --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(F end) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 3a55681b09135ccff0bf93cef95d3a981a37b078 .................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................... Execution finished normally Writing output log to file Ultimate.log Result: TRUE --- Real Ultimate output --- This is Ultimate 0.1.23-0cd3be1 [2018-11-28 12:13:12,867 INFO L170 SettingsManager]: Resetting all preferences to default values... [2018-11-28 12:13:12,869 INFO L174 SettingsManager]: Resetting UltimateCore preferences to default values [2018-11-28 12:13:12,877 INFO L177 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2018-11-28 12:13:12,877 INFO L174 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2018-11-28 12:13:12,878 INFO L174 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2018-11-28 12:13:12,879 INFO L174 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2018-11-28 12:13:12,880 INFO L174 SettingsManager]: Resetting LassoRanker preferences to default values [2018-11-28 12:13:12,881 INFO L174 SettingsManager]: Resetting Reaching Definitions preferences to default values [2018-11-28 12:13:12,881 INFO L174 SettingsManager]: Resetting SyntaxChecker preferences to default values [2018-11-28 12:13:12,882 INFO L177 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2018-11-28 12:13:12,882 INFO L174 SettingsManager]: Resetting LTL2Aut preferences to default values [2018-11-28 12:13:12,883 INFO L174 SettingsManager]: Resetting PEA to Boogie preferences to default values [2018-11-28 12:13:12,884 INFO L174 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2018-11-28 12:13:12,884 INFO L174 SettingsManager]: Resetting ChcToBoogie preferences to default values [2018-11-28 12:13:12,885 INFO L174 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2018-11-28 12:13:12,885 INFO L174 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2018-11-28 12:13:12,887 INFO L174 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2018-11-28 12:13:12,888 INFO L174 SettingsManager]: Resetting CodeCheck preferences to default values [2018-11-28 12:13:12,889 INFO L174 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2018-11-28 12:13:12,890 INFO L174 SettingsManager]: Resetting RCFGBuilder preferences to default values [2018-11-28 12:13:12,891 INFO L174 SettingsManager]: Resetting TraceAbstraction preferences to default values [2018-11-28 12:13:12,892 INFO L177 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2018-11-28 12:13:12,892 INFO L177 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2018-11-28 12:13:12,893 INFO L174 SettingsManager]: Resetting TreeAutomizer preferences to default values [2018-11-28 12:13:12,893 INFO L174 SettingsManager]: Resetting IcfgTransformer preferences to default values [2018-11-28 12:13:12,894 INFO L174 SettingsManager]: Resetting Boogie Printer preferences to default values [2018-11-28 12:13:12,895 INFO L174 SettingsManager]: Resetting ReqPrinter preferences to default values [2018-11-28 12:13:12,895 INFO L174 SettingsManager]: Resetting Witness Printer preferences to default values [2018-11-28 12:13:12,896 INFO L177 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2018-11-28 12:13:12,896 INFO L174 SettingsManager]: Resetting CDTParser preferences to default values [2018-11-28 12:13:12,896 INFO L177 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2018-11-28 12:13:12,897 INFO L177 SettingsManager]: ReqParser provides no preferences, ignoring... [2018-11-28 12:13:12,897 INFO L174 SettingsManager]: Resetting SmtParser preferences to default values [2018-11-28 12:13:12,897 INFO L174 SettingsManager]: Resetting Witness Parser preferences to default values [2018-11-28 12:13:12,898 INFO L181 SettingsManager]: Finished resetting all preferences to default values... [2018-11-28 12:13:12,898 INFO L98 SettingsManager]: Beginning loading settings from /tmp/vcloud-vcloud-master/worker/working_dir_5dbd214c-3e27-4a76-8832-000731adef50/bin-2019/uautomizer/config/svcomp-Termination-32bit-Automizer_Default.epf [2018-11-28 12:13:12,909 INFO L110 SettingsManager]: Loading preferences was successful [2018-11-28 12:13:12,909 INFO L112 SettingsManager]: Preferences different from defaults after loading the file: [2018-11-28 12:13:12,910 INFO L131 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2018-11-28 12:13:12,910 INFO L133 SettingsManager]: * Create parallel compositions if possible=false [2018-11-28 12:13:12,910 INFO L133 SettingsManager]: * Use SBE=true [2018-11-28 12:13:12,910 INFO L131 SettingsManager]: Preferences of BuchiAutomizer differ from their defaults: [2018-11-28 12:13:12,910 INFO L133 SettingsManager]: * NCSB implementation=INTSET_LAZY3 [2018-11-28 12:13:12,910 INFO L133 SettingsManager]: * Use old map elimination=false [2018-11-28 12:13:12,911 INFO L133 SettingsManager]: * Use external solver (rank synthesis)=false [2018-11-28 12:13:12,911 INFO L133 SettingsManager]: * Use only trivial implications for array writes=true [2018-11-28 12:13:12,911 INFO L133 SettingsManager]: * Rank analysis=LINEAR_WITH_GUESSES [2018-11-28 12:13:12,911 INFO L131 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2018-11-28 12:13:12,911 INFO L133 SettingsManager]: * sizeof long=4 [2018-11-28 12:13:12,911 INFO L133 SettingsManager]: * Check unreachability of error function in SV-COMP mode=false [2018-11-28 12:13:12,912 INFO L133 SettingsManager]: * Overapproximate operations on floating types=true [2018-11-28 12:13:12,912 INFO L133 SettingsManager]: * sizeof POINTER=4 [2018-11-28 12:13:12,912 INFO L133 SettingsManager]: * Check division by zero=IGNORE [2018-11-28 12:13:12,912 INFO L133 SettingsManager]: * Pointer to allocated memory at dereference=ASSUME [2018-11-28 12:13:12,912 INFO L133 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=ASSUME [2018-11-28 12:13:12,912 INFO L133 SettingsManager]: * Check array bounds for arrays that are off heap=ASSUME [2018-11-28 12:13:12,912 INFO L133 SettingsManager]: * sizeof long double=12 [2018-11-28 12:13:12,913 INFO L133 SettingsManager]: * Check if freed pointer was valid=false [2018-11-28 12:13:12,913 INFO L133 SettingsManager]: * Assume nondeterminstic values are in range=false [2018-11-28 12:13:12,913 INFO L133 SettingsManager]: * Use constant arrays=true [2018-11-28 12:13:12,913 INFO L133 SettingsManager]: * Pointer base address is valid at dereference=ASSUME [2018-11-28 12:13:12,913 INFO L131 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2018-11-28 12:13:12,913 INFO L133 SettingsManager]: * Size of a code block=SequenceOfStatements [2018-11-28 12:13:12,913 INFO L133 SettingsManager]: * To the following directory=/home/matthias/ultimate/dump [2018-11-28 12:13:12,914 INFO L131 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2018-11-28 12:13:12,914 INFO L133 SettingsManager]: * Trace refinement strategy=CAMEL [2018-11-28 12:13:12,914 INFO L133 SettingsManager]: * Dump automata to the following directory=/home/matthias/ultimate/dump/auto [2018-11-28 12:13:12,915 INFO L131 SettingsManager]: Preferences of IcfgTransformer differ from their defaults: [2018-11-28 12:13:12,915 INFO L133 SettingsManager]: * TransformationType=MODULO_NEIGHBOR Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud-vcloud-master/worker/working_dir_5dbd214c-3e27-4a76-8832-000731adef50/bin-2019/uautomizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(F end) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 3a55681b09135ccff0bf93cef95d3a981a37b078 [2018-11-28 12:13:12,937 INFO L81 nceAwareModelManager]: Repository-Root is: /tmp [2018-11-28 12:13:12,946 INFO L258 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2018-11-28 12:13:12,949 INFO L214 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2018-11-28 12:13:12,950 INFO L271 PluginConnector]: Initializing CDTParser... [2018-11-28 12:13:12,950 INFO L276 PluginConnector]: CDTParser initialized [2018-11-28 12:13:12,951 INFO L418 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud-vcloud-master/worker/working_dir_5dbd214c-3e27-4a76-8832-000731adef50/bin-2019/uautomizer/../../sv-benchmarks/c/product-lines/elevator_spec3_product27_false-unreach-call_true-termination.cil.c [2018-11-28 12:13:12,990 INFO L221 CDTParser]: Created temporary CDT project at /tmp/vcloud-vcloud-master/worker/working_dir_5dbd214c-3e27-4a76-8832-000731adef50/bin-2019/uautomizer/data/b35fdeae0/0d333575cf2046098916ed72985622c8/FLAG2e7880ef9 [2018-11-28 12:13:13,472 INFO L307 CDTParser]: Found 1 translation units. [2018-11-28 12:13:13,473 INFO L161 CDTParser]: Scanning /tmp/vcloud-vcloud-master/worker/working_dir_5dbd214c-3e27-4a76-8832-000731adef50/sv-benchmarks/c/product-lines/elevator_spec3_product27_false-unreach-call_true-termination.cil.c [2018-11-28 12:13:13,484 INFO L355 CDTParser]: About to delete temporary CDT project at /tmp/vcloud-vcloud-master/worker/working_dir_5dbd214c-3e27-4a76-8832-000731adef50/bin-2019/uautomizer/data/b35fdeae0/0d333575cf2046098916ed72985622c8/FLAG2e7880ef9 [2018-11-28 12:13:13,968 INFO L363 CDTParser]: Successfully deleted /tmp/vcloud-vcloud-master/worker/working_dir_5dbd214c-3e27-4a76-8832-000731adef50/bin-2019/uautomizer/data/b35fdeae0/0d333575cf2046098916ed72985622c8 [2018-11-28 12:13:13,970 INFO L296 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2018-11-28 12:13:13,972 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2018-11-28 12:13:13,972 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2018-11-28 12:13:13,972 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2018-11-28 12:13:13,975 INFO L276 PluginConnector]: CACSL2BoogieTranslator initialized [2018-11-28 12:13:13,976 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 28.11 12:13:13" (1/1) ... [2018-11-28 12:13:13,978 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@7611bdbf and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 12:13:13, skipping insertion in model container [2018-11-28 12:13:13,978 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 28.11 12:13:13" (1/1) ... [2018-11-28 12:13:13,984 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2018-11-28 12:13:14,027 INFO L176 MainTranslator]: Built tables and reachable declarations [2018-11-28 12:13:14,403 INFO L203 PostProcessor]: Analyzing one entry point: main [2018-11-28 12:13:14,414 INFO L191 MainTranslator]: Completed pre-run [2018-11-28 12:13:14,490 INFO L203 PostProcessor]: Analyzing one entry point: main [2018-11-28 12:13:14,532 INFO L195 MainTranslator]: Completed translation [2018-11-28 12:13:14,532 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 12:13:14 WrapperNode [2018-11-28 12:13:14,532 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2018-11-28 12:13:14,533 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2018-11-28 12:13:14,533 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2018-11-28 12:13:14,533 INFO L276 PluginConnector]: Boogie Procedure Inliner initialized [2018-11-28 12:13:14,540 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 12:13:14" (1/1) ... [2018-11-28 12:13:14,564 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 12:13:14" (1/1) ... [2018-11-28 12:13:14,798 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2018-11-28 12:13:14,798 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2018-11-28 12:13:14,798 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2018-11-28 12:13:14,798 INFO L276 PluginConnector]: Boogie Preprocessor initialized [2018-11-28 12:13:14,807 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 12:13:14" (1/1) ... [2018-11-28 12:13:14,807 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 12:13:14" (1/1) ... [2018-11-28 12:13:14,835 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 12:13:14" (1/1) ... [2018-11-28 12:13:14,836 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 12:13:14" (1/1) ... [2018-11-28 12:13:14,904 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 12:13:14" (1/1) ... [2018-11-28 12:13:14,981 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 12:13:14" (1/1) ... [2018-11-28 12:13:15,014 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 12:13:14" (1/1) ... [2018-11-28 12:13:15,065 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2018-11-28 12:13:15,066 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2018-11-28 12:13:15,066 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2018-11-28 12:13:15,066 INFO L276 PluginConnector]: RCFGBuilder initialized [2018-11-28 12:13:15,067 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 12:13:14" (1/1) ... No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_5dbd214c-3e27-4a76-8832-000731adef50/bin-2019/uautomizer/z3 Starting monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 12:13:15,109 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.alloc [2018-11-28 12:13:15,109 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2018-11-28 12:13:15,109 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2018-11-28 12:13:15,110 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2018-11-28 12:13:21,635 INFO L275 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2018-11-28 12:13:21,635 INFO L280 CfgBuilder]: Removed 1617 assue(true) statements. [2018-11-28 12:13:21,636 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 28.11 12:13:21 BoogieIcfgContainer [2018-11-28 12:13:21,636 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2018-11-28 12:13:21,636 INFO L113 PluginConnector]: ------------------------BuchiAutomizer---------------------------- [2018-11-28 12:13:21,636 INFO L271 PluginConnector]: Initializing BuchiAutomizer... [2018-11-28 12:13:21,638 INFO L276 PluginConnector]: BuchiAutomizer initialized [2018-11-28 12:13:21,639 INFO L102 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2018-11-28 12:13:21,639 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "CDTParser AST 28.11 12:13:13" (1/3) ... [2018-11-28 12:13:21,640 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@3644017c and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 28.11 12:13:21, skipping insertion in model container [2018-11-28 12:13:21,640 INFO L102 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2018-11-28 12:13:21,640 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 12:13:14" (2/3) ... [2018-11-28 12:13:21,640 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@3644017c and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 28.11 12:13:21, skipping insertion in model container [2018-11-28 12:13:21,640 INFO L102 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2018-11-28 12:13:21,640 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 28.11 12:13:21" (3/3) ... [2018-11-28 12:13:21,642 INFO L375 chiAutomizerObserver]: Analyzing ICFG elevator_spec3_product27_false-unreach-call_true-termination.cil.c [2018-11-28 12:13:21,684 INFO L133 ementStrategyFactory]: Using default assertion order modulation [2018-11-28 12:13:21,685 INFO L374 BuchiCegarLoop]: Interprodecural is true [2018-11-28 12:13:21,685 INFO L375 BuchiCegarLoop]: Hoare is false [2018-11-28 12:13:21,685 INFO L376 BuchiCegarLoop]: Compute interpolants for ForwardPredicates [2018-11-28 12:13:21,685 INFO L377 BuchiCegarLoop]: Backedges is STRAIGHT_LINE [2018-11-28 12:13:21,686 INFO L378 BuchiCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2018-11-28 12:13:21,686 INFO L379 BuchiCegarLoop]: Difference is false [2018-11-28 12:13:21,686 INFO L380 BuchiCegarLoop]: Minimize is MINIMIZE_SEVPA [2018-11-28 12:13:21,686 INFO L383 BuchiCegarLoop]: ======== Iteration 0==of CEGAR loop == BuchiCegarLoop======== [2018-11-28 12:13:21,756 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 6563 states. [2018-11-28 12:13:21,860 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1330 [2018-11-28 12:13:21,861 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-28 12:13:21,861 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-28 12:13:21,877 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 12:13:21,877 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 12:13:21,877 INFO L442 BuchiCegarLoop]: ======== Iteration 1============ [2018-11-28 12:13:21,877 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 6563 states. [2018-11-28 12:13:21,931 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1330 [2018-11-28 12:13:21,931 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-28 12:13:21,931 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-28 12:13:21,935 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 12:13:21,935 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 12:13:21,943 INFO L794 eck$LassoCheckResult]: Stem: 1305#ULTIMATE.startENTRYtrue #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string53.base, #t~string53.offset := #Ultimate.alloc(10);call #t~string55.base, #t~string55.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string55.base, #t~string55.offset, 1);call write~init~int(95, #t~string55.base, 1 + #t~string55.offset, 1);call write~init~int(93, #t~string55.base, 2 + #t~string55.offset, 1);call write~init~int(0, #t~string55.base, 3 + #t~string55.offset, 1);call #t~string57.base, #t~string57.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string57.base, #t~string57.offset, 1);call write~init~int(93, #t~string57.base, 1 + #t~string57.offset, 1);call write~init~int(32, #t~string57.base, 2 + #t~string57.offset, 1);call write~init~int(0, #t~string57.base, 3 + #t~string57.offset, 1);call #t~string59.base, #t~string59.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string59.base, #t~string59.offset, 1);call write~init~int(97, #t~string59.base, 1 + #t~string59.offset, 1);call write~init~int(116, #t~string59.base, 2 + #t~string59.offset, 1);call write~init~int(32, #t~string59.base, 3 + #t~string59.offset, 1);call write~init~int(0, #t~string59.base, 4 + #t~string59.offset, 1);call #t~string61.base, #t~string61.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string61.base, #t~string61.offset, 1);call write~init~int(105, #t~string61.base, 1 + #t~string61.offset, 1);call write~init~int(0, #t~string61.base, 2 + #t~string61.offset, 1);call #t~string63.base, #t~string63.offset := #Ultimate.alloc(10);call #t~string65.base, #t~string65.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string65.base, #t~string65.offset, 1);call write~init~int(112, #t~string65.base, 1 + #t~string65.offset, 1);call write~init~int(0, #t~string65.base, 2 + #t~string65.offset, 1);call #t~string67.base, #t~string67.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string67.base, #t~string67.offset, 1);call write~init~int(111, #t~string67.base, 1 + #t~string67.offset, 1);call write~init~int(119, #t~string67.base, 2 + #t~string67.offset, 1);call write~init~int(110, #t~string67.base, 3 + #t~string67.offset, 1);call write~init~int(0, #t~string67.base, 4 + #t~string67.offset, 1);call #t~string69.base, #t~string69.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string69.base, #t~string69.offset, 1);call write~init~int(73, #t~string69.base, 1 + #t~string69.offset, 1);call write~init~int(76, #t~string69.base, 2 + #t~string69.offset, 1);call write~init~int(95, #t~string69.base, 3 + #t~string69.offset, 1);call write~init~int(112, #t~string69.base, 4 + #t~string69.offset, 1);call write~init~int(58, #t~string69.base, 5 + #t~string69.offset, 1);call write~init~int(0, #t~string69.base, 6 + #t~string69.offset, 1);call #t~string71.base, #t~string71.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string71.base, #t~string71.offset, 1);call write~init~int(37, #t~string71.base, 1 + #t~string71.offset, 1);call write~init~int(105, #t~string71.base, 2 + #t~string71.offset, 1);call write~init~int(0, #t~string71.base, 3 + #t~string71.offset, 1);call #t~string73.base, #t~string73.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string73.base, #t~string73.offset, 1);call write~init~int(37, #t~string73.base, 1 + #t~string73.offset, 1);call write~init~int(105, #t~string73.base, 2 + #t~string73.offset, 1);call write~init~int(0, #t~string73.base, 3 + #t~string73.offset, 1);call #t~string75.base, #t~string75.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string75.base, #t~string75.offset, 1);call write~init~int(37, #t~string75.base, 1 + #t~string75.offset, 1);call write~init~int(105, #t~string75.base, 2 + #t~string75.offset, 1);call write~init~int(0, #t~string75.base, 3 + #t~string75.offset, 1);call #t~string77.base, #t~string77.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string77.base, #t~string77.offset, 1);call write~init~int(37, #t~string77.base, 1 + #t~string77.offset, 1);call write~init~int(105, #t~string77.base, 2 + #t~string77.offset, 1);call write~init~int(0, #t~string77.base, 3 + #t~string77.offset, 1);call #t~string79.base, #t~string79.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string79.base, #t~string79.offset, 1);call write~init~int(37, #t~string79.base, 1 + #t~string79.offset, 1);call write~init~int(105, #t~string79.base, 2 + #t~string79.offset, 1);call write~init~int(0, #t~string79.base, 3 + #t~string79.offset, 1);call #t~string81.base, #t~string81.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string81.base, #t~string81.offset, 1);call write~init~int(70, #t~string81.base, 1 + #t~string81.offset, 1);call write~init~int(95, #t~string81.base, 2 + #t~string81.offset, 1);call write~init~int(112, #t~string81.base, 3 + #t~string81.offset, 1);call write~init~int(58, #t~string81.base, 4 + #t~string81.offset, 1);call write~init~int(0, #t~string81.base, 5 + #t~string81.offset, 1);call #t~string84.base, #t~string84.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string84.base, #t~string84.offset, 1);call write~init~int(37, #t~string84.base, 1 + #t~string84.offset, 1);call write~init~int(105, #t~string84.base, 2 + #t~string84.offset, 1);call write~init~int(0, #t~string84.base, 3 + #t~string84.offset, 1);call #t~string87.base, #t~string87.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string87.base, #t~string87.offset, 1);call write~init~int(37, #t~string87.base, 1 + #t~string87.offset, 1);call write~init~int(105, #t~string87.base, 2 + #t~string87.offset, 1);call write~init~int(0, #t~string87.base, 3 + #t~string87.offset, 1);call #t~string90.base, #t~string90.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string90.base, #t~string90.offset, 1);call write~init~int(37, #t~string90.base, 1 + #t~string90.offset, 1);call write~init~int(105, #t~string90.base, 2 + #t~string90.offset, 1);call write~init~int(0, #t~string90.base, 3 + #t~string90.offset, 1);call #t~string93.base, #t~string93.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string93.base, #t~string93.offset, 1);call write~init~int(37, #t~string93.base, 1 + #t~string93.offset, 1);call write~init~int(105, #t~string93.base, 2 + #t~string93.offset, 1);call write~init~int(0, #t~string93.base, 3 + #t~string93.offset, 1);call #t~string96.base, #t~string96.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string96.base, #t~string96.offset, 1);call write~init~int(37, #t~string96.base, 1 + #t~string96.offset, 1);call write~init~int(105, #t~string96.base, 2 + #t~string96.offset, 1);call write~init~int(0, #t~string96.base, 3 + #t~string96.offset, 1);call #t~string98.base, #t~string98.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string98.base, #t~string98.offset, 1);call write~init~int(0, #t~string98.base, 1 + #t~string98.offset, 1);~cleanupTimeShifts~0 := 12;~expectedDirection~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;call #t~string154.base, #t~string154.offset := #Ultimate.alloc(30);call #t~string155.base, #t~string155.offset := #Ultimate.alloc(9);call #t~string156.base, #t~string156.offset := #Ultimate.alloc(21);call #t~string157.base, #t~string157.offset := #Ultimate.alloc(30);call #t~string158.base, #t~string158.offset := #Ultimate.alloc(9);call #t~string159.base, #t~string159.offset := #Ultimate.alloc(21);call #t~string163.base, #t~string163.offset := #Ultimate.alloc(30);call #t~string164.base, #t~string164.offset := #Ultimate.alloc(9);call #t~string165.base, #t~string165.offset := #Ultimate.alloc(25);call #t~string166.base, #t~string166.offset := #Ultimate.alloc(30);call #t~string167.base, #t~string167.offset := #Ultimate.alloc(9);call #t~string168.base, #t~string168.offset := #Ultimate.alloc(25); 5810#L-1true havoc main_#res;havoc main_#t~ret134, main_~retValue_acc~21, main_~tmp~25;havoc main_~retValue_acc~21;havoc main_~tmp~25; 935#L3055true havoc valid_product_#res;havoc valid_product_~retValue_acc~26;havoc valid_product_~retValue_acc~26;valid_product_~retValue_acc~26 := 1;valid_product_#res := valid_product_~retValue_acc~26; 114#L3063true main_#t~ret134 := valid_product_#res;main_~tmp~25 := main_#t~ret134;havoc main_#t~ret134; 88#L2358true assume 0 != main_~tmp~25; 710#L2332true ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 2543#L2447true havoc bobCall_#t~ret122, bobCall_~tmp~17;havoc bobCall_~tmp~17;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~18;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~18; 2467#L1741true assume 0 == getOrigin_~person;getOrigin_~retValue_acc~18 := 4;getOrigin_#res := getOrigin_~retValue_acc~18; 5455#L1766true bobCall_#t~ret122 := getOrigin_#res;bobCall_~tmp~17 := bobCall_#t~ret122;havoc bobCall_#t~ret122;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~17;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 313#L2725true assume 0 == initPersonOnFloor_~floor; 2077#L2726true assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 6177#L2833-1true callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 1057#L2517true assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 241#L2529-2true havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret107, __utac_acc__Specification3_spec__1_#t~ret108, __utac_acc__Specification3_spec__1_#t~ret109, __utac_acc__Specification3_spec__1_#t~ret110, __utac_acc__Specification3_spec__1_#t~ret111, __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~15, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~7, __utac_acc__Specification3_spec__1_~tmp___2~5, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~15;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~7;havoc __utac_acc__Specification3_spec__1_~tmp___2~5;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 1440#L303true __utac_acc__Specification3_spec__1_#t~ret107 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~15 := __utac_acc__Specification3_spec__1_#t~ret107;havoc __utac_acc__Specification3_spec__1_#t~ret107;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~15;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~4;havoc getCurrentHeading_~retValue_acc~4;getCurrentHeading_~retValue_acc~4 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~4; 5727#L355true __utac_acc__Specification3_spec__1_#t~ret108 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret108;havoc __utac_acc__Specification3_spec__1_#t~ret108; 334#L1840true assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 401#L1841true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~3;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~3; 3955#L320true assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~3 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~3; 3360#L341true __utac_acc__Specification3_spec__1_#t~ret109 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~3 := __utac_acc__Specification3_spec__1_#t~ret109;havoc __utac_acc__Specification3_spec__1_#t~ret109; 2084#L1845true assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3;~expectedDirection~0 := 1; 6521#L1946true havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 3278#L2454true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 6165#L2481true isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 5448#L1590true stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 1933#L972true assume 0 != stopRequestedAtCurrentFloor_~tmp~9;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 1445#L303-1true stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 2290#L976true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 1289#L989true timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 20#L1127true assume !(0 != timeShift_~tmp___9~2); 3406#L1218true assume !(1 == ~doorState~0); 3409#L1218-2true stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 3272#L2454-3true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 6146#L2481-3true isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 5450#L1590-1true stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 2743#L855true assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 1444#L303-2true stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 3285#L868true timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 2899#L1226true assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 5307#L912true assume !(1 == ~currentHeading~0); 897#L922true assume !(0 == ~currentFloorID~0); 894#L922-2true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 628#L928-5true havoc __utac_acc__Specification3_spec__2_#t~ret119, __utac_acc__Specification3_spec__2_#t~ret120, __utac_acc__Specification3_spec__2_~tmp~16, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~16;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 5344#L1971true assume !(-1 == ~expectedDirection~0); 650#L1983true assume !(1 == ~expectedDirection~0); 672#L1984true havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret107, __utac_acc__Specification3_spec__1_#t~ret108, __utac_acc__Specification3_spec__1_#t~ret109, __utac_acc__Specification3_spec__1_#t~ret110, __utac_acc__Specification3_spec__1_#t~ret111, __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~15, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~7, __utac_acc__Specification3_spec__1_~tmp___2~5, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~15;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~7;havoc __utac_acc__Specification3_spec__1_~tmp___2~5;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 1442#L303-4true __utac_acc__Specification3_spec__1_#t~ret107 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~15 := __utac_acc__Specification3_spec__1_#t~ret107;havoc __utac_acc__Specification3_spec__1_#t~ret107;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~15;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~4;havoc getCurrentHeading_~retValue_acc~4;getCurrentHeading_~retValue_acc~4 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~4; 5738#L355-3true __utac_acc__Specification3_spec__1_#t~ret108 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret108;havoc __utac_acc__Specification3_spec__1_#t~ret108; 333#L1840-1true assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 4274#L1902-1true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~3;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~3; 3933#L320-17true assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~3 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~3; 3294#L341-17true __utac_acc__Specification3_spec__1_#t~ret114 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret114;havoc __utac_acc__Specification3_spec__1_#t~ret114; 3932#L1906-2true assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 6510#L1946-1true havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 3364#L2454-25true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 6082#L2481-25true isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 5609#L1590-3true stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 1934#L972-1true assume 0 != stopRequestedAtCurrentFloor_~tmp~9;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 1441#L303-5true stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 2292#L976-1true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 1290#L989-1true timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 23#L1127-1true assume !(0 != timeShift_~tmp___9~2); 3410#L1218-3true assume !(1 == ~doorState~0); 3397#L1218-5true stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 3368#L2454-28true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 6088#L2481-28true isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 5612#L1590-4true stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 2749#L855-2true assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 3685#L303-6true stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 3287#L868-2true timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 2884#L1226-1true assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 5288#L912-3true assume !(1 == ~currentHeading~0); 892#L922-9true assume !(0 == ~currentFloorID~0); 893#L922-11true assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 625#L928-11true havoc __utac_acc__Specification3_spec__2_#t~ret119, __utac_acc__Specification3_spec__2_#t~ret120, __utac_acc__Specification3_spec__2_~tmp~16, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~16;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 5347#L1971-1true assume !(-1 == ~expectedDirection~0); 639#L1983-1true assume !(1 == ~expectedDirection~0); 671#L1984-1true havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret107, __utac_acc__Specification3_spec__1_#t~ret108, __utac_acc__Specification3_spec__1_#t~ret109, __utac_acc__Specification3_spec__1_#t~ret110, __utac_acc__Specification3_spec__1_#t~ret111, __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~15, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~7, __utac_acc__Specification3_spec__1_~tmp___2~5, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~15;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~7;havoc __utac_acc__Specification3_spec__1_~tmp___2~5;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 3687#L303-8true __utac_acc__Specification3_spec__1_#t~ret107 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~15 := __utac_acc__Specification3_spec__1_#t~ret107;havoc __utac_acc__Specification3_spec__1_#t~ret107;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~15;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~4;havoc getCurrentHeading_~retValue_acc~4;getCurrentHeading_~retValue_acc~4 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~4; 5708#L355-6true __utac_acc__Specification3_spec__1_#t~ret108 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret108;havoc __utac_acc__Specification3_spec__1_#t~ret108; 330#L1840-2true assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 4276#L1902-2true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~3;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~3; 3895#L320-29true assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~3 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~3; 3146#L341-29true __utac_acc__Specification3_spec__1_#t~ret114 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret114;havoc __utac_acc__Specification3_spec__1_#t~ret114; 3914#L1906-4true assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 6512#L1946-2true havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 3299#L2454-50true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 6223#L2481-50true isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 5616#L1590-6true stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 1935#L972-2true assume 0 != stopRequestedAtCurrentFloor_~tmp~9;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 3688#L303-9true stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 2283#L976-2true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 1291#L989-2true timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 24#L1127-2true assume !(0 != timeShift_~tmp___9~2); 3400#L1218-6true assume 1 == ~doorState~0;~doorState~0 := 0; 3403#L1218-8true stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 3305#L2454-53true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 6215#L2481-53true isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 5618#L1590-7true stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 2849#L855-4true assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 3689#L303-10true stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 3290#L868-4true timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 2888#L1226-2true assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 5296#L912-6true assume !(1 == ~currentHeading~0); 709#L922-18true assume !(0 == ~currentFloorID~0); 711#L922-20true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 620#L928-17true havoc __utac_acc__Specification3_spec__2_#t~ret119, __utac_acc__Specification3_spec__2_#t~ret120, __utac_acc__Specification3_spec__2_~tmp~16, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~16;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 5351#L1971-2true assume !(-1 == ~expectedDirection~0); 643#L1983-2true assume !(1 == ~expectedDirection~0); 668#L1984-2true havoc bobCall_#t~ret122, bobCall_~tmp~17;havoc bobCall_~tmp~17;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~18;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~18; 2470#L1741-1true assume 0 == getOrigin_~person;getOrigin_~retValue_acc~18 := 4;getOrigin_#res := getOrigin_~retValue_acc~18; 5459#L1766-1true bobCall_#t~ret122 := getOrigin_#res;bobCall_~tmp~17 := bobCall_#t~ret122;havoc bobCall_#t~ret122;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~17;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 297#L2725-1true assume 0 == initPersonOnFloor_~floor; 2067#L2726-2true assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 6171#L2833-3true callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 1052#L2517-2true assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 236#L2529-5true havoc cleanup_#t~ret128, cleanup_#t~ret129, cleanup_~i~3, cleanup_~tmp~23, cleanup_~tmp___0~12, cleanup_~__cil_tmp4~0;havoc cleanup_~i~3;havoc cleanup_~tmp~23;havoc cleanup_~tmp___0~12;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret107, __utac_acc__Specification3_spec__1_#t~ret108, __utac_acc__Specification3_spec__1_#t~ret109, __utac_acc__Specification3_spec__1_#t~ret110, __utac_acc__Specification3_spec__1_#t~ret111, __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~15, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~7, __utac_acc__Specification3_spec__1_~tmp___2~5, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~15;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~7;havoc __utac_acc__Specification3_spec__1_~tmp___2~5;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 3677#L303-12true __utac_acc__Specification3_spec__1_#t~ret107 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~15 := __utac_acc__Specification3_spec__1_#t~ret107;havoc __utac_acc__Specification3_spec__1_#t~ret107;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~15;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~4;havoc getCurrentHeading_~retValue_acc~4;getCurrentHeading_~retValue_acc~4 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~4; 5721#L355-9true __utac_acc__Specification3_spec__1_#t~ret108 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret108;havoc __utac_acc__Specification3_spec__1_#t~ret108; 331#L1840-3true assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 385#L1841-3true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~3;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~3; 4073#L320-36true assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~3 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~3; 3128#L341-36true __utac_acc__Specification3_spec__1_#t~ret109 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~3 := __utac_acc__Specification3_spec__1_#t~ret109;havoc __utac_acc__Specification3_spec__1_#t~ret109; 2080#L1845-6true assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3;~expectedDirection~0 := 1; 6511#L1946-3true havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 3105#L2454-75true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 4756#L2481-75true isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 5600#L1590-9true stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 1873#L972-3true assume 0 != stopRequestedAtCurrentFloor_~tmp~9;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 3679#L303-13true stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 2284#L976-3true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 1292#L989-3true timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 14#L1127-3true assume !(0 != timeShift_~tmp___9~2); 3383#L1218-9true assume !(1 == ~doorState~0); 3387#L1218-11true stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 3082#L2454-78true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 4747#L2481-78true isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 5602#L1590-10true stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 2855#L855-6true assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 3680#L303-14true stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 3281#L868-6true timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 2889#L1226-3true assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 5274#L912-9true assume !(1 == ~currentHeading~0); 707#L922-27true assume !(0 == ~currentFloorID~0); 701#L922-29true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 596#L928-23true havoc __utac_acc__Specification3_spec__2_#t~ret119, __utac_acc__Specification3_spec__2_#t~ret120, __utac_acc__Specification3_spec__2_~tmp~16, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~16;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 5354#L1971-3true assume !(-1 == ~expectedDirection~0); 645#L1983-3true assume !(1 == ~expectedDirection~0); 669#L1984-3true cleanup_~i~3 := 0; 1069#L2164-2true [2018-11-28 12:13:21,944 INFO L796 eck$LassoCheckResult]: Loop: 1069#L2164-2true assume !false; 1051#L2165true cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 1021#L2168true assume cleanup_~i~3 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~0;havoc isBlocked_~retValue_acc~0;isBlocked_~retValue_acc~0 := 0;isBlocked_#res := isBlocked_~retValue_acc~0; 3644#L130true cleanup_#t~ret128 := isBlocked_#res;cleanup_~tmp___0~12 := cleanup_#t~ret128;havoc cleanup_#t~ret128; 999#L2172true assume 1 != cleanup_~tmp___0~12; 997#L2172-1true havoc isIdle_#res;havoc isIdle_#t~ret8, isIdle_~retValue_acc~7, isIdle_~tmp~4;havoc isIdle_~retValue_acc~7;havoc isIdle_~tmp~4;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret3, anyStopRequested_#t~ret4, anyStopRequested_#t~ret5, anyStopRequested_#t~ret6, anyStopRequested_#t~ret7, anyStopRequested_~retValue_acc~6, anyStopRequested_~tmp~3, anyStopRequested_~tmp___0~0, anyStopRequested_~tmp___1~0, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~6;havoc anyStopRequested_~tmp~3;havoc anyStopRequested_~tmp___0~0;havoc anyStopRequested_~tmp___1~0;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 3257#L2454-100true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 4725#L2481-100true anyStopRequested_#t~ret3 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret3;havoc anyStopRequested_#t~ret3; 925#L411true assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~6 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~6; 1489#L475true isIdle_#t~ret8 := anyStopRequested_#res;isIdle_~tmp~4 := isIdle_#t~ret8;havoc isIdle_#t~ret8;isIdle_~retValue_acc~7 := (if 0 == isIdle_~tmp~4 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~7; 3488#L488true cleanup_#t~ret129 := isIdle_#res;cleanup_~tmp~23 := cleanup_#t~ret129;havoc cleanup_#t~ret129; 21#L2184true assume !(0 != cleanup_~tmp~23);havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret107, __utac_acc__Specification3_spec__1_#t~ret108, __utac_acc__Specification3_spec__1_#t~ret109, __utac_acc__Specification3_spec__1_#t~ret110, __utac_acc__Specification3_spec__1_#t~ret111, __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~15, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~7, __utac_acc__Specification3_spec__1_~tmp___2~5, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~15;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~7;havoc __utac_acc__Specification3_spec__1_~tmp___2~5;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 3684#L303-16true __utac_acc__Specification3_spec__1_#t~ret107 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~15 := __utac_acc__Specification3_spec__1_#t~ret107;havoc __utac_acc__Specification3_spec__1_#t~ret107;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~15;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~4;havoc getCurrentHeading_~retValue_acc~4;getCurrentHeading_~retValue_acc~4 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~4; 5693#L355-12true __utac_acc__Specification3_spec__1_#t~ret108 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret108;havoc __utac_acc__Specification3_spec__1_#t~ret108; 332#L1840-4true assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 4279#L1902-4true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~3;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~3; 4029#L320-53true assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~3 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~3; 3063#L341-53true __utac_acc__Specification3_spec__1_#t~ret114 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret114;havoc __utac_acc__Specification3_spec__1_#t~ret114; 3922#L1906-8true assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 6514#L1946-4true havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 3246#L2454-105true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 4720#L2481-105true isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 5607#L1590-12true stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 1874#L972-4true assume 0 != stopRequestedAtCurrentFloor_~tmp~9;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 3671#L303-17true stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 2285#L976-4true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 1284#L989-4true timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 15#L1127-4true assume !(0 != timeShift_~tmp___9~2); 3391#L1218-12true assume 1 == ~doorState~0;~doorState~0 := 0; 3474#L1218-14true stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 3251#L2454-108true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 4723#L2481-108true isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 5590#L1590-13true stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 2859#L855-8true assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 3672#L303-18true stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 3283#L868-8true timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 2891#L1226-4true assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 5255#L912-12true assume !(1 == ~currentHeading~0); 700#L922-36true assume !(0 == ~currentFloorID~0); 694#L922-38true assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 590#L928-29true havoc __utac_acc__Specification3_spec__2_#t~ret119, __utac_acc__Specification3_spec__2_#t~ret120, __utac_acc__Specification3_spec__2_~tmp~16, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~16;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 5353#L1971-4true assume !(-1 == ~expectedDirection~0); 644#L1983-4true assume !(1 == ~expectedDirection~0); 670#L1984-4true cleanup_~i~3 := 1 + cleanup_~i~3; 1069#L2164-2true [2018-11-28 12:13:21,964 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 12:13:21,964 INFO L82 PathProgramCache]: Analyzing trace with hash -1498525402, now seen corresponding path program 1 times [2018-11-28 12:13:21,965 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 12:13:21,966 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 12:13:22,006 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:13:22,007 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-28 12:13:22,007 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:13:22,094 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 12:13:22,219 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 12:13:22,221 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 12:13:22,221 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-28 12:13:22,224 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-28 12:13:22,225 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 12:13:22,225 INFO L82 PathProgramCache]: Analyzing trace with hash 1656542708, now seen corresponding path program 1 times [2018-11-28 12:13:22,225 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 12:13:22,225 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 12:13:22,226 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:13:22,226 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-28 12:13:22,226 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:13:22,237 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 12:13:22,306 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 12:13:22,306 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 12:13:22,306 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-28 12:13:22,307 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-28 12:13:22,316 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-11-28 12:13:22,317 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-28 12:13:22,318 INFO L87 Difference]: Start difference. First operand 6563 states. Second operand 5 states. [2018-11-28 12:13:23,543 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-28 12:13:23,543 INFO L93 Difference]: Finished difference Result 11940 states and 22285 transitions. [2018-11-28 12:13:23,543 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2018-11-28 12:13:23,545 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 11940 states and 22285 transitions. [2018-11-28 12:13:23,622 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 2788 [2018-11-28 12:13:23,680 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 11940 states to 11878 states and 22210 transitions. [2018-11-28 12:13:23,681 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 11878 [2018-11-28 12:13:23,694 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 11878 [2018-11-28 12:13:23,694 INFO L73 IsDeterministic]: Start isDeterministic. Operand 11878 states and 22210 transitions. [2018-11-28 12:13:23,717 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-28 12:13:23,718 INFO L705 BuchiCegarLoop]: Abstraction has 11878 states and 22210 transitions. [2018-11-28 12:13:23,746 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 11878 states and 22210 transitions. [2018-11-28 12:13:23,928 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 11878 to 11362. [2018-11-28 12:13:23,929 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 11362 states. [2018-11-28 12:13:23,949 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 11362 states to 11362 states and 21330 transitions. [2018-11-28 12:13:23,950 INFO L728 BuchiCegarLoop]: Abstraction has 11362 states and 21330 transitions. [2018-11-28 12:13:23,950 INFO L608 BuchiCegarLoop]: Abstraction has 11362 states and 21330 transitions. [2018-11-28 12:13:23,950 INFO L442 BuchiCegarLoop]: ======== Iteration 2============ [2018-11-28 12:13:23,950 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 11362 states and 21330 transitions. [2018-11-28 12:13:23,985 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 2564 [2018-11-28 12:13:23,985 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-28 12:13:23,985 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-28 12:13:23,989 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 12:13:23,989 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 12:13:23,989 INFO L794 eck$LassoCheckResult]: Stem: 20444#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string53.base, #t~string53.offset := #Ultimate.alloc(10);call #t~string55.base, #t~string55.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string55.base, #t~string55.offset, 1);call write~init~int(95, #t~string55.base, 1 + #t~string55.offset, 1);call write~init~int(93, #t~string55.base, 2 + #t~string55.offset, 1);call write~init~int(0, #t~string55.base, 3 + #t~string55.offset, 1);call #t~string57.base, #t~string57.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string57.base, #t~string57.offset, 1);call write~init~int(93, #t~string57.base, 1 + #t~string57.offset, 1);call write~init~int(32, #t~string57.base, 2 + #t~string57.offset, 1);call write~init~int(0, #t~string57.base, 3 + #t~string57.offset, 1);call #t~string59.base, #t~string59.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string59.base, #t~string59.offset, 1);call write~init~int(97, #t~string59.base, 1 + #t~string59.offset, 1);call write~init~int(116, #t~string59.base, 2 + #t~string59.offset, 1);call write~init~int(32, #t~string59.base, 3 + #t~string59.offset, 1);call write~init~int(0, #t~string59.base, 4 + #t~string59.offset, 1);call #t~string61.base, #t~string61.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string61.base, #t~string61.offset, 1);call write~init~int(105, #t~string61.base, 1 + #t~string61.offset, 1);call write~init~int(0, #t~string61.base, 2 + #t~string61.offset, 1);call #t~string63.base, #t~string63.offset := #Ultimate.alloc(10);call #t~string65.base, #t~string65.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string65.base, #t~string65.offset, 1);call write~init~int(112, #t~string65.base, 1 + #t~string65.offset, 1);call write~init~int(0, #t~string65.base, 2 + #t~string65.offset, 1);call #t~string67.base, #t~string67.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string67.base, #t~string67.offset, 1);call write~init~int(111, #t~string67.base, 1 + #t~string67.offset, 1);call write~init~int(119, #t~string67.base, 2 + #t~string67.offset, 1);call write~init~int(110, #t~string67.base, 3 + #t~string67.offset, 1);call write~init~int(0, #t~string67.base, 4 + #t~string67.offset, 1);call #t~string69.base, #t~string69.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string69.base, #t~string69.offset, 1);call write~init~int(73, #t~string69.base, 1 + #t~string69.offset, 1);call write~init~int(76, #t~string69.base, 2 + #t~string69.offset, 1);call write~init~int(95, #t~string69.base, 3 + #t~string69.offset, 1);call write~init~int(112, #t~string69.base, 4 + #t~string69.offset, 1);call write~init~int(58, #t~string69.base, 5 + #t~string69.offset, 1);call write~init~int(0, #t~string69.base, 6 + #t~string69.offset, 1);call #t~string71.base, #t~string71.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string71.base, #t~string71.offset, 1);call write~init~int(37, #t~string71.base, 1 + #t~string71.offset, 1);call write~init~int(105, #t~string71.base, 2 + #t~string71.offset, 1);call write~init~int(0, #t~string71.base, 3 + #t~string71.offset, 1);call #t~string73.base, #t~string73.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string73.base, #t~string73.offset, 1);call write~init~int(37, #t~string73.base, 1 + #t~string73.offset, 1);call write~init~int(105, #t~string73.base, 2 + #t~string73.offset, 1);call write~init~int(0, #t~string73.base, 3 + #t~string73.offset, 1);call #t~string75.base, #t~string75.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string75.base, #t~string75.offset, 1);call write~init~int(37, #t~string75.base, 1 + #t~string75.offset, 1);call write~init~int(105, #t~string75.base, 2 + #t~string75.offset, 1);call write~init~int(0, #t~string75.base, 3 + #t~string75.offset, 1);call #t~string77.base, #t~string77.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string77.base, #t~string77.offset, 1);call write~init~int(37, #t~string77.base, 1 + #t~string77.offset, 1);call write~init~int(105, #t~string77.base, 2 + #t~string77.offset, 1);call write~init~int(0, #t~string77.base, 3 + #t~string77.offset, 1);call #t~string79.base, #t~string79.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string79.base, #t~string79.offset, 1);call write~init~int(37, #t~string79.base, 1 + #t~string79.offset, 1);call write~init~int(105, #t~string79.base, 2 + #t~string79.offset, 1);call write~init~int(0, #t~string79.base, 3 + #t~string79.offset, 1);call #t~string81.base, #t~string81.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string81.base, #t~string81.offset, 1);call write~init~int(70, #t~string81.base, 1 + #t~string81.offset, 1);call write~init~int(95, #t~string81.base, 2 + #t~string81.offset, 1);call write~init~int(112, #t~string81.base, 3 + #t~string81.offset, 1);call write~init~int(58, #t~string81.base, 4 + #t~string81.offset, 1);call write~init~int(0, #t~string81.base, 5 + #t~string81.offset, 1);call #t~string84.base, #t~string84.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string84.base, #t~string84.offset, 1);call write~init~int(37, #t~string84.base, 1 + #t~string84.offset, 1);call write~init~int(105, #t~string84.base, 2 + #t~string84.offset, 1);call write~init~int(0, #t~string84.base, 3 + #t~string84.offset, 1);call #t~string87.base, #t~string87.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string87.base, #t~string87.offset, 1);call write~init~int(37, #t~string87.base, 1 + #t~string87.offset, 1);call write~init~int(105, #t~string87.base, 2 + #t~string87.offset, 1);call write~init~int(0, #t~string87.base, 3 + #t~string87.offset, 1);call #t~string90.base, #t~string90.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string90.base, #t~string90.offset, 1);call write~init~int(37, #t~string90.base, 1 + #t~string90.offset, 1);call write~init~int(105, #t~string90.base, 2 + #t~string90.offset, 1);call write~init~int(0, #t~string90.base, 3 + #t~string90.offset, 1);call #t~string93.base, #t~string93.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string93.base, #t~string93.offset, 1);call write~init~int(37, #t~string93.base, 1 + #t~string93.offset, 1);call write~init~int(105, #t~string93.base, 2 + #t~string93.offset, 1);call write~init~int(0, #t~string93.base, 3 + #t~string93.offset, 1);call #t~string96.base, #t~string96.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string96.base, #t~string96.offset, 1);call write~init~int(37, #t~string96.base, 1 + #t~string96.offset, 1);call write~init~int(105, #t~string96.base, 2 + #t~string96.offset, 1);call write~init~int(0, #t~string96.base, 3 + #t~string96.offset, 1);call #t~string98.base, #t~string98.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string98.base, #t~string98.offset, 1);call write~init~int(0, #t~string98.base, 1 + #t~string98.offset, 1);~cleanupTimeShifts~0 := 12;~expectedDirection~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;call #t~string154.base, #t~string154.offset := #Ultimate.alloc(30);call #t~string155.base, #t~string155.offset := #Ultimate.alloc(9);call #t~string156.base, #t~string156.offset := #Ultimate.alloc(21);call #t~string157.base, #t~string157.offset := #Ultimate.alloc(30);call #t~string158.base, #t~string158.offset := #Ultimate.alloc(9);call #t~string159.base, #t~string159.offset := #Ultimate.alloc(21);call #t~string163.base, #t~string163.offset := #Ultimate.alloc(30);call #t~string164.base, #t~string164.offset := #Ultimate.alloc(9);call #t~string165.base, #t~string165.offset := #Ultimate.alloc(25);call #t~string166.base, #t~string166.offset := #Ultimate.alloc(30);call #t~string167.base, #t~string167.offset := #Ultimate.alloc(9);call #t~string168.base, #t~string168.offset := #Ultimate.alloc(25); 20445#L-1 havoc main_#res;havoc main_#t~ret134, main_~retValue_acc~21, main_~tmp~25;havoc main_~retValue_acc~21;havoc main_~tmp~25; 19941#L3055 havoc valid_product_#res;havoc valid_product_~retValue_acc~26;havoc valid_product_~retValue_acc~26;valid_product_~retValue_acc~26 := 1;valid_product_#res := valid_product_~retValue_acc~26; 18799#L3063 main_#t~ret134 := valid_product_#res;main_~tmp~25 := main_#t~ret134;havoc main_#t~ret134; 18767#L2358 assume 0 != main_~tmp~25; 18768#L2332 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 19636#L2447 havoc bobCall_#t~ret122, bobCall_~tmp~17;havoc bobCall_~tmp~17;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~18;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~18; 21762#L1741 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~18 := 4;getOrigin_#res := getOrigin_~retValue_acc~18; 21707#L1766 bobCall_#t~ret122 := getOrigin_#res;bobCall_~tmp~17 := bobCall_#t~ret122;havoc bobCall_#t~ret122;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~17;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 19099#L2725 assume 0 == initPersonOnFloor_~floor; 19100#L2726 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 20178#L2833-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 20127#L2517 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 18959#L2529-2 havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret107, __utac_acc__Specification3_spec__1_#t~ret108, __utac_acc__Specification3_spec__1_#t~ret109, __utac_acc__Specification3_spec__1_#t~ret110, __utac_acc__Specification3_spec__1_#t~ret111, __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~15, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~7, __utac_acc__Specification3_spec__1_~tmp___2~5, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~15;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~7;havoc __utac_acc__Specification3_spec__1_~tmp___2~5;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 18960#L303 __utac_acc__Specification3_spec__1_#t~ret107 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~15 := __utac_acc__Specification3_spec__1_#t~ret107;havoc __utac_acc__Specification3_spec__1_#t~ret107;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~15;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~4;havoc getCurrentHeading_~retValue_acc~4;getCurrentHeading_~retValue_acc~4 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~4; 20729#L355 __utac_acc__Specification3_spec__1_#t~ret108 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret108;havoc __utac_acc__Specification3_spec__1_#t~ret108; 19133#L1840 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 19134#L1902 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~3;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~3; 23343#L320-5 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~3 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~3; 21703#L341-5 __utac_acc__Specification3_spec__1_#t~ret114 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret114;havoc __utac_acc__Specification3_spec__1_#t~ret114; 23013#L1906 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 21774#L1946 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 22976#L2454 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 22908#L2481 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 24626#L1590 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 21301#L972 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 20735#L303-1 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 20736#L976 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 19371#L989 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 18576#L1127 assume !(0 != timeShift_~tmp___9~2); 18578#L1218 assume !(1 == ~doorState~0); 23029#L1218-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 22974#L2454-3 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 22877#L2481-3 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 24628#L1590-1 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 22158#L855 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 20734#L303-2 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 20721#L868 timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 22393#L1226 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 22394#L912 assume !(1 == ~currentHeading~0); 19892#L922 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 19893#L922-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 26563#L928-5 havoc __utac_acc__Specification3_spec__2_#t~ret119, __utac_acc__Specification3_spec__2_#t~ret120, __utac_acc__Specification3_spec__2_~tmp~16, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~16;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 26560#L1971 assume !(-1 == ~expectedDirection~0); 26557#L1983 assume !(1 == ~expectedDirection~0); 19566#L1984 havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret107, __utac_acc__Specification3_spec__1_#t~ret108, __utac_acc__Specification3_spec__1_#t~ret109, __utac_acc__Specification3_spec__1_#t~ret110, __utac_acc__Specification3_spec__1_#t~ret111, __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~15, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~7, __utac_acc__Specification3_spec__1_~tmp___2~5, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~15;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~7;havoc __utac_acc__Specification3_spec__1_~tmp___2~5;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 19567#L303-4 __utac_acc__Specification3_spec__1_#t~ret107 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~15 := __utac_acc__Specification3_spec__1_#t~ret107;havoc __utac_acc__Specification3_spec__1_#t~ret107;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~15;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~4;havoc getCurrentHeading_~retValue_acc~4;getCurrentHeading_~retValue_acc~4 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~4; 20732#L355-3 __utac_acc__Specification3_spec__1_#t~ret108 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret108;havoc __utac_acc__Specification3_spec__1_#t~ret108; 26511#L1840-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 19132#L1902-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~3;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~3; 23332#L320-17 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~3 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~3; 21955#L341-17 __utac_acc__Specification3_spec__1_#t~ret114 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret114;havoc __utac_acc__Specification3_spec__1_#t~ret114; 22988#L1906-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 21777#L1946-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 23015#L2454-25 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 22437#L2481-25 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 24830#L1590-3 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 21303#L972-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 20730#L303-5 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 20731#L976-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 19376#L989-1 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 18584#L1127-1 assume !(0 != timeShift_~tmp___9~2); 18586#L1218-3 assume !(1 == ~doorState~0); 23027#L1218-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 23016#L2454-28 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 22398#L2481-28 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 24833#L1590-4 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 22165#L855-2 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 22166#L303-6 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 20727#L868-2 timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 22350#L1226-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 22352#L912-3 assume !(1 == ~currentHeading~0); 19885#L922-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 19886#L922-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 19632#L928-11 havoc __utac_acc__Specification3_spec__2_#t~ret119, __utac_acc__Specification3_spec__2_#t~ret120, __utac_acc__Specification3_spec__2_~tmp~16, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~16;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 26574#L1971-1 assume !(-1 == ~expectedDirection~0); 26572#L1983-1 assume !(1 == ~expectedDirection~0); 26548#L1984-1 havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret107, __utac_acc__Specification3_spec__1_#t~ret108, __utac_acc__Specification3_spec__1_#t~ret109, __utac_acc__Specification3_spec__1_#t~ret110, __utac_acc__Specification3_spec__1_#t~ret111, __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~15, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~7, __utac_acc__Specification3_spec__1_~tmp___2~5, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~15;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~7;havoc __utac_acc__Specification3_spec__1_~tmp___2~5;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 26547#L303-8 __utac_acc__Specification3_spec__1_#t~ret107 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~15 := __utac_acc__Specification3_spec__1_#t~ret107;havoc __utac_acc__Specification3_spec__1_#t~ret107;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~15;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~4;havoc getCurrentHeading_~retValue_acc~4;getCurrentHeading_~retValue_acc~4 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~4; 26529#L355-6 __utac_acc__Specification3_spec__1_#t~ret108 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret108;havoc __utac_acc__Specification3_spec__1_#t~ret108; 19125#L1840-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 19126#L1902-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~3;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~3; 23309#L320-29 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~3 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~3; 21924#L341-29 __utac_acc__Specification3_spec__1_#t~ret114 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret114;havoc __utac_acc__Specification3_spec__1_#t~ret114; 22795#L1906-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 21756#L1946-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 22991#L2454-50 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 22321#L2481-50 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 24837#L1590-6 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 21305#L972-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 21307#L303-9 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 21554#L976-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 19362#L989-2 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 18587#L1127-2 assume !(0 != timeShift_~tmp___9~2); 18589#L1218-6 assume 1 == ~doorState~0;~doorState~0 := 0; 23028#L1218-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 22995#L2454-53 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 22329#L2481-53 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 24839#L1590-7 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 22270#L855-4 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 22271#L303-10 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 20693#L868-4 timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 22362#L1226-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 22363#L912-6 assume !(1 == ~currentHeading~0); 19633#L922-18 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 19634#L922-20 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 27420#L928-17 havoc __utac_acc__Specification3_spec__2_#t~ret119, __utac_acc__Specification3_spec__2_#t~ret120, __utac_acc__Specification3_spec__2_~tmp~16, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~16;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 27418#L1971-2 assume !(-1 == ~expectedDirection~0); 27415#L1983-2 assume !(1 == ~expectedDirection~0); 27413#L1984-2 havoc bobCall_#t~ret122, bobCall_~tmp~17;havoc bobCall_~tmp~17;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~18;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~18; 27412#L1741-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~18 := 4;getOrigin_#res := getOrigin_~retValue_acc~18; 27406#L1766-1 bobCall_#t~ret122 := getOrigin_#res;bobCall_~tmp~17 := bobCall_#t~ret122;havoc bobCall_#t~ret122;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~17;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 27405#L2725-1 assume 0 == initPersonOnFloor_~floor; 27378#L2726-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 25224#L2833-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 20118#L2517-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 18951#L2529-5 havoc cleanup_#t~ret128, cleanup_#t~ret129, cleanup_~i~3, cleanup_~tmp~23, cleanup_~tmp___0~12, cleanup_~__cil_tmp4~0;havoc cleanup_~i~3;havoc cleanup_~tmp~23;havoc cleanup_~tmp___0~12;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret107, __utac_acc__Specification3_spec__1_#t~ret108, __utac_acc__Specification3_spec__1_#t~ret109, __utac_acc__Specification3_spec__1_#t~ret110, __utac_acc__Specification3_spec__1_#t~ret111, __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~15, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~7, __utac_acc__Specification3_spec__1_~tmp___2~5, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~15;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~7;havoc __utac_acc__Specification3_spec__1_~tmp___2~5;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 18954#L303-12 __utac_acc__Specification3_spec__1_#t~ret107 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~15 := __utac_acc__Specification3_spec__1_#t~ret107;havoc __utac_acc__Specification3_spec__1_#t~ret107;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~15;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~4;havoc getCurrentHeading_~retValue_acc~4;getCurrentHeading_~retValue_acc~4 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~4; 26463#L355-9 __utac_acc__Specification3_spec__1_#t~ret108 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret108;havoc __utac_acc__Specification3_spec__1_#t~ret108; 26462#L1840-3 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 19243#L1841-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~3;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~3; 19244#L320-36 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~3 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~3; 21878#L341-36 __utac_acc__Specification3_spec__1_#t~ret109 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~3 := __utac_acc__Specification3_spec__1_#t~ret109;havoc __utac_acc__Specification3_spec__1_#t~ret109; 21399#L1845-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3;~expectedDirection~0 := 1; 20497#L1946-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 25969#L2454-75 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 25966#L2481-75 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 25965#L1590-9 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 25964#L972-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 25958#L303-13 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 25941#L976-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 25939#L989-3 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 25938#L1127-3 assume !(0 != timeShift_~tmp___9~2); 25937#L1218-9 assume !(1 == ~doorState~0); 25936#L1218-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 25935#L2454-78 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 25930#L2481-78 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 25929#L1590-10 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 25928#L855-6 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 25364#L303-14 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 25362#L868-6 timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 25359#L1226-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 25358#L912-9 assume !(1 == ~currentHeading~0); 19629#L922-27 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 19630#L922-29 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 28269#L928-23 havoc __utac_acc__Specification3_spec__2_#t~ret119, __utac_acc__Specification3_spec__2_#t~ret120, __utac_acc__Specification3_spec__2_~tmp~16, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~16;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 28267#L1971-3 assume !(-1 == ~expectedDirection~0); 28264#L1983-3 assume !(1 == ~expectedDirection~0); 19563#L1984-3 cleanup_~i~3 := 0; 19564#L2164-2 [2018-11-28 12:13:23,992 INFO L796 eck$LassoCheckResult]: Loop: 19564#L2164-2 assume !false; 20117#L2165 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 20087#L2168 assume cleanup_~i~3 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~0;havoc isBlocked_~retValue_acc~0;isBlocked_~retValue_acc~0 := 0;isBlocked_#res := isBlocked_~retValue_acc~0; 20088#L130 cleanup_#t~ret128 := isBlocked_#res;cleanup_~tmp___0~12 := cleanup_#t~ret128;havoc cleanup_#t~ret128; 20041#L2172 assume 1 != cleanup_~tmp___0~12; 20037#L2172-1 havoc isIdle_#res;havoc isIdle_#t~ret8, isIdle_~retValue_acc~7, isIdle_~tmp~4;havoc isIdle_~retValue_acc~7;havoc isIdle_~tmp~4;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret3, anyStopRequested_#t~ret4, anyStopRequested_#t~ret5, anyStopRequested_#t~ret6, anyStopRequested_#t~ret7, anyStopRequested_~retValue_acc~6, anyStopRequested_~tmp~3, anyStopRequested_~tmp___0~0, anyStopRequested_~tmp___1~0, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~6;havoc anyStopRequested_~tmp~3;havoc anyStopRequested_~tmp___0~0;havoc anyStopRequested_~tmp___1~0;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 20038#L2454-100 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 22477#L2481-100 anyStopRequested_#t~ret3 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret3;havoc anyStopRequested_#t~ret3; 19931#L411 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~6 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~6; 18603#L475 isIdle_#t~ret8 := anyStopRequested_#res;isIdle_~tmp~4 := isIdle_#t~ret8;havoc isIdle_#t~ret8;isIdle_~retValue_acc~7 := (if 0 == isIdle_~tmp~4 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~7; 27370#L488 cleanup_#t~ret129 := isIdle_#res;cleanup_~tmp~23 := cleanup_#t~ret129;havoc cleanup_#t~ret129; 18579#L2184 assume !(0 != cleanup_~tmp~23);havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret107, __utac_acc__Specification3_spec__1_#t~ret108, __utac_acc__Specification3_spec__1_#t~ret109, __utac_acc__Specification3_spec__1_#t~ret110, __utac_acc__Specification3_spec__1_#t~ret111, __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~15, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~7, __utac_acc__Specification3_spec__1_~tmp___2~5, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~15;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~7;havoc __utac_acc__Specification3_spec__1_~tmp___2~5;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 18580#L303-16 __utac_acc__Specification3_spec__1_#t~ret107 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~15 := __utac_acc__Specification3_spec__1_#t~ret107;havoc __utac_acc__Specification3_spec__1_#t~ret107;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~15;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~4;havoc getCurrentHeading_~retValue_acc~4;getCurrentHeading_~retValue_acc~4 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~4; 23198#L355-12 __utac_acc__Specification3_spec__1_#t~ret108 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret108;havoc __utac_acc__Specification3_spec__1_#t~ret108; 24917#L1840-4 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 19251#L1841-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~3;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~3; 19252#L320-48 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~3 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~3; 21694#L341-48 __utac_acc__Specification3_spec__1_#t~ret109 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~3 := __utac_acc__Specification3_spec__1_#t~ret109;havoc __utac_acc__Specification3_spec__1_#t~ret109; 21393#L1845-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3;~expectedDirection~0 := 1; 20480#L1946-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 25814#L2454-105 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 25813#L2481-105 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 25812#L1590-12 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 25806#L972-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 25804#L303-17 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 25798#L976-4 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 25796#L989-4 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 25794#L1127-4 assume !(0 != timeShift_~tmp___9~2); 25793#L1218-12 assume 1 == ~doorState~0;~doorState~0 := 0; 25792#L1218-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 25790#L2454-108 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 25786#L2481-108 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 25785#L1590-13 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 25784#L855-8 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 25438#L303-18 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 25436#L868-8 timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 25435#L1226-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 25434#L912-12 assume !(1 == ~currentHeading~0); 19619#L922-36 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 19620#L922-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 19422#L928-29 havoc __utac_acc__Specification3_spec__2_#t~ret119, __utac_acc__Specification3_spec__2_#t~ret120, __utac_acc__Specification3_spec__2_~tmp~16, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~16;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 19423#L1971-4 assume !(-1 == ~expectedDirection~0); 19520#L1983-4 assume !(1 == ~expectedDirection~0); 19521#L1984-4 cleanup_~i~3 := 1 + cleanup_~i~3; 19564#L2164-2 [2018-11-28 12:13:23,997 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 12:13:23,997 INFO L82 PathProgramCache]: Analyzing trace with hash -761631065, now seen corresponding path program 1 times [2018-11-28 12:13:23,998 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 12:13:23,998 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 12:13:23,998 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:13:23,999 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-28 12:13:23,999 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:13:24,024 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 12:13:24,091 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 12:13:24,091 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 12:13:24,092 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-28 12:13:24,092 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-28 12:13:24,092 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 12:13:24,092 INFO L82 PathProgramCache]: Analyzing trace with hash 931050651, now seen corresponding path program 1 times [2018-11-28 12:13:24,092 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 12:13:24,092 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 12:13:24,093 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:13:24,093 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-28 12:13:24,093 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:13:24,100 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 12:13:24,131 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 12:13:24,131 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 12:13:24,131 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-28 12:13:24,132 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-28 12:13:24,132 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-11-28 12:13:24,132 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-28 12:13:24,132 INFO L87 Difference]: Start difference. First operand 11362 states and 21330 transitions. cyclomatic complexity: 9969 Second operand 5 states. [2018-11-28 12:13:24,710 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-28 12:13:24,710 INFO L93 Difference]: Finished difference Result 11878 states and 22175 transitions. [2018-11-28 12:13:24,711 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2018-11-28 12:13:24,711 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 11878 states and 22175 transitions. [2018-11-28 12:13:24,851 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 2788 [2018-11-28 12:13:24,897 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 11878 states to 11878 states and 22175 transitions. [2018-11-28 12:13:24,897 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 11878 [2018-11-28 12:13:24,904 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 11878 [2018-11-28 12:13:24,905 INFO L73 IsDeterministic]: Start isDeterministic. Operand 11878 states and 22175 transitions. [2018-11-28 12:13:24,916 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-28 12:13:24,916 INFO L705 BuchiCegarLoop]: Abstraction has 11878 states and 22175 transitions. [2018-11-28 12:13:24,928 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 11878 states and 22175 transitions. [2018-11-28 12:13:25,056 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 11878 to 11362. [2018-11-28 12:13:25,056 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 11362 states. [2018-11-28 12:13:25,072 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 11362 states to 11362 states and 21303 transitions. [2018-11-28 12:13:25,072 INFO L728 BuchiCegarLoop]: Abstraction has 11362 states and 21303 transitions. [2018-11-28 12:13:25,072 INFO L608 BuchiCegarLoop]: Abstraction has 11362 states and 21303 transitions. [2018-11-28 12:13:25,073 INFO L442 BuchiCegarLoop]: ======== Iteration 3============ [2018-11-28 12:13:25,073 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 11362 states and 21303 transitions. [2018-11-28 12:13:25,100 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 2564 [2018-11-28 12:13:25,101 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-28 12:13:25,101 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-28 12:13:25,104 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 12:13:25,104 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 12:13:25,105 INFO L794 eck$LassoCheckResult]: Stem: 43701#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string53.base, #t~string53.offset := #Ultimate.alloc(10);call #t~string55.base, #t~string55.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string55.base, #t~string55.offset, 1);call write~init~int(95, #t~string55.base, 1 + #t~string55.offset, 1);call write~init~int(93, #t~string55.base, 2 + #t~string55.offset, 1);call write~init~int(0, #t~string55.base, 3 + #t~string55.offset, 1);call #t~string57.base, #t~string57.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string57.base, #t~string57.offset, 1);call write~init~int(93, #t~string57.base, 1 + #t~string57.offset, 1);call write~init~int(32, #t~string57.base, 2 + #t~string57.offset, 1);call write~init~int(0, #t~string57.base, 3 + #t~string57.offset, 1);call #t~string59.base, #t~string59.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string59.base, #t~string59.offset, 1);call write~init~int(97, #t~string59.base, 1 + #t~string59.offset, 1);call write~init~int(116, #t~string59.base, 2 + #t~string59.offset, 1);call write~init~int(32, #t~string59.base, 3 + #t~string59.offset, 1);call write~init~int(0, #t~string59.base, 4 + #t~string59.offset, 1);call #t~string61.base, #t~string61.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string61.base, #t~string61.offset, 1);call write~init~int(105, #t~string61.base, 1 + #t~string61.offset, 1);call write~init~int(0, #t~string61.base, 2 + #t~string61.offset, 1);call #t~string63.base, #t~string63.offset := #Ultimate.alloc(10);call #t~string65.base, #t~string65.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string65.base, #t~string65.offset, 1);call write~init~int(112, #t~string65.base, 1 + #t~string65.offset, 1);call write~init~int(0, #t~string65.base, 2 + #t~string65.offset, 1);call #t~string67.base, #t~string67.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string67.base, #t~string67.offset, 1);call write~init~int(111, #t~string67.base, 1 + #t~string67.offset, 1);call write~init~int(119, #t~string67.base, 2 + #t~string67.offset, 1);call write~init~int(110, #t~string67.base, 3 + #t~string67.offset, 1);call write~init~int(0, #t~string67.base, 4 + #t~string67.offset, 1);call #t~string69.base, #t~string69.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string69.base, #t~string69.offset, 1);call write~init~int(73, #t~string69.base, 1 + #t~string69.offset, 1);call write~init~int(76, #t~string69.base, 2 + #t~string69.offset, 1);call write~init~int(95, #t~string69.base, 3 + #t~string69.offset, 1);call write~init~int(112, #t~string69.base, 4 + #t~string69.offset, 1);call write~init~int(58, #t~string69.base, 5 + #t~string69.offset, 1);call write~init~int(0, #t~string69.base, 6 + #t~string69.offset, 1);call #t~string71.base, #t~string71.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string71.base, #t~string71.offset, 1);call write~init~int(37, #t~string71.base, 1 + #t~string71.offset, 1);call write~init~int(105, #t~string71.base, 2 + #t~string71.offset, 1);call write~init~int(0, #t~string71.base, 3 + #t~string71.offset, 1);call #t~string73.base, #t~string73.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string73.base, #t~string73.offset, 1);call write~init~int(37, #t~string73.base, 1 + #t~string73.offset, 1);call write~init~int(105, #t~string73.base, 2 + #t~string73.offset, 1);call write~init~int(0, #t~string73.base, 3 + #t~string73.offset, 1);call #t~string75.base, #t~string75.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string75.base, #t~string75.offset, 1);call write~init~int(37, #t~string75.base, 1 + #t~string75.offset, 1);call write~init~int(105, #t~string75.base, 2 + #t~string75.offset, 1);call write~init~int(0, #t~string75.base, 3 + #t~string75.offset, 1);call #t~string77.base, #t~string77.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string77.base, #t~string77.offset, 1);call write~init~int(37, #t~string77.base, 1 + #t~string77.offset, 1);call write~init~int(105, #t~string77.base, 2 + #t~string77.offset, 1);call write~init~int(0, #t~string77.base, 3 + #t~string77.offset, 1);call #t~string79.base, #t~string79.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string79.base, #t~string79.offset, 1);call write~init~int(37, #t~string79.base, 1 + #t~string79.offset, 1);call write~init~int(105, #t~string79.base, 2 + #t~string79.offset, 1);call write~init~int(0, #t~string79.base, 3 + #t~string79.offset, 1);call #t~string81.base, #t~string81.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string81.base, #t~string81.offset, 1);call write~init~int(70, #t~string81.base, 1 + #t~string81.offset, 1);call write~init~int(95, #t~string81.base, 2 + #t~string81.offset, 1);call write~init~int(112, #t~string81.base, 3 + #t~string81.offset, 1);call write~init~int(58, #t~string81.base, 4 + #t~string81.offset, 1);call write~init~int(0, #t~string81.base, 5 + #t~string81.offset, 1);call #t~string84.base, #t~string84.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string84.base, #t~string84.offset, 1);call write~init~int(37, #t~string84.base, 1 + #t~string84.offset, 1);call write~init~int(105, #t~string84.base, 2 + #t~string84.offset, 1);call write~init~int(0, #t~string84.base, 3 + #t~string84.offset, 1);call #t~string87.base, #t~string87.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string87.base, #t~string87.offset, 1);call write~init~int(37, #t~string87.base, 1 + #t~string87.offset, 1);call write~init~int(105, #t~string87.base, 2 + #t~string87.offset, 1);call write~init~int(0, #t~string87.base, 3 + #t~string87.offset, 1);call #t~string90.base, #t~string90.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string90.base, #t~string90.offset, 1);call write~init~int(37, #t~string90.base, 1 + #t~string90.offset, 1);call write~init~int(105, #t~string90.base, 2 + #t~string90.offset, 1);call write~init~int(0, #t~string90.base, 3 + #t~string90.offset, 1);call #t~string93.base, #t~string93.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string93.base, #t~string93.offset, 1);call write~init~int(37, #t~string93.base, 1 + #t~string93.offset, 1);call write~init~int(105, #t~string93.base, 2 + #t~string93.offset, 1);call write~init~int(0, #t~string93.base, 3 + #t~string93.offset, 1);call #t~string96.base, #t~string96.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string96.base, #t~string96.offset, 1);call write~init~int(37, #t~string96.base, 1 + #t~string96.offset, 1);call write~init~int(105, #t~string96.base, 2 + #t~string96.offset, 1);call write~init~int(0, #t~string96.base, 3 + #t~string96.offset, 1);call #t~string98.base, #t~string98.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string98.base, #t~string98.offset, 1);call write~init~int(0, #t~string98.base, 1 + #t~string98.offset, 1);~cleanupTimeShifts~0 := 12;~expectedDirection~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;call #t~string154.base, #t~string154.offset := #Ultimate.alloc(30);call #t~string155.base, #t~string155.offset := #Ultimate.alloc(9);call #t~string156.base, #t~string156.offset := #Ultimate.alloc(21);call #t~string157.base, #t~string157.offset := #Ultimate.alloc(30);call #t~string158.base, #t~string158.offset := #Ultimate.alloc(9);call #t~string159.base, #t~string159.offset := #Ultimate.alloc(21);call #t~string163.base, #t~string163.offset := #Ultimate.alloc(30);call #t~string164.base, #t~string164.offset := #Ultimate.alloc(9);call #t~string165.base, #t~string165.offset := #Ultimate.alloc(25);call #t~string166.base, #t~string166.offset := #Ultimate.alloc(30);call #t~string167.base, #t~string167.offset := #Ultimate.alloc(9);call #t~string168.base, #t~string168.offset := #Ultimate.alloc(25); 43702#L-1 havoc main_#res;havoc main_#t~ret134, main_~retValue_acc~21, main_~tmp~25;havoc main_~retValue_acc~21;havoc main_~tmp~25; 43184#L3055 havoc valid_product_#res;havoc valid_product_~retValue_acc~26;havoc valid_product_~retValue_acc~26;valid_product_~retValue_acc~26 := 1;valid_product_#res := valid_product_~retValue_acc~26; 42058#L3063 main_#t~ret134 := valid_product_#res;main_~tmp~25 := main_#t~ret134;havoc main_#t~ret134; 42026#L2358 assume 0 != main_~tmp~25; 42027#L2332 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 42883#L2447 havoc bobCall_#t~ret122, bobCall_~tmp~17;havoc bobCall_~tmp~17;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~18;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~18; 45021#L1741 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~18 := 4;getOrigin_#res := getOrigin_~retValue_acc~18; 44968#L1766 bobCall_#t~ret122 := getOrigin_#res;bobCall_~tmp~17 := bobCall_#t~ret122;havoc bobCall_#t~ret122;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~17;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 42352#L2725 assume 0 == initPersonOnFloor_~floor; 42353#L2726 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 43427#L2833-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 43376#L2517 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 42218#L2529-2 havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret107, __utac_acc__Specification3_spec__1_#t~ret108, __utac_acc__Specification3_spec__1_#t~ret109, __utac_acc__Specification3_spec__1_#t~ret110, __utac_acc__Specification3_spec__1_#t~ret111, __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~15, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~7, __utac_acc__Specification3_spec__1_~tmp___2~5, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~15;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~7;havoc __utac_acc__Specification3_spec__1_~tmp___2~5;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 42219#L303 __utac_acc__Specification3_spec__1_#t~ret107 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~15 := __utac_acc__Specification3_spec__1_#t~ret107;havoc __utac_acc__Specification3_spec__1_#t~ret107;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~15;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~4;havoc getCurrentHeading_~retValue_acc~4;getCurrentHeading_~retValue_acc~4 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~4; 43986#L355 __utac_acc__Specification3_spec__1_#t~ret108 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret108;havoc __utac_acc__Specification3_spec__1_#t~ret108; 42390#L1840 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 42391#L1902 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~3;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~3; 46595#L320-5 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~3 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~3; 44964#L341-5 __utac_acc__Specification3_spec__1_#t~ret114 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret114;havoc __utac_acc__Specification3_spec__1_#t~ret114; 46264#L1906 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 45033#L1946 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 46227#L2454 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 46162#L2481 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 47881#L1590 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 44557#L972 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 43993#L303-1 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 43994#L976 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 42621#L989 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 41837#L1127 assume !(0 != timeShift_~tmp___9~2); 41839#L1218 assume !(1 == ~doorState~0); 46280#L1218-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 46225#L2454-3 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 46127#L2481-3 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 47883#L1590-1 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 45414#L855 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 43992#L303-2 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 43978#L868 timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 45647#L1226 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 45648#L912 assume !(1 == ~currentHeading~0); 43135#L922 assume !(0 == ~currentFloorID~0); 43131#L922-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 42748#L928-5 havoc __utac_acc__Specification3_spec__2_#t~ret119, __utac_acc__Specification3_spec__2_#t~ret120, __utac_acc__Specification3_spec__2_~tmp~16, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~16;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 42749#L1971 assume !(-1 == ~expectedDirection~0); 42782#L1983 assume !(1 == ~expectedDirection~0); 42783#L1984 havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret107, __utac_acc__Specification3_spec__1_#t~ret108, __utac_acc__Specification3_spec__1_#t~ret109, __utac_acc__Specification3_spec__1_#t~ret110, __utac_acc__Specification3_spec__1_#t~ret111, __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~15, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~7, __utac_acc__Specification3_spec__1_~tmp___2~5, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~15;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~7;havoc __utac_acc__Specification3_spec__1_~tmp___2~5;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 42815#L303-4 __utac_acc__Specification3_spec__1_#t~ret107 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~15 := __utac_acc__Specification3_spec__1_#t~ret107;havoc __utac_acc__Specification3_spec__1_#t~ret107;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~15;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~4;havoc getCurrentHeading_~retValue_acc~4;getCurrentHeading_~retValue_acc~4 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~4; 48245#L355-3 __utac_acc__Specification3_spec__1_#t~ret108 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret108;havoc __utac_acc__Specification3_spec__1_#t~ret108; 48246#L1840-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 46830#L1902-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~3;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~3; 46584#L320-17 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~3 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~3; 45213#L341-17 __utac_acc__Specification3_spec__1_#t~ret114 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret114;havoc __utac_acc__Specification3_spec__1_#t~ret114; 46239#L1906-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 45036#L1946-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 46266#L2454-25 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 45691#L2481-25 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 48087#L1590-3 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 44559#L972-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 43987#L303-5 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 43988#L976-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 42626#L989-1 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 41843#L1127-1 assume !(0 != timeShift_~tmp___9~2); 41845#L1218-3 assume !(1 == ~doorState~0); 46278#L1218-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 46267#L2454-28 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 45652#L2481-28 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 48090#L1590-4 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 45421#L855-2 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 45422#L303-6 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 43984#L868-2 timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 45606#L1226-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 45607#L912-3 assume !(1 == ~currentHeading~0); 43128#L922-9 assume !(0 == ~currentFloorID~0); 43130#L922-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 42742#L928-11 havoc __utac_acc__Specification3_spec__2_#t~ret119, __utac_acc__Specification3_spec__2_#t~ret120, __utac_acc__Specification3_spec__2_~tmp~16, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~16;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 42743#L1971-1 assume !(-1 == ~expectedDirection~0); 42760#L1983-1 assume !(1 == ~expectedDirection~0); 42761#L1984-1 havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret107, __utac_acc__Specification3_spec__1_#t~ret108, __utac_acc__Specification3_spec__1_#t~ret109, __utac_acc__Specification3_spec__1_#t~ret110, __utac_acc__Specification3_spec__1_#t~ret111, __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~15, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~7, __utac_acc__Specification3_spec__1_~tmp___2~5, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~15;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~7;havoc __utac_acc__Specification3_spec__1_~tmp___2~5;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 42814#L303-8 __utac_acc__Specification3_spec__1_#t~ret107 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~15 := __utac_acc__Specification3_spec__1_#t~ret107;havoc __utac_acc__Specification3_spec__1_#t~ret107;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~15;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~4;havoc getCurrentHeading_~retValue_acc~4;getCurrentHeading_~retValue_acc~4 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~4; 48623#L355-6 __utac_acc__Specification3_spec__1_#t~ret108 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret108;havoc __utac_acc__Specification3_spec__1_#t~ret108; 48621#L1840-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 46832#L1902-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~3;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~3; 46561#L320-29 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~3 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~3; 45182#L341-29 __utac_acc__Specification3_spec__1_#t~ret114 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret114;havoc __utac_acc__Specification3_spec__1_#t~ret114; 46046#L1906-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 45015#L1946-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 46241#L2454-50 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 45575#L2481-50 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 48094#L1590-6 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 44561#L972-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 44563#L303-9 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 44819#L976-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 42612#L989-2 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 41846#L1127-2 assume !(0 != timeShift_~tmp___9~2); 41848#L1218-6 assume 1 == ~doorState~0;~doorState~0 := 0; 46279#L1218-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 46245#L2454-53 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 45585#L2481-53 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 48095#L1590-7 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 45526#L855-4 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 45527#L303-10 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 43950#L868-4 timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 45614#L1226-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 45615#L912-6 assume !(1 == ~currentHeading~0); 42880#L922-18 assume !(0 == ~currentFloorID~0); 42882#L922-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 42732#L928-17 havoc __utac_acc__Specification3_spec__2_#t~ret119, __utac_acc__Specification3_spec__2_#t~ret120, __utac_acc__Specification3_spec__2_~tmp~16, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~16;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 42733#L1971-2 assume !(-1 == ~expectedDirection~0); 42767#L1983-2 assume !(1 == ~expectedDirection~0); 42768#L1984-2 havoc bobCall_#t~ret122, bobCall_~tmp~17;havoc bobCall_~tmp~17;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~18;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~18; 42812#L1741-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~18 := 4;getOrigin_#res := getOrigin_~retValue_acc~18; 44971#L1766-1 bobCall_#t~ret122 := getOrigin_#res;bobCall_~tmp~17 := bobCall_#t~ret122;havoc bobCall_#t~ret122;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~17;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 42337#L2725-1 assume 0 == initPersonOnFloor_~floor; 42338#L2726-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 43431#L2833-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 43368#L2517-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 42210#L2529-5 havoc cleanup_#t~ret128, cleanup_#t~ret129, cleanup_~i~3, cleanup_~tmp~23, cleanup_~tmp___0~12, cleanup_~__cil_tmp4~0;havoc cleanup_~i~3;havoc cleanup_~tmp~23;havoc cleanup_~tmp___0~12;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret107, __utac_acc__Specification3_spec__1_#t~ret108, __utac_acc__Specification3_spec__1_#t~ret109, __utac_acc__Specification3_spec__1_#t~ret110, __utac_acc__Specification3_spec__1_#t~ret111, __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~15, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~7, __utac_acc__Specification3_spec__1_~tmp___2~5, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~15;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~7;havoc __utac_acc__Specification3_spec__1_~tmp___2~5;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 42213#L303-12 __utac_acc__Specification3_spec__1_#t~ret107 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~15 := __utac_acc__Specification3_spec__1_#t~ret107;havoc __utac_acc__Specification3_spec__1_#t~ret107;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~15;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~4;havoc getCurrentHeading_~retValue_acc~4;getCurrentHeading_~retValue_acc~4 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~4; 48215#L355-9 __utac_acc__Specification3_spec__1_#t~ret108 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret108;havoc __utac_acc__Specification3_spec__1_#t~ret108; 48216#L1840-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 46831#L1902-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~3;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~3; 46684#L320-41 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~3 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~3; 45118#L341-41 __utac_acc__Specification3_spec__1_#t~ret114 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret114;havoc __utac_acc__Specification3_spec__1_#t~ret114; 46007#L1906-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 45018#L1946-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 46008#L2454-75 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 45852#L2481-75 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 47414#L1590-9 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 44474#L972-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 44476#L303-13 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 44821#L976-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 42614#L989-3 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 41817#L1127-3 assume !(0 != timeShift_~tmp___9~2); 41819#L1218-9 assume !(1 == ~doorState~0); 46271#L1218-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 45987#L2454-78 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 45828#L2481-78 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 47411#L1590-10 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 45534#L855-6 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 45535#L303-14 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 43962#L868-6 timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 45619#L1226-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 45620#L912-9 assume !(1 == ~currentHeading~0); 42876#L922-27 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 42877#L922-29 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 52374#L928-23 havoc __utac_acc__Specification3_spec__2_#t~ret119, __utac_acc__Specification3_spec__2_#t~ret120, __utac_acc__Specification3_spec__2_~tmp~16, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~16;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 52372#L1971-3 assume !(-1 == ~expectedDirection~0); 51538#L1983-3 assume !(1 == ~expectedDirection~0); 50736#L1984-3 cleanup_~i~3 := 0; 50735#L2164-2 [2018-11-28 12:13:25,105 INFO L796 eck$LassoCheckResult]: Loop: 50735#L2164-2 assume !false; 50734#L2165 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 50733#L2168 assume cleanup_~i~3 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~0;havoc isBlocked_~retValue_acc~0;isBlocked_~retValue_acc~0 := 0;isBlocked_#res := isBlocked_~retValue_acc~0; 50732#L130 cleanup_#t~ret128 := isBlocked_#res;cleanup_~tmp___0~12 := cleanup_#t~ret128;havoc cleanup_#t~ret128; 50731#L2172 assume 1 != cleanup_~tmp___0~12; 50730#L2172-1 havoc isIdle_#res;havoc isIdle_#t~ret8, isIdle_~retValue_acc~7, isIdle_~tmp~4;havoc isIdle_~retValue_acc~7;havoc isIdle_~tmp~4;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret3, anyStopRequested_#t~ret4, anyStopRequested_#t~ret5, anyStopRequested_#t~ret6, anyStopRequested_#t~ret7, anyStopRequested_~retValue_acc~6, anyStopRequested_~tmp~3, anyStopRequested_~tmp___0~0, anyStopRequested_~tmp___1~0, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~6;havoc anyStopRequested_~tmp~3;havoc anyStopRequested_~tmp___0~0;havoc anyStopRequested_~tmp___1~0;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 50729#L2454-100 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 50724#L2481-100 anyStopRequested_#t~ret3 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret3;havoc anyStopRequested_#t~ret3; 50662#L411 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~6 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~6; 50653#L475 isIdle_#t~ret8 := anyStopRequested_#res;isIdle_~tmp~4 := isIdle_#t~ret8;havoc isIdle_#t~ret8;isIdle_~retValue_acc~7 := (if 0 == isIdle_~tmp~4 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~7; 49850#L488 cleanup_#t~ret129 := isIdle_#res;cleanup_~tmp~23 := cleanup_#t~ret129;havoc cleanup_#t~ret129; 49781#L2184 assume !(0 != cleanup_~tmp~23);havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret107, __utac_acc__Specification3_spec__1_#t~ret108, __utac_acc__Specification3_spec__1_#t~ret109, __utac_acc__Specification3_spec__1_#t~ret110, __utac_acc__Specification3_spec__1_#t~ret111, __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~15, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~7, __utac_acc__Specification3_spec__1_~tmp___2~5, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~15;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~7;havoc __utac_acc__Specification3_spec__1_~tmp___2~5;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 46448#L303-16 __utac_acc__Specification3_spec__1_#t~ret107 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~15 := __utac_acc__Specification3_spec__1_#t~ret107;havoc __utac_acc__Specification3_spec__1_#t~ret107;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~15;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~4;havoc getCurrentHeading_~retValue_acc~4;getCurrentHeading_~retValue_acc~4 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~4; 46449#L355-12 __utac_acc__Specification3_spec__1_#t~ret108 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret108;havoc __utac_acc__Specification3_spec__1_#t~ret108; 42386#L1840-4 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 42387#L1841-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~3;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~3; 42506#L320-48 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~3 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~3; 44955#L341-48 __utac_acc__Specification3_spec__1_#t~ret109 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~3 := __utac_acc__Specification3_spec__1_#t~ret109;havoc __utac_acc__Specification3_spec__1_#t~ret109; 44651#L1845-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3;~expectedDirection~0 := 1; 43736#L1946-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 49823#L2454-105 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 49822#L2481-105 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 49817#L1590-12 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 49815#L972-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 49811#L303-17 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 49794#L976-4 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 49792#L989-4 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 49791#L1127-4 assume !(0 != timeShift_~tmp___9~2); 49790#L1218-12 assume 1 == ~doorState~0;~doorState~0 := 0; 49789#L1218-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 49787#L2454-108 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 49783#L2481-108 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 49716#L1590-13 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 48755#L855-8 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 48713#L303-18 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 48712#L868-8 timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 48710#L1226-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 48708#L912-12 assume 1 == ~currentHeading~0;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~24;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~24;isTopFloor_~retValue_acc~24 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~24; 47711#L3028-21 continueInDirection_#t~ret23 := isTopFloor_#res;continueInDirection_~tmp~7 := continueInDirection_#t~ret23;havoc continueInDirection_#t~ret23; 47608#L916-36 assume !(0 != continueInDirection_~tmp~7); 42867#L922-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 50744#L928-29 havoc __utac_acc__Specification3_spec__2_#t~ret119, __utac_acc__Specification3_spec__2_#t~ret120, __utac_acc__Specification3_spec__2_~tmp~16, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~16;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 50742#L1971-4 assume !(-1 == ~expectedDirection~0); 50739#L1983-4 assume !(1 == ~expectedDirection~0); 50737#L1984-4 cleanup_~i~3 := 1 + cleanup_~i~3; 50735#L2164-2 [2018-11-28 12:13:25,112 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 12:13:25,113 INFO L82 PathProgramCache]: Analyzing trace with hash 60984132, now seen corresponding path program 1 times [2018-11-28 12:13:25,113 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 12:13:25,113 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 12:13:25,113 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:13:25,114 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-28 12:13:25,114 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:13:25,139 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 12:13:25,206 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 12:13:25,206 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 12:13:25,206 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-28 12:13:25,207 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-28 12:13:25,207 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 12:13:25,207 INFO L82 PathProgramCache]: Analyzing trace with hash 659285501, now seen corresponding path program 1 times [2018-11-28 12:13:25,207 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 12:13:25,207 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 12:13:25,208 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:13:25,208 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-28 12:13:25,208 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:13:25,214 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 12:13:25,237 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 12:13:25,238 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 12:13:25,238 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-28 12:13:25,238 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-28 12:13:25,238 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-28 12:13:25,238 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-28 12:13:25,239 INFO L87 Difference]: Start difference. First operand 11362 states and 21303 transitions. cyclomatic complexity: 9942 Second operand 3 states. [2018-11-28 12:13:25,462 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-28 12:13:25,462 INFO L93 Difference]: Finished difference Result 16348 states and 30635 transitions. [2018-11-28 12:13:25,463 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-28 12:13:25,463 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 16348 states and 30635 transitions. [2018-11-28 12:13:25,502 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 3859 [2018-11-28 12:13:25,551 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 16348 states to 16348 states and 30635 transitions. [2018-11-28 12:13:25,551 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 16348 [2018-11-28 12:13:25,562 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 16348 [2018-11-28 12:13:25,562 INFO L73 IsDeterministic]: Start isDeterministic. Operand 16348 states and 30635 transitions. [2018-11-28 12:13:25,575 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-28 12:13:25,575 INFO L705 BuchiCegarLoop]: Abstraction has 16348 states and 30635 transitions. [2018-11-28 12:13:25,591 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 16348 states and 30635 transitions. [2018-11-28 12:13:25,732 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 16348 to 16142. [2018-11-28 12:13:25,733 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 16142 states. [2018-11-28 12:13:25,753 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 16142 states to 16142 states and 30267 transitions. [2018-11-28 12:13:25,753 INFO L728 BuchiCegarLoop]: Abstraction has 16142 states and 30267 transitions. [2018-11-28 12:13:25,753 INFO L608 BuchiCegarLoop]: Abstraction has 16142 states and 30267 transitions. [2018-11-28 12:13:25,753 INFO L442 BuchiCegarLoop]: ======== Iteration 4============ [2018-11-28 12:13:25,753 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 16142 states and 30267 transitions. [2018-11-28 12:13:25,779 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 3759 [2018-11-28 12:13:25,779 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-28 12:13:25,779 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-28 12:13:25,782 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 12:13:25,782 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 12:13:25,783 INFO L794 eck$LassoCheckResult]: Stem: 71381#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string53.base, #t~string53.offset := #Ultimate.alloc(10);call #t~string55.base, #t~string55.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string55.base, #t~string55.offset, 1);call write~init~int(95, #t~string55.base, 1 + #t~string55.offset, 1);call write~init~int(93, #t~string55.base, 2 + #t~string55.offset, 1);call write~init~int(0, #t~string55.base, 3 + #t~string55.offset, 1);call #t~string57.base, #t~string57.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string57.base, #t~string57.offset, 1);call write~init~int(93, #t~string57.base, 1 + #t~string57.offset, 1);call write~init~int(32, #t~string57.base, 2 + #t~string57.offset, 1);call write~init~int(0, #t~string57.base, 3 + #t~string57.offset, 1);call #t~string59.base, #t~string59.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string59.base, #t~string59.offset, 1);call write~init~int(97, #t~string59.base, 1 + #t~string59.offset, 1);call write~init~int(116, #t~string59.base, 2 + #t~string59.offset, 1);call write~init~int(32, #t~string59.base, 3 + #t~string59.offset, 1);call write~init~int(0, #t~string59.base, 4 + #t~string59.offset, 1);call #t~string61.base, #t~string61.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string61.base, #t~string61.offset, 1);call write~init~int(105, #t~string61.base, 1 + #t~string61.offset, 1);call write~init~int(0, #t~string61.base, 2 + #t~string61.offset, 1);call #t~string63.base, #t~string63.offset := #Ultimate.alloc(10);call #t~string65.base, #t~string65.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string65.base, #t~string65.offset, 1);call write~init~int(112, #t~string65.base, 1 + #t~string65.offset, 1);call write~init~int(0, #t~string65.base, 2 + #t~string65.offset, 1);call #t~string67.base, #t~string67.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string67.base, #t~string67.offset, 1);call write~init~int(111, #t~string67.base, 1 + #t~string67.offset, 1);call write~init~int(119, #t~string67.base, 2 + #t~string67.offset, 1);call write~init~int(110, #t~string67.base, 3 + #t~string67.offset, 1);call write~init~int(0, #t~string67.base, 4 + #t~string67.offset, 1);call #t~string69.base, #t~string69.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string69.base, #t~string69.offset, 1);call write~init~int(73, #t~string69.base, 1 + #t~string69.offset, 1);call write~init~int(76, #t~string69.base, 2 + #t~string69.offset, 1);call write~init~int(95, #t~string69.base, 3 + #t~string69.offset, 1);call write~init~int(112, #t~string69.base, 4 + #t~string69.offset, 1);call write~init~int(58, #t~string69.base, 5 + #t~string69.offset, 1);call write~init~int(0, #t~string69.base, 6 + #t~string69.offset, 1);call #t~string71.base, #t~string71.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string71.base, #t~string71.offset, 1);call write~init~int(37, #t~string71.base, 1 + #t~string71.offset, 1);call write~init~int(105, #t~string71.base, 2 + #t~string71.offset, 1);call write~init~int(0, #t~string71.base, 3 + #t~string71.offset, 1);call #t~string73.base, #t~string73.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string73.base, #t~string73.offset, 1);call write~init~int(37, #t~string73.base, 1 + #t~string73.offset, 1);call write~init~int(105, #t~string73.base, 2 + #t~string73.offset, 1);call write~init~int(0, #t~string73.base, 3 + #t~string73.offset, 1);call #t~string75.base, #t~string75.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string75.base, #t~string75.offset, 1);call write~init~int(37, #t~string75.base, 1 + #t~string75.offset, 1);call write~init~int(105, #t~string75.base, 2 + #t~string75.offset, 1);call write~init~int(0, #t~string75.base, 3 + #t~string75.offset, 1);call #t~string77.base, #t~string77.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string77.base, #t~string77.offset, 1);call write~init~int(37, #t~string77.base, 1 + #t~string77.offset, 1);call write~init~int(105, #t~string77.base, 2 + #t~string77.offset, 1);call write~init~int(0, #t~string77.base, 3 + #t~string77.offset, 1);call #t~string79.base, #t~string79.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string79.base, #t~string79.offset, 1);call write~init~int(37, #t~string79.base, 1 + #t~string79.offset, 1);call write~init~int(105, #t~string79.base, 2 + #t~string79.offset, 1);call write~init~int(0, #t~string79.base, 3 + #t~string79.offset, 1);call #t~string81.base, #t~string81.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string81.base, #t~string81.offset, 1);call write~init~int(70, #t~string81.base, 1 + #t~string81.offset, 1);call write~init~int(95, #t~string81.base, 2 + #t~string81.offset, 1);call write~init~int(112, #t~string81.base, 3 + #t~string81.offset, 1);call write~init~int(58, #t~string81.base, 4 + #t~string81.offset, 1);call write~init~int(0, #t~string81.base, 5 + #t~string81.offset, 1);call #t~string84.base, #t~string84.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string84.base, #t~string84.offset, 1);call write~init~int(37, #t~string84.base, 1 + #t~string84.offset, 1);call write~init~int(105, #t~string84.base, 2 + #t~string84.offset, 1);call write~init~int(0, #t~string84.base, 3 + #t~string84.offset, 1);call #t~string87.base, #t~string87.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string87.base, #t~string87.offset, 1);call write~init~int(37, #t~string87.base, 1 + #t~string87.offset, 1);call write~init~int(105, #t~string87.base, 2 + #t~string87.offset, 1);call write~init~int(0, #t~string87.base, 3 + #t~string87.offset, 1);call #t~string90.base, #t~string90.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string90.base, #t~string90.offset, 1);call write~init~int(37, #t~string90.base, 1 + #t~string90.offset, 1);call write~init~int(105, #t~string90.base, 2 + #t~string90.offset, 1);call write~init~int(0, #t~string90.base, 3 + #t~string90.offset, 1);call #t~string93.base, #t~string93.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string93.base, #t~string93.offset, 1);call write~init~int(37, #t~string93.base, 1 + #t~string93.offset, 1);call write~init~int(105, #t~string93.base, 2 + #t~string93.offset, 1);call write~init~int(0, #t~string93.base, 3 + #t~string93.offset, 1);call #t~string96.base, #t~string96.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string96.base, #t~string96.offset, 1);call write~init~int(37, #t~string96.base, 1 + #t~string96.offset, 1);call write~init~int(105, #t~string96.base, 2 + #t~string96.offset, 1);call write~init~int(0, #t~string96.base, 3 + #t~string96.offset, 1);call #t~string98.base, #t~string98.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string98.base, #t~string98.offset, 1);call write~init~int(0, #t~string98.base, 1 + #t~string98.offset, 1);~cleanupTimeShifts~0 := 12;~expectedDirection~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;call #t~string154.base, #t~string154.offset := #Ultimate.alloc(30);call #t~string155.base, #t~string155.offset := #Ultimate.alloc(9);call #t~string156.base, #t~string156.offset := #Ultimate.alloc(21);call #t~string157.base, #t~string157.offset := #Ultimate.alloc(30);call #t~string158.base, #t~string158.offset := #Ultimate.alloc(9);call #t~string159.base, #t~string159.offset := #Ultimate.alloc(21);call #t~string163.base, #t~string163.offset := #Ultimate.alloc(30);call #t~string164.base, #t~string164.offset := #Ultimate.alloc(9);call #t~string165.base, #t~string165.offset := #Ultimate.alloc(25);call #t~string166.base, #t~string166.offset := #Ultimate.alloc(30);call #t~string167.base, #t~string167.offset := #Ultimate.alloc(9);call #t~string168.base, #t~string168.offset := #Ultimate.alloc(25); 71382#L-1 havoc main_#res;havoc main_#t~ret134, main_~retValue_acc~21, main_~tmp~25;havoc main_~retValue_acc~21;havoc main_~tmp~25; 70898#L3055 havoc valid_product_#res;havoc valid_product_~retValue_acc~26;havoc valid_product_~retValue_acc~26;valid_product_~retValue_acc~26 := 1;valid_product_#res := valid_product_~retValue_acc~26; 69776#L3063 main_#t~ret134 := valid_product_#res;main_~tmp~25 := main_#t~ret134;havoc main_#t~ret134; 69744#L2358 assume 0 != main_~tmp~25; 69745#L2332 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 70598#L2447 havoc bobCall_#t~ret122, bobCall_~tmp~17;havoc bobCall_~tmp~17;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~18;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~18; 72683#L1741 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~18 := 4;getOrigin_#res := getOrigin_~retValue_acc~18; 72632#L1766 bobCall_#t~ret122 := getOrigin_#res;bobCall_~tmp~17 := bobCall_#t~ret122;havoc bobCall_#t~ret122;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~17;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 70070#L2725 assume 0 == initPersonOnFloor_~floor; 70071#L2726 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 71123#L2833-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 71074#L2517 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 69936#L2529-2 havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret107, __utac_acc__Specification3_spec__1_#t~ret108, __utac_acc__Specification3_spec__1_#t~ret109, __utac_acc__Specification3_spec__1_#t~ret110, __utac_acc__Specification3_spec__1_#t~ret111, __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~15, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~7, __utac_acc__Specification3_spec__1_~tmp___2~5, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~15;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~7;havoc __utac_acc__Specification3_spec__1_~tmp___2~5;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 69937#L303 __utac_acc__Specification3_spec__1_#t~ret107 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~15 := __utac_acc__Specification3_spec__1_#t~ret107;havoc __utac_acc__Specification3_spec__1_#t~ret107;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~15;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~4;havoc getCurrentHeading_~retValue_acc~4;getCurrentHeading_~retValue_acc~4 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~4; 71667#L355 __utac_acc__Specification3_spec__1_#t~ret108 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret108;havoc __utac_acc__Specification3_spec__1_#t~ret108; 70104#L1840 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 70105#L1902 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~3;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~3; 74246#L320-5 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~3 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~3; 72628#L341-5 __utac_acc__Specification3_spec__1_#t~ret114 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret114;havoc __utac_acc__Specification3_spec__1_#t~ret114; 73918#L1906 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 72693#L1946 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 73881#L2454 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 73817#L2481 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 75452#L1590 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 72240#L972 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 71673#L303-1 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 71674#L976 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 70335#L989 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 69553#L1127 assume !(0 != timeShift_~tmp___9~2); 69555#L1218 assume !(1 == ~doorState~0); 73935#L1218-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 73879#L2454-3 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 73786#L2481-3 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 75454#L1590-1 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 73068#L855 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 71672#L303-2 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 71659#L868 timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 73305#L1226 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 73306#L912 assume !(1 == ~currentHeading~0); 70849#L922 assume !(0 == ~currentFloorID~0); 70845#L922-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 70840#L928-5 havoc __utac_acc__Specification3_spec__2_#t~ret119, __utac_acc__Specification3_spec__2_#t~ret120, __utac_acc__Specification3_spec__2_~tmp~16, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~16;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 83426#L1971 assume !(-1 == ~expectedDirection~0); 83080#L1983 assume !(1 == ~expectedDirection~0); 77132#L1984 havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret107, __utac_acc__Specification3_spec__1_#t~ret108, __utac_acc__Specification3_spec__1_#t~ret109, __utac_acc__Specification3_spec__1_#t~ret110, __utac_acc__Specification3_spec__1_#t~ret111, __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~15, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~7, __utac_acc__Specification3_spec__1_~tmp___2~5, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~15;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~7;havoc __utac_acc__Specification3_spec__1_~tmp___2~5;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 77131#L303-4 __utac_acc__Specification3_spec__1_#t~ret107 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~15 := __utac_acc__Specification3_spec__1_#t~ret107;havoc __utac_acc__Specification3_spec__1_#t~ret107;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~15;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~4;havoc getCurrentHeading_~retValue_acc~4;getCurrentHeading_~retValue_acc~4 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~4; 75810#L355-3 __utac_acc__Specification3_spec__1_#t~ret108 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret108;havoc __utac_acc__Specification3_spec__1_#t~ret108; 75811#L1840-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 74445#L1902-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~3;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~3; 74235#L320-17 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~3 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~3; 72870#L341-17 __utac_acc__Specification3_spec__1_#t~ret114 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret114;havoc __utac_acc__Specification3_spec__1_#t~ret114; 73894#L1906-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 72696#L1946-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 77457#L2454-25 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 77453#L2481-25 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 77452#L1590-3 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 77434#L972-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 77429#L303-5 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 77421#L976-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 77418#L989-1 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 77417#L1127-1 assume !(0 != timeShift_~tmp___9~2); 77416#L1218-3 assume !(1 == ~doorState~0); 77415#L1218-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 77408#L2454-28 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 77315#L2481-28 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 77262#L1590-4 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 77256#L855-2 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 77194#L303-6 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 77147#L868-2 timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 77143#L1226-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 77141#L912-3 assume !(1 == ~currentHeading~0); 70841#L922-9 assume !(0 == ~currentFloorID~0); 70843#L922-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 77464#L928-11 havoc __utac_acc__Specification3_spec__2_#t~ret119, __utac_acc__Specification3_spec__2_#t~ret120, __utac_acc__Specification3_spec__2_~tmp~16, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~16;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 77462#L1971-1 assume !(-1 == ~expectedDirection~0); 77460#L1983-1 assume !(1 == ~expectedDirection~0); 76168#L1984-1 havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret107, __utac_acc__Specification3_spec__1_#t~ret108, __utac_acc__Specification3_spec__1_#t~ret109, __utac_acc__Specification3_spec__1_#t~ret110, __utac_acc__Specification3_spec__1_#t~ret111, __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~15, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~7, __utac_acc__Specification3_spec__1_~tmp___2~5, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~15;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~7;havoc __utac_acc__Specification3_spec__1_~tmp___2~5;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 76166#L303-8 __utac_acc__Specification3_spec__1_#t~ret107 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~15 := __utac_acc__Specification3_spec__1_#t~ret107;havoc __utac_acc__Specification3_spec__1_#t~ret107;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~15;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~4;havoc getCurrentHeading_~retValue_acc~4;getCurrentHeading_~retValue_acc~4 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~4; 76164#L355-6 __utac_acc__Specification3_spec__1_#t~ret108 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret108;havoc __utac_acc__Specification3_spec__1_#t~ret108; 76163#L1840-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 74447#L1902-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~3;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~3; 74212#L320-29 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~3 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~3; 72839#L341-29 __utac_acc__Specification3_spec__1_#t~ret114 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret114;havoc __utac_acc__Specification3_spec__1_#t~ret114; 73707#L1906-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 72677#L1946-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 76822#L2454-50 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 76817#L2481-50 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 76816#L1590-6 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 76814#L972-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 76815#L303-9 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 76783#L976-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 76781#L989-2 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 76777#L1127-2 assume !(0 != timeShift_~tmp___9~2); 76775#L1218-6 assume 1 == ~doorState~0;~doorState~0 := 0; 76772#L1218-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 76761#L2454-53 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 76758#L2481-53 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 76757#L1590-7 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 76756#L855-4 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 76703#L303-10 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 76702#L868-4 timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 76700#L1226-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 76701#L912-6 assume !(1 == ~currentHeading~0); 70595#L922-18 assume !(0 == ~currentFloorID~0); 70597#L922-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 79533#L928-17 havoc __utac_acc__Specification3_spec__2_#t~ret119, __utac_acc__Specification3_spec__2_#t~ret120, __utac_acc__Specification3_spec__2_~tmp~16, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~16;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 80156#L1971-2 assume !(-1 == ~expectedDirection~0); 80123#L1983-2 assume !(1 == ~expectedDirection~0); 80120#L1984-2 havoc bobCall_#t~ret122, bobCall_~tmp~17;havoc bobCall_~tmp~17;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~18;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~18; 80116#L1741-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~18 := 4;getOrigin_#res := getOrigin_~retValue_acc~18; 80109#L1766-1 bobCall_#t~ret122 := getOrigin_#res;bobCall_~tmp~17 := bobCall_#t~ret122;havoc bobCall_#t~ret122;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~17;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 80107#L2725-1 assume 0 == initPersonOnFloor_~floor; 80076#L2726-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 80068#L2833-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 80065#L2517-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 76944#L2529-5 havoc cleanup_#t~ret128, cleanup_#t~ret129, cleanup_~i~3, cleanup_~tmp~23, cleanup_~tmp___0~12, cleanup_~__cil_tmp4~0;havoc cleanup_~i~3;havoc cleanup_~tmp~23;havoc cleanup_~tmp___0~12;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret107, __utac_acc__Specification3_spec__1_#t~ret108, __utac_acc__Specification3_spec__1_#t~ret109, __utac_acc__Specification3_spec__1_#t~ret110, __utac_acc__Specification3_spec__1_#t~ret111, __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~15, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~7, __utac_acc__Specification3_spec__1_~tmp___2~5, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~15;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~7;havoc __utac_acc__Specification3_spec__1_~tmp___2~5;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 76943#L303-12 __utac_acc__Specification3_spec__1_#t~ret107 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~15 := __utac_acc__Specification3_spec__1_#t~ret107;havoc __utac_acc__Specification3_spec__1_#t~ret107;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~15;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~4;havoc getCurrentHeading_~retValue_acc~4;getCurrentHeading_~retValue_acc~4 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~4; 75786#L355-9 __utac_acc__Specification3_spec__1_#t~ret108 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret108;havoc __utac_acc__Specification3_spec__1_#t~ret108; 75787#L1840-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 74446#L1902-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~3;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~3; 74330#L320-41 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~3 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~3; 72775#L341-41 __utac_acc__Specification3_spec__1_#t~ret114 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret114;havoc __utac_acc__Specification3_spec__1_#t~ret114; 73669#L1906-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 72680#L1946-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 76378#L2454-75 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 76375#L2481-75 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 76374#L1590-9 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 76372#L972-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 76373#L303-13 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 76355#L976-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 76352#L989-3 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 76350#L1127-3 assume !(0 != timeShift_~tmp___9~2); 76349#L1218-9 assume !(1 == ~doorState~0); 76343#L1218-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 76341#L2454-78 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 76336#L2481-78 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 76335#L1590-10 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 76334#L855-6 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 76245#L303-14 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 76244#L868-6 timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 76241#L1226-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 76242#L912-9 assume !(1 == ~currentHeading~0); 70591#L922-27 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 70592#L922-29 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 79447#L928-23 havoc __utac_acc__Specification3_spec__2_#t~ret119, __utac_acc__Specification3_spec__2_#t~ret120, __utac_acc__Specification3_spec__2_~tmp~16, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~16;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 79445#L1971-3 assume !(-1 == ~expectedDirection~0); 75144#L1983-3 assume !(1 == ~expectedDirection~0); 70520#L1984-3 cleanup_~i~3 := 0; 70521#L2164-2 [2018-11-28 12:13:25,783 INFO L796 eck$LassoCheckResult]: Loop: 70521#L2164-2 assume !false; 71067#L2165 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 71039#L2168 assume cleanup_~i~3 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~0;havoc isBlocked_~retValue_acc~0;isBlocked_~retValue_acc~0 := 0;isBlocked_#res := isBlocked_~retValue_acc~0; 71040#L130 cleanup_#t~ret128 := isBlocked_#res;cleanup_~tmp___0~12 := cleanup_#t~ret128;havoc cleanup_#t~ret128; 70998#L2172 assume 1 != cleanup_~tmp___0~12; 70994#L2172-1 havoc isIdle_#res;havoc isIdle_#t~ret8, isIdle_~retValue_acc~7, isIdle_~tmp~4;havoc isIdle_~retValue_acc~7;havoc isIdle_~tmp~4;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret3, anyStopRequested_#t~ret4, anyStopRequested_#t~ret5, anyStopRequested_#t~ret6, anyStopRequested_#t~ret7, anyStopRequested_~retValue_acc~6, anyStopRequested_~tmp~3, anyStopRequested_~tmp___0~0, anyStopRequested_~tmp___1~0, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~6;havoc anyStopRequested_~tmp~3;havoc anyStopRequested_~tmp___0~0;havoc anyStopRequested_~tmp___1~0;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 70995#L2454-100 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 73389#L2481-100 anyStopRequested_#t~ret3 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret3;havoc anyStopRequested_#t~ret3; 70888#L411 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~6 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~6; 69580#L475 isIdle_#t~ret8 := anyStopRequested_#res;isIdle_~tmp~4 := isIdle_#t~ret8;havoc isIdle_#t~ret8;isIdle_~retValue_acc~7 := (if 0 == isIdle_~tmp~4 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~7; 77459#L488 cleanup_#t~ret129 := isIdle_#res;cleanup_~tmp~23 := cleanup_#t~ret129;havoc cleanup_#t~ret129; 69556#L2184 assume !(0 != cleanup_~tmp~23);havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret107, __utac_acc__Specification3_spec__1_#t~ret108, __utac_acc__Specification3_spec__1_#t~ret109, __utac_acc__Specification3_spec__1_#t~ret110, __utac_acc__Specification3_spec__1_#t~ret111, __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~15, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~7, __utac_acc__Specification3_spec__1_~tmp___2~5, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~15;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~7;havoc __utac_acc__Specification3_spec__1_~tmp___2~5;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 69557#L303-16 __utac_acc__Specification3_spec__1_#t~ret107 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~15 := __utac_acc__Specification3_spec__1_#t~ret107;havoc __utac_acc__Specification3_spec__1_#t~ret107;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~15;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~4;havoc getCurrentHeading_~retValue_acc~4;getCurrentHeading_~retValue_acc~4 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~4; 74103#L355-12 __utac_acc__Specification3_spec__1_#t~ret108 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret108;havoc __utac_acc__Specification3_spec__1_#t~ret108; 70100#L1840-4 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 70101#L1841-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0); 70219#L1851-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 1); 72216#L1862-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 2); 71234#L1873-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 3); 71236#L1884-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 4); 71786#L1946-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 73857#L2454-105 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 73858#L2481-105 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 75000#L1590-12 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 72163#L972-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 72165#L303-17 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 72487#L976-4 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 70314#L989-4 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 69538#L1127-4 assume !(0 != timeShift_~tmp___9~2); 69539#L1218-12 assume 1 == ~doorState~0;~doorState~0 := 0; 73929#L1218-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 73864#L2454-108 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 73865#L2481-108 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 75002#L1590-13 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 73194#L855-8 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 73195#L303-18 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 71653#L868-8 timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 73282#L1226-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 73283#L912-12 assume 1 == ~currentHeading~0;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~24;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~24;isTopFloor_~retValue_acc~24 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~24; 75281#L3028-21 continueInDirection_#t~ret23 := isTopFloor_#res;continueInDirection_~tmp~7 := continueInDirection_#t~ret23;havoc continueInDirection_#t~ret23; 75195#L916-36 assume !(0 != continueInDirection_~tmp~7); 70581#L922-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 83662#L928-29 havoc __utac_acc__Specification3_spec__2_#t~ret119, __utac_acc__Specification3_spec__2_#t~ret120, __utac_acc__Specification3_spec__2_~tmp~16, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~16;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 79887#L1971-4 assume !(-1 == ~expectedDirection~0); 75140#L1983-4 assume !(1 == ~expectedDirection~0); 70522#L1984-4 cleanup_~i~3 := 1 + cleanup_~i~3; 70521#L2164-2 [2018-11-28 12:13:25,790 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 12:13:25,790 INFO L82 PathProgramCache]: Analyzing trace with hash 60984132, now seen corresponding path program 2 times [2018-11-28 12:13:25,790 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 12:13:25,791 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 12:13:25,791 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:13:25,791 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-28 12:13:25,791 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:13:25,807 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 12:13:25,852 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 12:13:25,852 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 12:13:25,853 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-28 12:13:25,853 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-28 12:13:25,853 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 12:13:25,853 INFO L82 PathProgramCache]: Analyzing trace with hash 1601443480, now seen corresponding path program 1 times [2018-11-28 12:13:25,853 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 12:13:25,853 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 12:13:25,854 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:13:25,854 INFO L101 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2018-11-28 12:13:25,854 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:13:25,860 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 12:13:26,046 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 12:13:26,046 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 12:13:26,046 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [15] imperfect sequences [] total 15 [2018-11-28 12:13:26,046 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-28 12:13:26,046 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 15 interpolants. [2018-11-28 12:13:26,046 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=29, Invalid=181, Unknown=0, NotChecked=0, Total=210 [2018-11-28 12:13:26,047 INFO L87 Difference]: Start difference. First operand 16142 states and 30267 transitions. cyclomatic complexity: 14126 Second operand 15 states. [2018-11-28 12:13:34,650 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-28 12:13:34,650 INFO L93 Difference]: Finished difference Result 34428 states and 63356 transitions. [2018-11-28 12:13:34,650 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 91 states. [2018-11-28 12:13:34,650 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 34428 states and 63356 transitions. [2018-11-28 12:13:34,719 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 8831 [2018-11-28 12:13:34,782 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 34428 states to 34428 states and 63356 transitions. [2018-11-28 12:13:34,783 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 34428 [2018-11-28 12:13:34,798 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 34428 [2018-11-28 12:13:34,799 INFO L73 IsDeterministic]: Start isDeterministic. Operand 34428 states and 63356 transitions. [2018-11-28 12:13:34,814 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-28 12:13:34,814 INFO L705 BuchiCegarLoop]: Abstraction has 34428 states and 63356 transitions. [2018-11-28 12:13:34,831 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 34428 states and 63356 transitions. [2018-11-28 12:13:35,030 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 34428 to 25636. [2018-11-28 12:13:35,030 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 25636 states. [2018-11-28 12:13:35,055 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 25636 states to 25636 states and 47490 transitions. [2018-11-28 12:13:35,055 INFO L728 BuchiCegarLoop]: Abstraction has 25636 states and 47490 transitions. [2018-11-28 12:13:35,055 INFO L608 BuchiCegarLoop]: Abstraction has 25636 states and 47490 transitions. [2018-11-28 12:13:35,056 INFO L442 BuchiCegarLoop]: ======== Iteration 5============ [2018-11-28 12:13:35,056 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 25636 states and 47490 transitions. [2018-11-28 12:13:35,099 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 6187 [2018-11-28 12:13:35,099 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-28 12:13:35,099 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-28 12:13:35,102 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 12:13:35,102 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 12:13:35,103 INFO L794 eck$LassoCheckResult]: Stem: 122255#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string53.base, #t~string53.offset := #Ultimate.alloc(10);call #t~string55.base, #t~string55.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string55.base, #t~string55.offset, 1);call write~init~int(95, #t~string55.base, 1 + #t~string55.offset, 1);call write~init~int(93, #t~string55.base, 2 + #t~string55.offset, 1);call write~init~int(0, #t~string55.base, 3 + #t~string55.offset, 1);call #t~string57.base, #t~string57.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string57.base, #t~string57.offset, 1);call write~init~int(93, #t~string57.base, 1 + #t~string57.offset, 1);call write~init~int(32, #t~string57.base, 2 + #t~string57.offset, 1);call write~init~int(0, #t~string57.base, 3 + #t~string57.offset, 1);call #t~string59.base, #t~string59.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string59.base, #t~string59.offset, 1);call write~init~int(97, #t~string59.base, 1 + #t~string59.offset, 1);call write~init~int(116, #t~string59.base, 2 + #t~string59.offset, 1);call write~init~int(32, #t~string59.base, 3 + #t~string59.offset, 1);call write~init~int(0, #t~string59.base, 4 + #t~string59.offset, 1);call #t~string61.base, #t~string61.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string61.base, #t~string61.offset, 1);call write~init~int(105, #t~string61.base, 1 + #t~string61.offset, 1);call write~init~int(0, #t~string61.base, 2 + #t~string61.offset, 1);call #t~string63.base, #t~string63.offset := #Ultimate.alloc(10);call #t~string65.base, #t~string65.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string65.base, #t~string65.offset, 1);call write~init~int(112, #t~string65.base, 1 + #t~string65.offset, 1);call write~init~int(0, #t~string65.base, 2 + #t~string65.offset, 1);call #t~string67.base, #t~string67.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string67.base, #t~string67.offset, 1);call write~init~int(111, #t~string67.base, 1 + #t~string67.offset, 1);call write~init~int(119, #t~string67.base, 2 + #t~string67.offset, 1);call write~init~int(110, #t~string67.base, 3 + #t~string67.offset, 1);call write~init~int(0, #t~string67.base, 4 + #t~string67.offset, 1);call #t~string69.base, #t~string69.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string69.base, #t~string69.offset, 1);call write~init~int(73, #t~string69.base, 1 + #t~string69.offset, 1);call write~init~int(76, #t~string69.base, 2 + #t~string69.offset, 1);call write~init~int(95, #t~string69.base, 3 + #t~string69.offset, 1);call write~init~int(112, #t~string69.base, 4 + #t~string69.offset, 1);call write~init~int(58, #t~string69.base, 5 + #t~string69.offset, 1);call write~init~int(0, #t~string69.base, 6 + #t~string69.offset, 1);call #t~string71.base, #t~string71.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string71.base, #t~string71.offset, 1);call write~init~int(37, #t~string71.base, 1 + #t~string71.offset, 1);call write~init~int(105, #t~string71.base, 2 + #t~string71.offset, 1);call write~init~int(0, #t~string71.base, 3 + #t~string71.offset, 1);call #t~string73.base, #t~string73.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string73.base, #t~string73.offset, 1);call write~init~int(37, #t~string73.base, 1 + #t~string73.offset, 1);call write~init~int(105, #t~string73.base, 2 + #t~string73.offset, 1);call write~init~int(0, #t~string73.base, 3 + #t~string73.offset, 1);call #t~string75.base, #t~string75.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string75.base, #t~string75.offset, 1);call write~init~int(37, #t~string75.base, 1 + #t~string75.offset, 1);call write~init~int(105, #t~string75.base, 2 + #t~string75.offset, 1);call write~init~int(0, #t~string75.base, 3 + #t~string75.offset, 1);call #t~string77.base, #t~string77.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string77.base, #t~string77.offset, 1);call write~init~int(37, #t~string77.base, 1 + #t~string77.offset, 1);call write~init~int(105, #t~string77.base, 2 + #t~string77.offset, 1);call write~init~int(0, #t~string77.base, 3 + #t~string77.offset, 1);call #t~string79.base, #t~string79.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string79.base, #t~string79.offset, 1);call write~init~int(37, #t~string79.base, 1 + #t~string79.offset, 1);call write~init~int(105, #t~string79.base, 2 + #t~string79.offset, 1);call write~init~int(0, #t~string79.base, 3 + #t~string79.offset, 1);call #t~string81.base, #t~string81.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string81.base, #t~string81.offset, 1);call write~init~int(70, #t~string81.base, 1 + #t~string81.offset, 1);call write~init~int(95, #t~string81.base, 2 + #t~string81.offset, 1);call write~init~int(112, #t~string81.base, 3 + #t~string81.offset, 1);call write~init~int(58, #t~string81.base, 4 + #t~string81.offset, 1);call write~init~int(0, #t~string81.base, 5 + #t~string81.offset, 1);call #t~string84.base, #t~string84.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string84.base, #t~string84.offset, 1);call write~init~int(37, #t~string84.base, 1 + #t~string84.offset, 1);call write~init~int(105, #t~string84.base, 2 + #t~string84.offset, 1);call write~init~int(0, #t~string84.base, 3 + #t~string84.offset, 1);call #t~string87.base, #t~string87.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string87.base, #t~string87.offset, 1);call write~init~int(37, #t~string87.base, 1 + #t~string87.offset, 1);call write~init~int(105, #t~string87.base, 2 + #t~string87.offset, 1);call write~init~int(0, #t~string87.base, 3 + #t~string87.offset, 1);call #t~string90.base, #t~string90.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string90.base, #t~string90.offset, 1);call write~init~int(37, #t~string90.base, 1 + #t~string90.offset, 1);call write~init~int(105, #t~string90.base, 2 + #t~string90.offset, 1);call write~init~int(0, #t~string90.base, 3 + #t~string90.offset, 1);call #t~string93.base, #t~string93.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string93.base, #t~string93.offset, 1);call write~init~int(37, #t~string93.base, 1 + #t~string93.offset, 1);call write~init~int(105, #t~string93.base, 2 + #t~string93.offset, 1);call write~init~int(0, #t~string93.base, 3 + #t~string93.offset, 1);call #t~string96.base, #t~string96.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string96.base, #t~string96.offset, 1);call write~init~int(37, #t~string96.base, 1 + #t~string96.offset, 1);call write~init~int(105, #t~string96.base, 2 + #t~string96.offset, 1);call write~init~int(0, #t~string96.base, 3 + #t~string96.offset, 1);call #t~string98.base, #t~string98.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string98.base, #t~string98.offset, 1);call write~init~int(0, #t~string98.base, 1 + #t~string98.offset, 1);~cleanupTimeShifts~0 := 12;~expectedDirection~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;call #t~string154.base, #t~string154.offset := #Ultimate.alloc(30);call #t~string155.base, #t~string155.offset := #Ultimate.alloc(9);call #t~string156.base, #t~string156.offset := #Ultimate.alloc(21);call #t~string157.base, #t~string157.offset := #Ultimate.alloc(30);call #t~string158.base, #t~string158.offset := #Ultimate.alloc(9);call #t~string159.base, #t~string159.offset := #Ultimate.alloc(21);call #t~string163.base, #t~string163.offset := #Ultimate.alloc(30);call #t~string164.base, #t~string164.offset := #Ultimate.alloc(9);call #t~string165.base, #t~string165.offset := #Ultimate.alloc(25);call #t~string166.base, #t~string166.offset := #Ultimate.alloc(30);call #t~string167.base, #t~string167.offset := #Ultimate.alloc(9);call #t~string168.base, #t~string168.offset := #Ultimate.alloc(25); 122256#L-1 havoc main_#res;havoc main_#t~ret134, main_~retValue_acc~21, main_~tmp~25;havoc main_~retValue_acc~21;havoc main_~tmp~25; 121756#L3055 havoc valid_product_#res;havoc valid_product_~retValue_acc~26;havoc valid_product_~retValue_acc~26;valid_product_~retValue_acc~26 := 1;valid_product_#res := valid_product_~retValue_acc~26; 120559#L3063 main_#t~ret134 := valid_product_#res;main_~tmp~25 := main_#t~ret134;havoc main_#t~ret134; 120527#L2358 assume 0 != main_~tmp~25; 120528#L2332 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 121451#L2447 havoc bobCall_#t~ret122, bobCall_~tmp~17;havoc bobCall_~tmp~17;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~18;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~18; 123636#L1741 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~18 := 4;getOrigin_#res := getOrigin_~retValue_acc~18; 123583#L1766 bobCall_#t~ret122 := getOrigin_#res;bobCall_~tmp~17 := bobCall_#t~ret122;havoc bobCall_#t~ret122;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~17;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 120891#L2725 assume 0 == initPersonOnFloor_~floor; 120892#L2726 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 121995#L2833-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 121938#L2517 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 120754#L2529-2 havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret107, __utac_acc__Specification3_spec__1_#t~ret108, __utac_acc__Specification3_spec__1_#t~ret109, __utac_acc__Specification3_spec__1_#t~ret110, __utac_acc__Specification3_spec__1_#t~ret111, __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~15, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~7, __utac_acc__Specification3_spec__1_~tmp___2~5, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~15;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~7;havoc __utac_acc__Specification3_spec__1_~tmp___2~5;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 120755#L303 __utac_acc__Specification3_spec__1_#t~ret107 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~15 := __utac_acc__Specification3_spec__1_#t~ret107;havoc __utac_acc__Specification3_spec__1_#t~ret107;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~15;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~4;havoc getCurrentHeading_~retValue_acc~4;getCurrentHeading_~retValue_acc~4 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~4; 122553#L355 __utac_acc__Specification3_spec__1_#t~ret108 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret108;havoc __utac_acc__Specification3_spec__1_#t~ret108; 120925#L1840 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 120926#L1902 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~3;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~3; 125282#L320-5 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~3 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~3; 123579#L341-5 __utac_acc__Specification3_spec__1_#t~ret114 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret114;havoc __utac_acc__Specification3_spec__1_#t~ret114; 124907#L1906 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 123646#L1946 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 124852#L2454 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 124786#L2481 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 126672#L1590 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 123152#L972 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 122560#L303-1 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 122561#L976 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 121165#L989 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 120336#L1127 assume !(0 != timeShift_~tmp___9~2); 120338#L1218 assume !(1 == ~doorState~0); 124949#L1218-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 124850#L2454-3 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 124750#L2481-3 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 126674#L1590-1 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 124027#L855 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 122559#L303-2 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 122544#L868 timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 124259#L1226 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 124260#L912 assume !(1 == ~currentHeading~0); 121707#L922 assume !(0 == ~currentFloorID~0); 121703#L922-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 121307#L928-5 havoc __utac_acc__Specification3_spec__2_#t~ret119, __utac_acc__Specification3_spec__2_#t~ret120, __utac_acc__Specification3_spec__2_~tmp~16, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~16;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 121308#L1971 assume !(-1 == ~expectedDirection~0); 121340#L1983 assume !(1 == ~expectedDirection~0); 121341#L1984 havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret107, __utac_acc__Specification3_spec__1_#t~ret108, __utac_acc__Specification3_spec__1_#t~ret109, __utac_acc__Specification3_spec__1_#t~ret110, __utac_acc__Specification3_spec__1_#t~ret111, __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~15, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~7, __utac_acc__Specification3_spec__1_~tmp___2~5, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~15;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~7;havoc __utac_acc__Specification3_spec__1_~tmp___2~5;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 121375#L303-4 __utac_acc__Specification3_spec__1_#t~ret107 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~15 := __utac_acc__Specification3_spec__1_#t~ret107;havoc __utac_acc__Specification3_spec__1_#t~ret107;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~15;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~4;havoc getCurrentHeading_~retValue_acc~4;getCurrentHeading_~retValue_acc~4 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~4; 127057#L355-3 __utac_acc__Specification3_spec__1_#t~ret108 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret108;havoc __utac_acc__Specification3_spec__1_#t~ret108; 127058#L1840-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 125500#L1902-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~3;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~3; 125271#L320-17 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~3 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~3; 123828#L341-17 __utac_acc__Specification3_spec__1_#t~ret114 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret114;havoc __utac_acc__Specification3_spec__1_#t~ret114; 124870#L1906-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 123650#L1946-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 128700#L2454-25 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 128696#L2481-25 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 128691#L1590-3 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 128688#L972-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 128684#L303-5 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 128682#L976-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 128679#L989-1 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 128676#L1127-1 assume !(0 != timeShift_~tmp___9~2); 128613#L1218-3 assume !(1 == ~doorState~0); 128612#L1218-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 128609#L2454-28 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 128606#L2481-28 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 128605#L1590-4 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 128603#L855-2 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 128529#L303-6 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 128482#L868-2 timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 128478#L1226-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 128476#L912-3 assume !(1 == ~currentHeading~0); 121699#L922-9 assume !(0 == ~currentFloorID~0); 121701#L922-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 121692#L928-11 havoc __utac_acc__Specification3_spec__2_#t~ret119, __utac_acc__Specification3_spec__2_#t~ret120, __utac_acc__Specification3_spec__2_~tmp~16, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~16;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 133535#L1971-1 assume !(-1 == ~expectedDirection~0); 133533#L1983-1 assume !(1 == ~expectedDirection~0); 127502#L1984-1 havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret107, __utac_acc__Specification3_spec__1_#t~ret108, __utac_acc__Specification3_spec__1_#t~ret109, __utac_acc__Specification3_spec__1_#t~ret110, __utac_acc__Specification3_spec__1_#t~ret111, __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~15, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~7, __utac_acc__Specification3_spec__1_~tmp___2~5, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~15;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~7;havoc __utac_acc__Specification3_spec__1_~tmp___2~5;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 127500#L303-8 __utac_acc__Specification3_spec__1_#t~ret107 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~15 := __utac_acc__Specification3_spec__1_#t~ret107;havoc __utac_acc__Specification3_spec__1_#t~ret107;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~15;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~4;havoc getCurrentHeading_~retValue_acc~4;getCurrentHeading_~retValue_acc~4 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~4; 127498#L355-6 __utac_acc__Specification3_spec__1_#t~ret108 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret108;havoc __utac_acc__Specification3_spec__1_#t~ret108; 127497#L1840-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 125502#L1902-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~3;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~3; 125244#L320-29 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~3 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~3; 123797#L341-29 __utac_acc__Specification3_spec__1_#t~ret114 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret114;havoc __utac_acc__Specification3_spec__1_#t~ret114; 124665#L1906-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 123630#L1946-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 127844#L2454-50 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 127839#L2481-50 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 127838#L1590-6 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 127836#L972-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 127837#L303-9 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 127805#L976-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 127804#L989-2 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 127797#L1127-2 assume !(0 != timeShift_~tmp___9~2); 127795#L1218-6 assume 1 == ~doorState~0;~doorState~0 := 0; 127794#L1218-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 127789#L2454-53 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 127786#L2481-53 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 127784#L1590-7 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 127578#L855-4 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 127527#L303-10 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 127523#L868-4 timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 127519#L1226-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 127515#L912-6 assume !(1 == ~currentHeading~0); 121448#L922-18 assume !(0 == ~currentFloorID~0); 121450#L922-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 121439#L928-17 havoc __utac_acc__Specification3_spec__2_#t~ret119, __utac_acc__Specification3_spec__2_#t~ret120, __utac_acc__Specification3_spec__2_~tmp~16, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~16;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 134656#L1971-2 assume !(-1 == ~expectedDirection~0); 134653#L1983-2 assume !(1 == ~expectedDirection~0); 134651#L1984-2 havoc bobCall_#t~ret122, bobCall_~tmp~17;havoc bobCall_~tmp~17;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~18;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~18; 134650#L1741-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~18 := 4;getOrigin_#res := getOrigin_~retValue_acc~18; 134644#L1766-1 bobCall_#t~ret122 := getOrigin_#res;bobCall_~tmp~17 := bobCall_#t~ret122;havoc bobCall_#t~ret122;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~17;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 134643#L2725-1 assume 0 == initPersonOnFloor_~floor; 134616#L2726-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 134608#L2833-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 134524#L2517-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 128473#L2529-5 havoc cleanup_#t~ret128, cleanup_#t~ret129, cleanup_~i~3, cleanup_~tmp~23, cleanup_~tmp___0~12, cleanup_~__cil_tmp4~0;havoc cleanup_~i~3;havoc cleanup_~tmp~23;havoc cleanup_~tmp___0~12;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret107, __utac_acc__Specification3_spec__1_#t~ret108, __utac_acc__Specification3_spec__1_#t~ret109, __utac_acc__Specification3_spec__1_#t~ret110, __utac_acc__Specification3_spec__1_#t~ret111, __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~15, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~7, __utac_acc__Specification3_spec__1_~tmp___2~5, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~15;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~7;havoc __utac_acc__Specification3_spec__1_~tmp___2~5;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 128472#L303-12 __utac_acc__Specification3_spec__1_#t~ret107 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~15 := __utac_acc__Specification3_spec__1_#t~ret107;havoc __utac_acc__Specification3_spec__1_#t~ret107;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~15;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~4;havoc getCurrentHeading_~retValue_acc~4;getCurrentHeading_~retValue_acc~4 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~4; 128471#L355-9 __utac_acc__Specification3_spec__1_#t~ret108 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret108;havoc __utac_acc__Specification3_spec__1_#t~ret108; 127496#L1840-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 125501#L1902-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~3;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~3; 125376#L320-41 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~3 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~3; 123733#L341-41 __utac_acc__Specification3_spec__1_#t~ret114 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret114;havoc __utac_acc__Specification3_spec__1_#t~ret114; 124624#L1906-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 123633#L1946-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 128191#L2454-75 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 128184#L2481-75 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 128183#L1590-9 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 128171#L972-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 128164#L303-13 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 128153#L976-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 128151#L989-3 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 128149#L1127-3 assume !(0 != timeShift_~tmp___9~2); 128148#L1218-9 assume !(1 == ~doorState~0); 128147#L1218-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 128146#L2454-78 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 128141#L2481-78 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 127675#L1590-10 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 127532#L855-6 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 127525#L303-14 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 127522#L868-6 timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 127517#L1226-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 127514#L912-9 assume !(1 == ~currentHeading~0); 121444#L922-27 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 121445#L922-29 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 135705#L928-23 havoc __utac_acc__Specification3_spec__2_#t~ret119, __utac_acc__Specification3_spec__2_#t~ret120, __utac_acc__Specification3_spec__2_~tmp~16, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~16;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 135699#L1971-3 assume !(-1 == ~expectedDirection~0); 135693#L1983-3 assume !(1 == ~expectedDirection~0); 135690#L1984-3 cleanup_~i~3 := 0; 135689#L2164-2 [2018-11-28 12:13:35,103 INFO L796 eck$LassoCheckResult]: Loop: 135689#L2164-2 assume !false; 135686#L2165 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 135685#L2168 assume cleanup_~i~3 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~0;havoc isBlocked_~retValue_acc~0;isBlocked_~retValue_acc~0 := 0;isBlocked_#res := isBlocked_~retValue_acc~0; 132625#L130 cleanup_#t~ret128 := isBlocked_#res;cleanup_~tmp___0~12 := cleanup_#t~ret128;havoc cleanup_#t~ret128; 132624#L2172 assume 1 != cleanup_~tmp___0~12; 132623#L2172-1 havoc isIdle_#res;havoc isIdle_#t~ret8, isIdle_~retValue_acc~7, isIdle_~tmp~4;havoc isIdle_~retValue_acc~7;havoc isIdle_~tmp~4;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret3, anyStopRequested_#t~ret4, anyStopRequested_#t~ret5, anyStopRequested_#t~ret6, anyStopRequested_#t~ret7, anyStopRequested_~retValue_acc~6, anyStopRequested_~tmp~3, anyStopRequested_~tmp___0~0, anyStopRequested_~tmp___1~0, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~6;havoc anyStopRequested_~tmp~3;havoc anyStopRequested_~tmp___0~0;havoc anyStopRequested_~tmp___1~0;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 131706#L2454-100 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 131690#L2481-100 anyStopRequested_#t~ret3 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret3;havoc anyStopRequested_#t~ret3; 131681#L411 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~6 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~6; 130609#L475 isIdle_#t~ret8 := anyStopRequested_#res;isIdle_~tmp~4 := isIdle_#t~ret8;havoc isIdle_#t~ret8;isIdle_~retValue_acc~7 := (if 0 == isIdle_~tmp~4 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~7; 129535#L488 cleanup_#t~ret129 := isIdle_#res;cleanup_~tmp~23 := cleanup_#t~ret129;havoc cleanup_#t~ret129; 128805#L2184 assume !(0 != cleanup_~tmp~23);havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret107, __utac_acc__Specification3_spec__1_#t~ret108, __utac_acc__Specification3_spec__1_#t~ret109, __utac_acc__Specification3_spec__1_#t~ret110, __utac_acc__Specification3_spec__1_#t~ret111, __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~15, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~7, __utac_acc__Specification3_spec__1_~tmp___2~5, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~15;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~7;havoc __utac_acc__Specification3_spec__1_~tmp___2~5;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 128804#L303-16 __utac_acc__Specification3_spec__1_#t~ret107 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~15 := __utac_acc__Specification3_spec__1_#t~ret107;havoc __utac_acc__Specification3_spec__1_#t~ret107;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~15;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~4;havoc getCurrentHeading_~retValue_acc~4;getCurrentHeading_~retValue_acc~4 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~4; 128803#L355-12 __utac_acc__Specification3_spec__1_#t~ret108 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret108;havoc __utac_acc__Specification3_spec__1_#t~ret108; 128802#L1840-4 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 128801#L1841-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~3;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~3; 125367#L320-48 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~3 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~3; 123570#L341-48 __utac_acc__Specification3_spec__1_#t~ret109 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~3 := __utac_acc__Specification3_spec__1_#t~ret109;havoc __utac_acc__Specification3_spec__1_#t~ret109; 123254#L1845-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3;~expectedDirection~0 := 1; 122294#L1946-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 128999#L2454-105 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 128998#L2481-105 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 128997#L1590-12 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 128995#L972-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 128994#L303-17 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 128984#L976-4 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 128980#L989-4 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 128975#L1127-4 assume !(0 != timeShift_~tmp___9~2); 128976#L1218-12 assume 1 == ~doorState~0;~doorState~0 := 0; 137772#L1218-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 137770#L2454-108 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 137766#L2481-108 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 137765#L1590-13 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 137764#L855-8 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 129206#L303-18 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 129202#L868-8 timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 129200#L1226-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 129201#L912-12 assume 1 == ~currentHeading~0;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~24;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~24;isTopFloor_~retValue_acc~24 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~24; 137854#L3028-21 continueInDirection_#t~ret23 := isTopFloor_#res;continueInDirection_~tmp~7 := continueInDirection_#t~ret23;havoc continueInDirection_#t~ret23; 137850#L916-36 assume !(0 != continueInDirection_~tmp~7); 137845#L922-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 137839#L928-29 havoc __utac_acc__Specification3_spec__2_#t~ret119, __utac_acc__Specification3_spec__2_#t~ret120, __utac_acc__Specification3_spec__2_~tmp~16, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~16;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 136763#L1971-4 assume !(-1 == ~expectedDirection~0); 135706#L1983-4 assume 1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~4;havoc getCurrentHeading_~retValue_acc~4;getCurrentHeading_~retValue_acc~4 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~4; 135697#L355-14 __utac_acc__Specification3_spec__2_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp~16 := __utac_acc__Specification3_spec__2_#t~ret120;havoc __utac_acc__Specification3_spec__2_#t~ret120; 135695#L1988-8 assume !(0 == __utac_acc__Specification3_spec__2_~tmp~16); 135691#L1984-4 cleanup_~i~3 := 1 + cleanup_~i~3; 135689#L2164-2 [2018-11-28 12:13:35,111 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 12:13:35,111 INFO L82 PathProgramCache]: Analyzing trace with hash 60984132, now seen corresponding path program 3 times [2018-11-28 12:13:35,111 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 12:13:35,112 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 12:13:35,112 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:13:35,112 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-28 12:13:35,112 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:13:35,125 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 12:13:35,164 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 12:13:35,164 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 12:13:35,164 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-28 12:13:35,164 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-28 12:13:35,165 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 12:13:35,165 INFO L82 PathProgramCache]: Analyzing trace with hash -2081193854, now seen corresponding path program 1 times [2018-11-28 12:13:35,165 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 12:13:35,165 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 12:13:35,165 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:13:35,166 INFO L101 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2018-11-28 12:13:35,166 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:13:35,172 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2018-11-28 12:13:35,179 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2018-11-28 12:13:35,705 WARN L180 SmtUtils]: Spent 498.00 ms on a formula simplification. DAG size of input: 210 DAG size of output: 184 [2018-11-28 12:13:36,246 WARN L180 SmtUtils]: Spent 518.00 ms on a formula simplification. DAG size of input: 161 DAG size of output: 144 [2018-11-28 12:13:36,253 INFO L216 LassoAnalysis]: Preferences: [2018-11-28 12:13:36,254 INFO L124 ssoRankerPreferences]: Compute integeral hull: false [2018-11-28 12:13:36,254 INFO L125 ssoRankerPreferences]: Enable LassoPartitioneer: true [2018-11-28 12:13:36,254 INFO L126 ssoRankerPreferences]: Term annotations enabled: false [2018-11-28 12:13:36,254 INFO L127 ssoRankerPreferences]: Use exernal solver: true [2018-11-28 12:13:36,254 INFO L128 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 12:13:36,254 INFO L129 ssoRankerPreferences]: Dump SMT script to file: false [2018-11-28 12:13:36,254 INFO L130 ssoRankerPreferences]: Path of dumped script: [2018-11-28 12:13:36,254 INFO L131 ssoRankerPreferences]: Filename of dumped script: elevator_spec3_product27_false-unreach-call_true-termination.cil.c_Iteration5_Loop [2018-11-28 12:13:36,255 INFO L132 ssoRankerPreferences]: MapElimAlgo: Frank [2018-11-28 12:13:36,255 INFO L282 LassoAnalysis]: Starting lasso preprocessing... [2018-11-28 12:13:36,275 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:36,282 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:36,284 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:36,286 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:36,289 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:36,292 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:36,294 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:36,299 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:36,301 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:36,304 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:36,307 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:36,309 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:36,311 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:36,314 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:36,317 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:36,319 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:36,328 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:36,330 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:36,332 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:36,334 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:36,340 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:36,342 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:36,344 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:36,347 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:36,349 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:36,351 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:36,354 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:36,360 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:36,362 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:36,365 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:36,371 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:36,394 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:36,397 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:36,399 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:36,401 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:36,404 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:36,409 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:36,411 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:36,414 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:36,416 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:36,420 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:36,433 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:36,435 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:36,443 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:36,445 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:36,447 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:36,450 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:36,453 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:36,459 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:36,472 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:36,480 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:36,484 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:36,488 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:36,490 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:36,501 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:36,503 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:36,505 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:36,507 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:36,512 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:36,516 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:36,518 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:36,520 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:36,529 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:36,531 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:36,538 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:36,541 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:36,544 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:36,555 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:36,562 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:36,567 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:36,570 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:36,574 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:36,576 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:36,578 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:36,604 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:36,606 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:36,608 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:36,623 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:36,625 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:36,632 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:36,634 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:36,636 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:36,638 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:36,640 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:37,043 INFO L300 LassoAnalysis]: Preprocessing complete. [2018-11-28 12:13:37,043 INFO L412 LassoAnalysis]: Checking for nontermination... No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_5dbd214c-3e27-4a76-8832-000731adef50/bin-2019/uautomizer/z3 Starting monitored process 2 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 2 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 12:13:37,053 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 12:13:37,054 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 12:13:37,059 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 12:13:37,059 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_~__cil_tmp7~0=1} Honda state: {ULTIMATE.start_stopRequestedInDirection_~__cil_tmp7~0=1} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_5dbd214c-3e27-4a76-8832-000731adef50/bin-2019/uautomizer/z3 Starting monitored process 3 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 3 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 12:13:37,135 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 12:13:37,135 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 12:13:37,138 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 12:13:37,138 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___3~5=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___3~5=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_5dbd214c-3e27-4a76-8832-000731adef50/bin-2019/uautomizer/z3 Starting monitored process 4 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 4 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 12:13:37,166 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 12:13:37,166 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 12:13:37,179 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 12:13:37,179 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___2~3=0} Honda state: {ULTIMATE.start_timeShift_~tmp___2~3=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_5dbd214c-3e27-4a76-8832-000731adef50/bin-2019/uautomizer/z3 Starting monitored process 5 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 5 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 12:13:37,203 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 12:13:37,203 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 12:13:37,206 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 12:13:37,206 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_#t~ret20=0} Honda state: {ULTIMATE.start_stopRequestedInDirection_#t~ret20=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_5dbd214c-3e27-4a76-8832-000731adef50/bin-2019/uautomizer/z3 Starting monitored process 6 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 6 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 12:13:37,228 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 12:13:37,228 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 12:13:37,231 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 12:13:37,231 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret43=0} Honda state: {ULTIMATE.start_timeShift_#t~ret43=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_5dbd214c-3e27-4a76-8832-000731adef50/bin-2019/uautomizer/z3 Starting monitored process 7 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 7 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 12:13:37,249 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 12:13:37,249 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 12:13:37,257 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 12:13:37,257 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__1_#t~ret117=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__1_#t~ret117=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_5dbd214c-3e27-4a76-8832-000731adef50/bin-2019/uautomizer/z3 Starting monitored process 8 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 8 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 12:13:37,275 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 12:13:37,275 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 12:13:37,280 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 12:13:37,280 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_#in~respectFloorCalls=1, ULTIMATE.start_stopRequestedInDirection_~respectFloorCalls=1} Honda state: {ULTIMATE.start_stopRequestedInDirection_#in~respectFloorCalls=1, ULTIMATE.start_stopRequestedInDirection_~respectFloorCalls=1} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_5dbd214c-3e27-4a76-8832-000731adef50/bin-2019/uautomizer/z3 Starting monitored process 9 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 9 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 12:13:37,298 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 12:13:37,298 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 12:13:37,300 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 12:13:37,300 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__2_#t~ret119=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__2_#t~ret119=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_5dbd214c-3e27-4a76-8832-000731adef50/bin-2019/uautomizer/z3 Starting monitored process 10 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 10 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 12:13:37,316 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 12:13:37,316 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 12:13:37,319 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 12:13:37,319 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___5~3=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___5~3=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_5dbd214c-3e27-4a76-8832-000731adef50/bin-2019/uautomizer/z3 Starting monitored process 11 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 11 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 12:13:37,334 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 12:13:37,334 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 12:13:37,352 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 12:13:37,352 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_anyStopRequested_~tmp___2~0=0} Honda state: {ULTIMATE.start_anyStopRequested_~tmp___2~0=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_5dbd214c-3e27-4a76-8832-000731adef50/bin-2019/uautomizer/z3 Starting monitored process 12 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 12 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 12:13:37,368 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 12:13:37,368 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 12:13:37,371 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 12:13:37,371 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedAtCurrentFloor_#t~ret26=0} Honda state: {ULTIMATE.start_stopRequestedAtCurrentFloor_#t~ret26=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_5dbd214c-3e27-4a76-8832-000731adef50/bin-2019/uautomizer/z3 Starting monitored process 13 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 13 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 12:13:37,387 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 12:13:37,387 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 12:13:37,393 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 12:13:37,393 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___2~5=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___2~5=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_5dbd214c-3e27-4a76-8832-000731adef50/bin-2019/uautomizer/z3 Starting monitored process 14 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 14 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 12:13:37,412 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 12:13:37,413 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 12:13:37,415 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 12:13:37,415 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {~expectedDirection~0=1} Honda state: {~expectedDirection~0=1} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_5dbd214c-3e27-4a76-8832-000731adef50/bin-2019/uautomizer/z3 Starting monitored process 15 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 15 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 12:13:37,430 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 12:13:37,430 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 12:13:37,432 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 12:13:37,432 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_isExecutiveFloorCalling_#t~ret100=0} Honda state: {ULTIMATE.start_isExecutiveFloorCalling_#t~ret100=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_5dbd214c-3e27-4a76-8832-000731adef50/bin-2019/uautomizer/z3 Starting monitored process 16 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 16 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 12:13:37,448 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 12:13:37,448 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 12:13:37,450 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 12:13:37,450 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_cleanup_#t~ret129=0} Honda state: {ULTIMATE.start_cleanup_#t~ret129=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_5dbd214c-3e27-4a76-8832-000731adef50/bin-2019/uautomizer/z3 Starting monitored process 17 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 17 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 12:13:37,466 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 12:13:37,466 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 12:13:37,468 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 12:13:37,468 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_anyStopRequested_#t~ret5=0} Honda state: {ULTIMATE.start_anyStopRequested_#t~ret5=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_5dbd214c-3e27-4a76-8832-000731adef50/bin-2019/uautomizer/z3 Starting monitored process 18 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 18 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 12:13:37,484 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 12:13:37,484 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 12:13:37,488 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 12:13:37,488 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___1~7=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___1~7=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_5dbd214c-3e27-4a76-8832-000731adef50/bin-2019/uautomizer/z3 Starting monitored process 19 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 19 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 12:13:37,513 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 12:13:37,513 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 12:13:37,515 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 12:13:37,515 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_#t~ret21=0} Honda state: {ULTIMATE.start_stopRequestedInDirection_#t~ret21=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_5dbd214c-3e27-4a76-8832-000731adef50/bin-2019/uautomizer/z3 Starting monitored process 20 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 20 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 12:13:37,532 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 12:13:37,532 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 12:13:37,534 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 12:13:37,534 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__1_#t~ret110=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__1_#t~ret110=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_5dbd214c-3e27-4a76-8832-000731adef50/bin-2019/uautomizer/z3 Starting monitored process 21 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 21 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 12:13:37,551 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 12:13:37,551 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 12:13:37,554 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 12:13:37,554 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_isBlocked_~retValue_acc~0=0, ULTIMATE.start_cleanup_~tmp___0~12=0, ULTIMATE.start_isBlocked_#res=0} Honda state: {ULTIMATE.start_isBlocked_~retValue_acc~0=0, ULTIMATE.start_cleanup_~tmp___0~12=0, ULTIMATE.start_isBlocked_#res=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_5dbd214c-3e27-4a76-8832-000731adef50/bin-2019/uautomizer/z3 Starting monitored process 22 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 22 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 12:13:37,581 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 12:13:37,581 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 12:13:37,584 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 12:13:37,584 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp~11=0} Honda state: {ULTIMATE.start_timeShift_~tmp~11=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_5dbd214c-3e27-4a76-8832-000731adef50/bin-2019/uautomizer/z3 Starting monitored process 23 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 23 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 12:13:37,599 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 12:13:37,599 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 12:13:37,602 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 12:13:37,602 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret42=0} Honda state: {ULTIMATE.start_timeShift_#t~ret42=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_5dbd214c-3e27-4a76-8832-000731adef50/bin-2019/uautomizer/z3 Starting monitored process 24 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 24 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 12:13:37,617 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 12:13:37,617 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 12:13:37,619 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 12:13:37,619 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_~__cil_tmp8~0=1} Honda state: {ULTIMATE.start_stopRequestedInDirection_~__cil_tmp8~0=1} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_5dbd214c-3e27-4a76-8832-000731adef50/bin-2019/uautomizer/z3 Starting monitored process 25 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 25 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 12:13:37,634 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 12:13:37,634 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 12:13:37,636 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 12:13:37,636 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___6~2=0} Honda state: {ULTIMATE.start_timeShift_~tmp___6~2=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_5dbd214c-3e27-4a76-8832-000731adef50/bin-2019/uautomizer/z3 Starting monitored process 26 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 26 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 12:13:37,652 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 12:13:37,652 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 12:13:37,654 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 12:13:37,654 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__2_~tmp___0~11=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__2_~tmp___0~11=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_5dbd214c-3e27-4a76-8832-000731adef50/bin-2019/uautomizer/z3 Starting monitored process 27 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 27 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 12:13:37,673 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 12:13:37,673 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 12:13:37,676 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 12:13:37,676 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__1_#t~ret118=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__1_#t~ret118=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_5dbd214c-3e27-4a76-8832-000731adef50/bin-2019/uautomizer/z3 Starting monitored process 28 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 28 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 12:13:37,694 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 12:13:37,695 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 12:13:37,697 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 12:13:37,697 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___9~2=0, ULTIMATE.start_stopRequestedAtCurrentFloor_~retValue_acc~12=0, ULTIMATE.start_stopRequestedAtCurrentFloor_#res=0} Honda state: {ULTIMATE.start_timeShift_~tmp___9~2=0, ULTIMATE.start_stopRequestedAtCurrentFloor_~retValue_acc~12=0, ULTIMATE.start_stopRequestedAtCurrentFloor_#res=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_5dbd214c-3e27-4a76-8832-000731adef50/bin-2019/uautomizer/z3 Starting monitored process 29 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 29 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 12:13:37,712 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 12:13:37,712 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 12:13:37,715 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 12:13:37,715 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___1~3=0} Honda state: {ULTIMATE.start_timeShift_~tmp___1~3=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_5dbd214c-3e27-4a76-8832-000731adef50/bin-2019/uautomizer/z3 Starting monitored process 30 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 30 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 12:13:37,730 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 12:13:37,730 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 12:13:37,732 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 12:13:37,732 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret51=0} Honda state: {ULTIMATE.start_timeShift_#t~ret51=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_5dbd214c-3e27-4a76-8832-000731adef50/bin-2019/uautomizer/z3 Starting monitored process 31 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 31 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 12:13:37,747 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 12:13:37,747 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 12:13:37,750 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 12:13:37,750 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_#res=1, ULTIMATE.start_stopRequestedInDirection_~retValue_acc~9=1, ULTIMATE.start_timeShift_~tmp___8~2=1} Honda state: {ULTIMATE.start_stopRequestedInDirection_#res=1, ULTIMATE.start_stopRequestedInDirection_~retValue_acc~9=1, ULTIMATE.start_timeShift_~tmp___8~2=1} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_5dbd214c-3e27-4a76-8832-000731adef50/bin-2019/uautomizer/z3 Starting monitored process 32 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 32 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 12:13:37,765 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 12:13:37,765 INFO L163 nArgumentSynthesizer]: Using integer mode. No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_5dbd214c-3e27-4a76-8832-000731adef50/bin-2019/uautomizer/z3 Starting monitored process 33 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 33 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 12:13:37,788 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 3 Nilpotent components: true [2018-11-28 12:13:37,789 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 12:13:39,362 INFO L452 LassoAnalysis]: Proving nontermination failed: No geometric nontermination argument exists. [2018-11-28 12:13:39,365 INFO L216 LassoAnalysis]: Preferences: [2018-11-28 12:13:39,365 INFO L124 ssoRankerPreferences]: Compute integeral hull: false [2018-11-28 12:13:39,365 INFO L125 ssoRankerPreferences]: Enable LassoPartitioneer: true [2018-11-28 12:13:39,365 INFO L126 ssoRankerPreferences]: Term annotations enabled: false [2018-11-28 12:13:39,365 INFO L127 ssoRankerPreferences]: Use exernal solver: false [2018-11-28 12:13:39,365 INFO L128 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 12:13:39,366 INFO L129 ssoRankerPreferences]: Dump SMT script to file: false [2018-11-28 12:13:39,366 INFO L130 ssoRankerPreferences]: Path of dumped script: [2018-11-28 12:13:39,366 INFO L131 ssoRankerPreferences]: Filename of dumped script: elevator_spec3_product27_false-unreach-call_true-termination.cil.c_Iteration5_Loop [2018-11-28 12:13:39,366 INFO L132 ssoRankerPreferences]: MapElimAlgo: Frank [2018-11-28 12:13:39,366 INFO L282 LassoAnalysis]: Starting lasso preprocessing... [2018-11-28 12:13:39,370 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:39,376 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:39,378 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:39,379 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:39,380 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:39,381 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:39,382 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:39,383 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:39,385 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:39,386 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:39,387 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:39,388 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:39,389 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:39,390 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:39,391 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:39,392 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:39,393 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:39,394 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:39,395 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:39,396 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:39,399 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:39,400 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:39,401 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:39,402 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:39,403 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:39,404 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:39,407 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:39,408 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:39,408 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:39,409 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:39,412 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:39,426 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:39,427 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:39,427 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:39,428 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:39,431 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:39,438 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:39,439 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:39,442 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:39,443 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:39,444 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:39,447 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:39,449 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:39,449 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:39,455 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:39,457 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:39,460 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:39,461 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:39,462 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:39,464 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:39,465 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:39,468 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:39,472 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:39,477 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:39,478 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:39,479 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:39,480 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:39,484 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:39,486 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:39,488 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:39,492 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:39,494 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:39,495 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:39,500 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:39,508 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:39,509 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:39,513 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:39,516 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:39,526 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:39,528 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:39,529 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:39,530 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:39,532 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:39,534 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:39,540 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:39,547 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:39,556 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:39,557 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:39,559 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:39,563 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:39,564 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:39,566 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:39,567 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:39,568 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:39,954 INFO L300 LassoAnalysis]: Preprocessing complete. [2018-11-28 12:13:39,958 INFO L497 LassoAnalysis]: Using template 'affine'. [2018-11-28 12:13:39,959 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 12:13:39,960 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 12:13:39,960 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 12:13:39,961 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 12:13:39,961 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 12:13:39,961 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 12:13:39,962 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 12:13:39,962 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 12:13:39,968 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 12:13:39,969 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 12:13:39,969 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 12:13:39,969 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 12:13:39,969 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 12:13:39,970 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 12:13:39,970 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 12:13:39,970 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 12:13:39,970 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 12:13:39,970 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 12:13:39,971 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 12:13:39,971 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 12:13:39,971 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 12:13:39,971 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 12:13:39,971 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 12:13:39,971 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 12:13:39,972 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 12:13:39,972 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 12:13:39,972 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 12:13:39,972 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 12:13:39,973 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 12:13:39,973 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 12:13:39,973 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 12:13:39,973 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 12:13:39,973 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 12:13:39,973 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 12:13:39,974 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 12:13:39,974 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 12:13:39,974 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 12:13:39,975 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 12:13:39,975 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 12:13:39,975 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 12:13:39,975 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 12:13:39,975 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 12:13:39,975 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 12:13:39,975 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 12:13:39,976 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 12:13:39,976 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 12:13:39,977 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 12:13:39,977 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 12:13:39,977 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 12:13:39,977 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 12:13:39,977 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 12:13:39,977 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 12:13:39,977 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 12:13:39,978 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 12:13:39,978 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 12:13:39,979 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 12:13:39,979 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 12:13:39,979 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 12:13:39,979 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 12:13:39,979 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 12:13:39,979 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 12:13:39,979 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 12:13:39,980 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 12:13:39,980 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 12:13:39,981 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 12:13:39,981 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 12:13:39,981 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 12:13:39,981 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 12:13:39,981 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 12:13:39,981 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 12:13:39,982 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 12:13:39,983 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 12:13:39,983 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 12:13:39,984 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 12:13:39,984 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 12:13:39,984 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 12:13:39,984 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 12:13:39,984 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 12:13:39,985 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 12:13:39,985 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 12:13:39,985 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 12:13:39,985 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 12:13:39,986 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 12:13:39,986 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 12:13:39,986 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 12:13:39,986 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 12:13:39,986 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 12:13:39,986 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 12:13:39,987 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 12:13:39,987 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 12:13:39,987 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 12:13:39,988 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 12:13:39,988 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 12:13:39,988 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 12:13:39,988 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 12:13:39,988 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 12:13:39,988 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 12:13:39,988 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 12:13:39,989 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 12:13:39,989 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 12:13:39,990 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 12:13:39,990 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 12:13:39,990 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 12:13:39,990 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 12:13:39,990 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 12:13:39,990 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 12:13:39,990 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 12:13:39,991 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 12:13:39,991 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 12:13:39,991 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 12:13:39,992 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 12:13:39,992 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 12:13:39,992 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 12:13:39,992 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 12:13:39,992 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 12:13:39,992 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 12:13:39,993 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 12:13:39,993 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 12:13:39,993 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 12:13:39,994 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 12:13:39,994 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 12:13:39,994 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 12:13:39,994 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 12:13:39,994 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 12:13:39,994 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 12:13:39,995 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 12:13:39,995 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 12:13:39,995 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 12:13:39,996 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 12:13:39,996 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 12:13:39,996 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 12:13:39,996 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 12:13:39,996 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 12:13:39,996 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 12:13:39,997 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 12:13:39,997 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 12:13:39,997 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 12:13:39,997 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 12:13:39,998 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 12:13:39,998 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 12:13:39,998 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 12:13:39,998 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 12:13:39,998 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 12:13:39,999 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 12:13:39,999 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 12:13:39,999 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 12:13:39,999 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 12:13:39,999 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 12:13:39,999 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 12:13:40,000 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 12:13:40,000 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 12:13:40,000 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 12:13:40,000 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 12:13:40,001 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 12:13:40,001 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 12:13:40,001 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 12:13:40,001 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 12:13:40,001 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 12:13:40,001 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 12:13:40,002 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 12:13:40,002 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 12:13:40,002 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 12:13:40,003 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 12:13:40,003 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 12:13:40,003 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 12:13:40,003 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 12:13:40,003 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 12:13:40,003 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 12:13:40,004 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 12:13:40,004 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 12:13:40,004 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 12:13:40,004 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 12:13:40,005 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 12:13:40,005 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 12:13:40,005 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 12:13:40,005 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 12:13:40,005 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 12:13:40,006 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 12:13:40,006 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 12:13:40,006 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 12:13:40,007 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 12:13:40,007 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 12:13:40,007 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 12:13:40,007 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 12:13:40,007 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 12:13:40,007 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 12:13:40,008 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 12:13:40,008 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 12:13:40,008 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 12:13:40,009 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 12:13:40,009 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 12:13:40,009 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 12:13:40,009 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 12:13:40,009 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 12:13:40,009 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 12:13:40,010 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 12:13:40,010 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 12:13:40,011 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 12:13:40,011 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 12:13:40,011 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 12:13:40,011 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 12:13:40,011 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 12:13:40,012 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 12:13:40,012 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 12:13:40,012 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 12:13:40,012 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 12:13:40,013 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 12:13:40,013 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 12:13:40,013 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 12:13:40,013 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 12:13:40,013 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 12:13:40,013 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 12:13:40,014 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 12:13:40,014 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 12:13:40,014 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 12:13:40,015 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 12:13:40,015 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 12:13:40,015 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 12:13:40,015 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 12:13:40,015 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 12:13:40,015 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 12:13:40,016 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 12:13:40,016 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 12:13:40,016 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 12:13:40,016 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 12:13:40,017 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 12:13:40,017 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 12:13:40,017 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 12:13:40,017 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 12:13:40,017 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 12:13:40,017 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 12:13:40,018 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 12:13:40,018 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 12:13:40,019 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 12:13:40,019 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 12:13:40,019 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 12:13:40,020 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 12:13:40,020 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 12:13:40,020 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 12:13:40,020 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 12:13:40,020 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 12:13:40,020 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 12:13:40,021 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 12:13:40,021 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 12:13:40,021 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 12:13:40,021 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 12:13:40,021 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 12:13:40,022 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 12:13:40,022 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 12:13:40,022 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 12:13:40,022 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 12:13:40,023 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 12:13:40,023 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 12:13:40,023 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 12:13:40,023 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 12:13:40,024 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 12:13:40,024 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 12:13:40,024 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 12:13:40,024 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 12:13:40,024 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 12:13:40,025 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 12:13:40,025 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 12:13:40,025 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 12:13:40,025 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 12:13:40,026 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 12:13:40,026 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 12:13:40,026 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 12:13:40,026 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 12:13:40,026 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 12:13:40,028 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 12:13:40,028 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 12:13:40,029 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 12:13:40,029 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 12:13:40,029 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 12:13:40,029 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 12:13:40,029 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 12:13:40,030 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 12:13:40,031 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 12:13:40,036 INFO L421 nArgumentSynthesizer]: Found a termination argument, trying to simplify. [2018-11-28 12:13:40,045 INFO L443 ModelExtractionUtils]: Simplification made 5 calls to the SMT solver. [2018-11-28 12:13:40,045 INFO L444 ModelExtractionUtils]: 10 out of 14 variables were initially zero. Simplification set additionally 2 variables to zero. [2018-11-28 12:13:40,047 INFO L437 nArgumentSynthesizer]: Simplifying supporting invariants... [2018-11-28 12:13:40,047 INFO L440 nArgumentSynthesizer]: Removed 0 redundant supporting invariants from a total of 0. [2018-11-28 12:13:40,048 INFO L518 LassoAnalysis]: Proved termination. [2018-11-28 12:13:40,048 INFO L520 LassoAnalysis]: Termination argument consisting of: Ranking function f(~currentFloorID~0) = -1*~currentFloorID~0 Supporting invariants [] [2018-11-28 12:13:40,049 INFO L297 tatePredicateManager]: 0 out of 0 supporting invariants were superfluous and have been removed [2018-11-28 12:13:40,278 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 12:13:40,425 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 12:13:40,436 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-28 12:13:40,482 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 12:13:40,485 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-28 12:13:40,539 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 12:13:40,543 INFO L152 lantAutomatonBouncer]: Defining deterministic Buchi interpolant automaton with honda bouncer for stem and without honda bouncer for loop.1 stem predicates 5 loop predicates [2018-11-28 12:13:40,547 INFO L72 iDifferenceNCSBLazy3]: Start buchiDifferenceNCSBLazy3. First operand 25636 states and 47490 transitions. cyclomatic complexity: 21855 Second operand 7 states. [2018-11-28 12:13:41,855 INFO L76 iDifferenceNCSBLazy3]: Finished buchiDifferenceNCSBLazy3. First operand 25636 states and 47490 transitions. cyclomatic complexity: 21855. Second operand 7 states. Result 53430 states and 98706 transitions. Complement of second has 14 states. [2018-11-28 12:13:41,855 INFO L142 InterpolantAutomaton]: Switched to read-only mode: Buchi interpolant automaton has 8 states 1 stem states 5 non-accepting loop states 1 accepting loop states [2018-11-28 12:13:41,856 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 7 states. [2018-11-28 12:13:41,970 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8 states to 8 states and 16973 transitions. [2018-11-28 12:13:41,972 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 8 states and 16973 transitions. Stem has 149 letters. Loop has 47 letters. [2018-11-28 12:13:41,974 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2018-11-28 12:13:41,974 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 8 states and 16973 transitions. Stem has 196 letters. Loop has 47 letters. [2018-11-28 12:13:41,975 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2018-11-28 12:13:41,975 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 8 states and 16973 transitions. Stem has 149 letters. Loop has 94 letters. [2018-11-28 12:13:41,977 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2018-11-28 12:13:41,977 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 53430 states and 98706 transitions. [2018-11-28 12:13:42,173 INFO L131 ngComponentsAnalysis]: Automaton has 6 accepting balls. 16025 [2018-11-28 12:13:42,325 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 53430 states to 47191 states and 87081 transitions. [2018-11-28 12:13:42,325 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 36413 [2018-11-28 12:13:42,348 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 36421 [2018-11-28 12:13:42,349 INFO L73 IsDeterministic]: Start isDeterministic. Operand 47191 states and 87081 transitions. [2018-11-28 12:13:42,374 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2018-11-28 12:13:42,374 INFO L705 BuchiCegarLoop]: Abstraction has 47191 states and 87081 transitions. [2018-11-28 12:13:42,399 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 47191 states and 87081 transitions. [2018-11-28 12:13:42,728 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 47191 to 46685. [2018-11-28 12:13:42,728 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 46685 states. [2018-11-28 12:13:42,771 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 46685 states to 46685 states and 86269 transitions. [2018-11-28 12:13:42,771 INFO L728 BuchiCegarLoop]: Abstraction has 46685 states and 86269 transitions. [2018-11-28 12:13:42,771 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-28 12:13:42,771 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-28 12:13:42,771 INFO L87 Difference]: Start difference. First operand 46685 states and 86269 transitions. Second operand 4 states. [2018-11-28 12:13:43,295 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-28 12:13:43,295 INFO L93 Difference]: Finished difference Result 139713 states and 258109 transitions. [2018-11-28 12:13:43,295 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2018-11-28 12:13:43,295 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 139713 states and 258109 transitions. [2018-11-28 12:13:43,639 INFO L131 ngComponentsAnalysis]: Automaton has 18 accepting balls. 47553 [2018-11-28 12:13:43,944 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 139713 states to 139713 states and 258109 transitions. [2018-11-28 12:13:43,944 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 108069 [2018-11-28 12:13:44,007 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 108069 [2018-11-28 12:13:44,008 INFO L73 IsDeterministic]: Start isDeterministic. Operand 139713 states and 258109 transitions. [2018-11-28 12:13:44,024 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2018-11-28 12:13:44,024 INFO L705 BuchiCegarLoop]: Abstraction has 139713 states and 258109 transitions. [2018-11-28 12:13:44,098 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 139713 states and 258109 transitions. [2018-11-28 12:13:44,631 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 139713 to 46715. [2018-11-28 12:13:44,631 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 46715 states. [2018-11-28 12:13:44,683 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 46715 states to 46715 states and 86299 transitions. [2018-11-28 12:13:44,683 INFO L728 BuchiCegarLoop]: Abstraction has 46715 states and 86299 transitions. [2018-11-28 12:13:44,683 INFO L608 BuchiCegarLoop]: Abstraction has 46715 states and 86299 transitions. [2018-11-28 12:13:44,683 INFO L442 BuchiCegarLoop]: ======== Iteration 6============ [2018-11-28 12:13:44,683 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 46715 states and 86299 transitions. [2018-11-28 12:13:44,758 INFO L131 ngComponentsAnalysis]: Automaton has 6 accepting balls. 15851 [2018-11-28 12:13:44,758 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-28 12:13:44,758 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-28 12:13:44,760 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 12:13:44,761 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 12:13:44,761 INFO L794 eck$LassoCheckResult]: Stem: 388720#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string53.base, #t~string53.offset := #Ultimate.alloc(10);call #t~string55.base, #t~string55.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string55.base, #t~string55.offset, 1);call write~init~int(95, #t~string55.base, 1 + #t~string55.offset, 1);call write~init~int(93, #t~string55.base, 2 + #t~string55.offset, 1);call write~init~int(0, #t~string55.base, 3 + #t~string55.offset, 1);call #t~string57.base, #t~string57.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string57.base, #t~string57.offset, 1);call write~init~int(93, #t~string57.base, 1 + #t~string57.offset, 1);call write~init~int(32, #t~string57.base, 2 + #t~string57.offset, 1);call write~init~int(0, #t~string57.base, 3 + #t~string57.offset, 1);call #t~string59.base, #t~string59.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string59.base, #t~string59.offset, 1);call write~init~int(97, #t~string59.base, 1 + #t~string59.offset, 1);call write~init~int(116, #t~string59.base, 2 + #t~string59.offset, 1);call write~init~int(32, #t~string59.base, 3 + #t~string59.offset, 1);call write~init~int(0, #t~string59.base, 4 + #t~string59.offset, 1);call #t~string61.base, #t~string61.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string61.base, #t~string61.offset, 1);call write~init~int(105, #t~string61.base, 1 + #t~string61.offset, 1);call write~init~int(0, #t~string61.base, 2 + #t~string61.offset, 1);call #t~string63.base, #t~string63.offset := #Ultimate.alloc(10);call #t~string65.base, #t~string65.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string65.base, #t~string65.offset, 1);call write~init~int(112, #t~string65.base, 1 + #t~string65.offset, 1);call write~init~int(0, #t~string65.base, 2 + #t~string65.offset, 1);call #t~string67.base, #t~string67.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string67.base, #t~string67.offset, 1);call write~init~int(111, #t~string67.base, 1 + #t~string67.offset, 1);call write~init~int(119, #t~string67.base, 2 + #t~string67.offset, 1);call write~init~int(110, #t~string67.base, 3 + #t~string67.offset, 1);call write~init~int(0, #t~string67.base, 4 + #t~string67.offset, 1);call #t~string69.base, #t~string69.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string69.base, #t~string69.offset, 1);call write~init~int(73, #t~string69.base, 1 + #t~string69.offset, 1);call write~init~int(76, #t~string69.base, 2 + #t~string69.offset, 1);call write~init~int(95, #t~string69.base, 3 + #t~string69.offset, 1);call write~init~int(112, #t~string69.base, 4 + #t~string69.offset, 1);call write~init~int(58, #t~string69.base, 5 + #t~string69.offset, 1);call write~init~int(0, #t~string69.base, 6 + #t~string69.offset, 1);call #t~string71.base, #t~string71.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string71.base, #t~string71.offset, 1);call write~init~int(37, #t~string71.base, 1 + #t~string71.offset, 1);call write~init~int(105, #t~string71.base, 2 + #t~string71.offset, 1);call write~init~int(0, #t~string71.base, 3 + #t~string71.offset, 1);call #t~string73.base, #t~string73.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string73.base, #t~string73.offset, 1);call write~init~int(37, #t~string73.base, 1 + #t~string73.offset, 1);call write~init~int(105, #t~string73.base, 2 + #t~string73.offset, 1);call write~init~int(0, #t~string73.base, 3 + #t~string73.offset, 1);call #t~string75.base, #t~string75.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string75.base, #t~string75.offset, 1);call write~init~int(37, #t~string75.base, 1 + #t~string75.offset, 1);call write~init~int(105, #t~string75.base, 2 + #t~string75.offset, 1);call write~init~int(0, #t~string75.base, 3 + #t~string75.offset, 1);call #t~string77.base, #t~string77.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string77.base, #t~string77.offset, 1);call write~init~int(37, #t~string77.base, 1 + #t~string77.offset, 1);call write~init~int(105, #t~string77.base, 2 + #t~string77.offset, 1);call write~init~int(0, #t~string77.base, 3 + #t~string77.offset, 1);call #t~string79.base, #t~string79.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string79.base, #t~string79.offset, 1);call write~init~int(37, #t~string79.base, 1 + #t~string79.offset, 1);call write~init~int(105, #t~string79.base, 2 + #t~string79.offset, 1);call write~init~int(0, #t~string79.base, 3 + #t~string79.offset, 1);call #t~string81.base, #t~string81.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string81.base, #t~string81.offset, 1);call write~init~int(70, #t~string81.base, 1 + #t~string81.offset, 1);call write~init~int(95, #t~string81.base, 2 + #t~string81.offset, 1);call write~init~int(112, #t~string81.base, 3 + #t~string81.offset, 1);call write~init~int(58, #t~string81.base, 4 + #t~string81.offset, 1);call write~init~int(0, #t~string81.base, 5 + #t~string81.offset, 1);call #t~string84.base, #t~string84.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string84.base, #t~string84.offset, 1);call write~init~int(37, #t~string84.base, 1 + #t~string84.offset, 1);call write~init~int(105, #t~string84.base, 2 + #t~string84.offset, 1);call write~init~int(0, #t~string84.base, 3 + #t~string84.offset, 1);call #t~string87.base, #t~string87.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string87.base, #t~string87.offset, 1);call write~init~int(37, #t~string87.base, 1 + #t~string87.offset, 1);call write~init~int(105, #t~string87.base, 2 + #t~string87.offset, 1);call write~init~int(0, #t~string87.base, 3 + #t~string87.offset, 1);call #t~string90.base, #t~string90.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string90.base, #t~string90.offset, 1);call write~init~int(37, #t~string90.base, 1 + #t~string90.offset, 1);call write~init~int(105, #t~string90.base, 2 + #t~string90.offset, 1);call write~init~int(0, #t~string90.base, 3 + #t~string90.offset, 1);call #t~string93.base, #t~string93.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string93.base, #t~string93.offset, 1);call write~init~int(37, #t~string93.base, 1 + #t~string93.offset, 1);call write~init~int(105, #t~string93.base, 2 + #t~string93.offset, 1);call write~init~int(0, #t~string93.base, 3 + #t~string93.offset, 1);call #t~string96.base, #t~string96.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string96.base, #t~string96.offset, 1);call write~init~int(37, #t~string96.base, 1 + #t~string96.offset, 1);call write~init~int(105, #t~string96.base, 2 + #t~string96.offset, 1);call write~init~int(0, #t~string96.base, 3 + #t~string96.offset, 1);call #t~string98.base, #t~string98.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string98.base, #t~string98.offset, 1);call write~init~int(0, #t~string98.base, 1 + #t~string98.offset, 1);~cleanupTimeShifts~0 := 12;~expectedDirection~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;call #t~string154.base, #t~string154.offset := #Ultimate.alloc(30);call #t~string155.base, #t~string155.offset := #Ultimate.alloc(9);call #t~string156.base, #t~string156.offset := #Ultimate.alloc(21);call #t~string157.base, #t~string157.offset := #Ultimate.alloc(30);call #t~string158.base, #t~string158.offset := #Ultimate.alloc(9);call #t~string159.base, #t~string159.offset := #Ultimate.alloc(21);call #t~string163.base, #t~string163.offset := #Ultimate.alloc(30);call #t~string164.base, #t~string164.offset := #Ultimate.alloc(9);call #t~string165.base, #t~string165.offset := #Ultimate.alloc(25);call #t~string166.base, #t~string166.offset := #Ultimate.alloc(30);call #t~string167.base, #t~string167.offset := #Ultimate.alloc(9);call #t~string168.base, #t~string168.offset := #Ultimate.alloc(25); 388721#L-1 havoc main_#res;havoc main_#t~ret134, main_~retValue_acc~21, main_~tmp~25;havoc main_~retValue_acc~21;havoc main_~tmp~25; 388116#L3055 havoc valid_product_#res;havoc valid_product_~retValue_acc~26;havoc valid_product_~retValue_acc~26;valid_product_~retValue_acc~26 := 1;valid_product_#res := valid_product_~retValue_acc~26; 386710#L3063 main_#t~ret134 := valid_product_#res;main_~tmp~25 := main_#t~ret134;havoc main_#t~ret134; 386666#L2358 assume 0 != main_~tmp~25; 386667#L2332 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 387755#L2447 havoc bobCall_#t~ret122, bobCall_~tmp~17;havoc bobCall_~tmp~17;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~18;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~18; 390381#L1741 assume !(0 == getOrigin_~person); 390311#L1745 assume 1 == getOrigin_~person;getOrigin_~retValue_acc~18 := 3;getOrigin_#res := getOrigin_~retValue_acc~18; 390312#L1766 bobCall_#t~ret122 := getOrigin_#res;bobCall_~tmp~17 := bobCall_#t~ret122;havoc bobCall_#t~ret122;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~17;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 393931#L2725 assume 0 == initPersonOnFloor_~floor; 389902#L2726 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 388416#L2833-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 388338#L2517 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 386921#L2529-2 havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret107, __utac_acc__Specification3_spec__1_#t~ret108, __utac_acc__Specification3_spec__1_#t~ret109, __utac_acc__Specification3_spec__1_#t~ret110, __utac_acc__Specification3_spec__1_#t~ret111, __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~15, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~7, __utac_acc__Specification3_spec__1_~tmp___2~5, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~15;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~7;havoc __utac_acc__Specification3_spec__1_~tmp___2~5;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 386922#L303 __utac_acc__Specification3_spec__1_#t~ret107 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~15 := __utac_acc__Specification3_spec__1_#t~ret107;havoc __utac_acc__Specification3_spec__1_#t~ret107;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~15;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~4;havoc getCurrentHeading_~retValue_acc~4;getCurrentHeading_~retValue_acc~4 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~4; 389042#L355 __utac_acc__Specification3_spec__1_#t~ret108 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret108;havoc __utac_acc__Specification3_spec__1_#t~ret108; 387145#L1840 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 387146#L1902 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~3;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~3; 392324#L320-5 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~3 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~3; 390308#L341-5 __utac_acc__Specification3_spec__1_#t~ret114 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret114;havoc __utac_acc__Specification3_spec__1_#t~ret114; 391882#L1906 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 390400#L1946 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 391825#L2454 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 391705#L2481 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 393924#L1590 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 389772#L972 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 389048#L303-1 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 389049#L976 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 387410#L989 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 386437#L1127 assume !(0 != timeShift_~tmp___9~2); 386439#L1218 assume !(1 == ~doorState~0); 391921#L1218-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 391823#L2454-3 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 391651#L2481-3 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 393926#L1590-1 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 390827#L855 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 389047#L303-2 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 389033#L868 timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 391098#L1226 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 391099#L912 assume !(1 == ~currentHeading~0); 388057#L922 assume !(0 == ~currentFloorID~0); 388058#L922-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 388718#L928-5 havoc __utac_acc__Specification3_spec__2_#t~ret119, __utac_acc__Specification3_spec__2_#t~ret120, __utac_acc__Specification3_spec__2_~tmp~16, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~16;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 395673#L1971 assume !(-1 == ~expectedDirection~0); 395668#L1983 assume !(1 == ~expectedDirection~0); 395658#L1984 havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret107, __utac_acc__Specification3_spec__1_#t~ret108, __utac_acc__Specification3_spec__1_#t~ret109, __utac_acc__Specification3_spec__1_#t~ret110, __utac_acc__Specification3_spec__1_#t~ret111, __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~15, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~7, __utac_acc__Specification3_spec__1_~tmp___2~5, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~15;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~7;havoc __utac_acc__Specification3_spec__1_~tmp___2~5;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 395654#L303-4 __utac_acc__Specification3_spec__1_#t~ret107 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~15 := __utac_acc__Specification3_spec__1_#t~ret107;havoc __utac_acc__Specification3_spec__1_#t~ret107;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~15;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~4;havoc getCurrentHeading_~retValue_acc~4;getCurrentHeading_~retValue_acc~4 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~4; 394399#L355-3 __utac_acc__Specification3_spec__1_#t~ret108 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret108;havoc __utac_acc__Specification3_spec__1_#t~ret108; 394400#L1840-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 392599#L1902-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~3;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~3; 392310#L320-17 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~3 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~3; 390595#L341-17 __utac_acc__Specification3_spec__1_#t~ret114 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret114;havoc __utac_acc__Specification3_spec__1_#t~ret114; 391844#L1906-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 390403#L1946-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 397043#L2454-25 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 397039#L2481-25 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 397038#L1590-3 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 397030#L972-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 397028#L303-5 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 397025#L976-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 397022#L989-1 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 397020#L1127-1 assume !(0 != timeShift_~tmp___9~2); 397021#L1218-3 assume !(1 == ~doorState~0); 403917#L1218-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 403869#L2454-28 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 403861#L2481-28 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 403859#L1590-4 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 403857#L855-2 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 403858#L303-6 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 403893#L868-2 timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 403892#L1226-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 394884#L912-3 assume !(1 == ~currentHeading~0); 388049#L922-9 assume !(0 == ~currentFloorID~0); 388051#L922-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 395931#L928-11 havoc __utac_acc__Specification3_spec__2_#t~ret119, __utac_acc__Specification3_spec__2_#t~ret120, __utac_acc__Specification3_spec__2_~tmp~16, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~16;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 395871#L1971-1 assume !(-1 == ~expectedDirection~0); 395867#L1983-1 assume !(1 == ~expectedDirection~0); 395859#L1984-1 havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret107, __utac_acc__Specification3_spec__1_#t~ret108, __utac_acc__Specification3_spec__1_#t~ret109, __utac_acc__Specification3_spec__1_#t~ret110, __utac_acc__Specification3_spec__1_#t~ret111, __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~15, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~7, __utac_acc__Specification3_spec__1_~tmp___2~5, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~15;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~7;havoc __utac_acc__Specification3_spec__1_~tmp___2~5;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 395856#L303-8 __utac_acc__Specification3_spec__1_#t~ret107 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~15 := __utac_acc__Specification3_spec__1_#t~ret107;havoc __utac_acc__Specification3_spec__1_#t~ret107;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~15;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~4;havoc getCurrentHeading_~retValue_acc~4;getCurrentHeading_~retValue_acc~4 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~4; 395853#L355-6 __utac_acc__Specification3_spec__1_#t~ret108 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret108;havoc __utac_acc__Specification3_spec__1_#t~ret108; 394892#L1840-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 392601#L1902-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~3;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~3; 392280#L320-29 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~3 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~3; 390563#L341-29 __utac_acc__Specification3_spec__1_#t~ret114 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret114;havoc __utac_acc__Specification3_spec__1_#t~ret114; 391560#L1906-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 390374#L1946-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 395217#L2454-50 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 395212#L2481-50 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 395211#L1590-6 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 395210#L972-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 395204#L303-9 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 395170#L976-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 395167#L989-2 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 395165#L1127-2 assume !(0 != timeShift_~tmp___9~2); 395164#L1218-6 assume 1 == ~doorState~0;~doorState~0 := 0; 395163#L1218-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 395121#L2454-53 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 395116#L2481-53 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 395114#L1590-7 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 395068#L855-4 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 394917#L303-10 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 394908#L868-4 timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 394904#L1226-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 394899#L912-6 assume !(1 == ~currentHeading~0); 387751#L922-18 assume !(0 == ~currentFloorID~0); 387753#L922-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 395969#L928-17 havoc __utac_acc__Specification3_spec__2_#t~ret119, __utac_acc__Specification3_spec__2_#t~ret120, __utac_acc__Specification3_spec__2_~tmp~16, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~16;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 395967#L1971-2 assume !(-1 == ~expectedDirection~0); 395964#L1983-2 assume !(1 == ~expectedDirection~0); 395923#L1984-2 havoc bobCall_#t~ret122, bobCall_~tmp~17;havoc bobCall_~tmp~17;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~18;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~18; 395922#L1741-1 assume !(0 == getOrigin_~person); 395919#L1745-1 assume 1 == getOrigin_~person;getOrigin_~retValue_acc~18 := 3;getOrigin_#res := getOrigin_~retValue_acc~18; 395910#L1766-1 bobCall_#t~ret122 := getOrigin_#res;bobCall_~tmp~17 := bobCall_#t~ret122;havoc bobCall_#t~ret122;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~17;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 395906#L2725-1 assume 0 == initPersonOnFloor_~floor; 395882#L2726-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 395870#L2833-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 395863#L2517-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 395858#L2529-5 havoc cleanup_#t~ret128, cleanup_#t~ret129, cleanup_~i~3, cleanup_~tmp~23, cleanup_~tmp___0~12, cleanup_~__cil_tmp4~0;havoc cleanup_~i~3;havoc cleanup_~tmp~23;havoc cleanup_~tmp___0~12;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret107, __utac_acc__Specification3_spec__1_#t~ret108, __utac_acc__Specification3_spec__1_#t~ret109, __utac_acc__Specification3_spec__1_#t~ret110, __utac_acc__Specification3_spec__1_#t~ret111, __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~15, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~7, __utac_acc__Specification3_spec__1_~tmp___2~5, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~15;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~7;havoc __utac_acc__Specification3_spec__1_~tmp___2~5;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 395855#L303-12 __utac_acc__Specification3_spec__1_#t~ret107 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~15 := __utac_acc__Specification3_spec__1_#t~ret107;havoc __utac_acc__Specification3_spec__1_#t~ret107;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~15;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~4;havoc getCurrentHeading_~retValue_acc~4;getCurrentHeading_~retValue_acc~4 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~4; 395852#L355-9 __utac_acc__Specification3_spec__1_#t~ret108 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret108;havoc __utac_acc__Specification3_spec__1_#t~ret108; 394891#L1840-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 392600#L1902-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~3;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~3; 392436#L320-41 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~3 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~3; 390494#L341-41 __utac_acc__Specification3_spec__1_#t~ret114 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret114;havoc __utac_acc__Specification3_spec__1_#t~ret114; 391511#L1906-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 390377#L1946-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 395716#L2454-75 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 395713#L2481-75 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 395704#L1590-9 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 395692#L972-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 395686#L303-13 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 395680#L976-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 395676#L989-3 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 395671#L1127-3 assume !(0 != timeShift_~tmp___9~2); 395659#L1218-9 assume !(1 == ~doorState~0); 395655#L1218-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 395067#L2454-78 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 395060#L2481-78 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 395015#L1590-10 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 394973#L855-6 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 394915#L303-14 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 394907#L868-6 timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 394902#L1226-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 394898#L912-9 assume !(1 == ~currentHeading~0); 387747#L922-27 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 387748#L922-29 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 405674#L928-23 havoc __utac_acc__Specification3_spec__2_#t~ret119, __utac_acc__Specification3_spec__2_#t~ret120, __utac_acc__Specification3_spec__2_~tmp~16, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~16;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 405672#L1971-3 assume !(-1 == ~expectedDirection~0); 405670#L1983-3 assume !(1 == ~expectedDirection~0); 405669#L1984-3 cleanup_~i~3 := 0; 404289#L2164-2 assume !false; 404290#L2165 [2018-11-28 12:13:44,761 INFO L796 eck$LassoCheckResult]: Loop: 404290#L2165 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 417712#L2168 assume cleanup_~i~3 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~0;havoc isBlocked_~retValue_acc~0;isBlocked_~retValue_acc~0 := 0;isBlocked_#res := isBlocked_~retValue_acc~0; 417711#L130 cleanup_#t~ret128 := isBlocked_#res;cleanup_~tmp___0~12 := cleanup_#t~ret128;havoc cleanup_#t~ret128; 417710#L2172 assume 1 != cleanup_~tmp___0~12; 417709#L2172-1 havoc isIdle_#res;havoc isIdle_#t~ret8, isIdle_~retValue_acc~7, isIdle_~tmp~4;havoc isIdle_~retValue_acc~7;havoc isIdle_~tmp~4;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret3, anyStopRequested_#t~ret4, anyStopRequested_#t~ret5, anyStopRequested_#t~ret6, anyStopRequested_#t~ret7, anyStopRequested_~retValue_acc~6, anyStopRequested_~tmp~3, anyStopRequested_~tmp___0~0, anyStopRequested_~tmp___1~0, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~6;havoc anyStopRequested_~tmp~3;havoc anyStopRequested_~tmp___0~0;havoc anyStopRequested_~tmp___1~0;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 417708#L2454-100 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 417673#L2481-100 anyStopRequested_#t~ret3 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret3;havoc anyStopRequested_#t~ret3; 417643#L411 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~6 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~6; 417634#L475 isIdle_#t~ret8 := anyStopRequested_#res;isIdle_~tmp~4 := isIdle_#t~ret8;havoc isIdle_#t~ret8;isIdle_~retValue_acc~7 := (if 0 == isIdle_~tmp~4 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~7; 416161#L488 cleanup_#t~ret129 := isIdle_#res;cleanup_~tmp~23 := cleanup_#t~ret129;havoc cleanup_#t~ret129; 416160#L2184 assume !(0 != cleanup_~tmp~23);havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret107, __utac_acc__Specification3_spec__1_#t~ret108, __utac_acc__Specification3_spec__1_#t~ret109, __utac_acc__Specification3_spec__1_#t~ret110, __utac_acc__Specification3_spec__1_#t~ret111, __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~15, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~7, __utac_acc__Specification3_spec__1_~tmp___2~5, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~15;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~7;havoc __utac_acc__Specification3_spec__1_~tmp___2~5;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 409561#L303-16 __utac_acc__Specification3_spec__1_#t~ret107 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~15 := __utac_acc__Specification3_spec__1_#t~ret107;havoc __utac_acc__Specification3_spec__1_#t~ret107;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~15;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~4;havoc getCurrentHeading_~retValue_acc~4;getCurrentHeading_~retValue_acc~4 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~4; 406855#L355-12 __utac_acc__Specification3_spec__1_#t~ret108 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret108;havoc __utac_acc__Specification3_spec__1_#t~ret108; 406854#L1840-4 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 404021#L1841-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0); 404023#L1851-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 1;buttonForFloorIsPressed_#in~floorID := 1;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~3;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~3; 418259#L320-49 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~3 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~3; 418265#L341-49 __utac_acc__Specification3_spec__1_#t~ret110 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___3~5 := __utac_acc__Specification3_spec__1_#t~ret110;havoc __utac_acc__Specification3_spec__1_#t~ret110; 418260#L1856-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___3~5;~expectedDirection~0 := 1; 418235#L1946-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 419606#L2454-105 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 419605#L2481-105 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 419604#L1590-12 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 419598#L972-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 419596#L303-17 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 419590#L976-4 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 419588#L989-4 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 419586#L1127-4 assume !(0 != timeShift_~tmp___9~2); 419585#L1218-12 assume 1 == ~doorState~0;~doorState~0 := 0; 419584#L1218-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 419582#L2454-108 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 419578#L2481-108 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 419577#L1590-13 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 417925#L855-8 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 417769#L303-18 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 417766#L868-8 timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 417763#L1226-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 417761#L912-12 assume 1 == ~currentHeading~0;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~24;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~24;isTopFloor_~retValue_acc~24 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~24; 417749#L3028-21 continueInDirection_#t~ret23 := isTopFloor_#res;continueInDirection_~tmp~7 := continueInDirection_#t~ret23;havoc continueInDirection_#t~ret23; 417746#L916-36 assume !(0 != continueInDirection_~tmp~7); 417732#L922-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 417728#L928-29 havoc __utac_acc__Specification3_spec__2_#t~ret119, __utac_acc__Specification3_spec__2_#t~ret120, __utac_acc__Specification3_spec__2_~tmp~16, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~16;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 416833#L1971-4 assume !(-1 == ~expectedDirection~0); 417725#L1983-4 assume 1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~4;havoc getCurrentHeading_~retValue_acc~4;getCurrentHeading_~retValue_acc~4 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~4; 417717#L355-14 __utac_acc__Specification3_spec__2_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp~16 := __utac_acc__Specification3_spec__2_#t~ret120;havoc __utac_acc__Specification3_spec__2_#t~ret120; 417715#L1988-8 assume !(0 == __utac_acc__Specification3_spec__2_~tmp~16); 417714#L1984-4 cleanup_~i~3 := 1 + cleanup_~i~3; 417713#L2164-2 assume !false; 404290#L2165 [2018-11-28 12:13:44,771 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 12:13:44,771 INFO L82 PathProgramCache]: Analyzing trace with hash 221118084, now seen corresponding path program 1 times [2018-11-28 12:13:44,771 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 12:13:44,771 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 12:13:44,772 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:13:44,772 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-28 12:13:44,772 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:13:44,785 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 12:13:44,831 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 12:13:44,831 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 12:13:44,831 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-28 12:13:44,831 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-28 12:13:44,832 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 12:13:44,832 INFO L82 PathProgramCache]: Analyzing trace with hash -554572659, now seen corresponding path program 1 times [2018-11-28 12:13:44,836 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 12:13:44,836 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 12:13:44,837 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:13:44,837 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-28 12:13:44,837 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:13:44,842 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 12:13:44,895 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 12:13:44,895 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 12:13:44,895 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-28 12:13:44,896 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-28 12:13:44,896 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-11-28 12:13:44,896 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-28 12:13:44,896 INFO L87 Difference]: Start difference. First operand 46715 states and 86299 transitions. cyclomatic complexity: 39592 Second operand 5 states. [2018-11-28 12:13:45,862 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-28 12:13:45,862 INFO L93 Difference]: Finished difference Result 92287 states and 170343 transitions. [2018-11-28 12:13:45,862 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2018-11-28 12:13:45,862 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 92287 states and 170343 transitions. [2018-11-28 12:13:46,075 INFO L131 ngComponentsAnalysis]: Automaton has 6 accepting balls. 31302 [2018-11-28 12:13:46,244 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 92287 states to 92287 states and 170343 transitions. [2018-11-28 12:13:46,244 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 71426 [2018-11-28 12:13:46,281 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 71426 [2018-11-28 12:13:46,281 INFO L73 IsDeterministic]: Start isDeterministic. Operand 92287 states and 170343 transitions. [2018-11-28 12:13:46,303 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2018-11-28 12:13:46,303 INFO L705 BuchiCegarLoop]: Abstraction has 92287 states and 170343 transitions. [2018-11-28 12:13:46,343 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 92287 states and 170343 transitions. [2018-11-28 12:13:46,668 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 92287 to 46715. [2018-11-28 12:13:46,668 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 46715 states. [2018-11-28 12:13:46,712 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 46715 states to 46715 states and 86239 transitions. [2018-11-28 12:13:46,712 INFO L728 BuchiCegarLoop]: Abstraction has 46715 states and 86239 transitions. [2018-11-28 12:13:46,712 INFO L608 BuchiCegarLoop]: Abstraction has 46715 states and 86239 transitions. [2018-11-28 12:13:46,712 INFO L442 BuchiCegarLoop]: ======== Iteration 7============ [2018-11-28 12:13:46,712 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 46715 states and 86239 transitions. [2018-11-28 12:13:46,787 INFO L131 ngComponentsAnalysis]: Automaton has 6 accepting balls. 15851 [2018-11-28 12:13:46,787 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-28 12:13:46,787 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-28 12:13:46,790 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 12:13:46,790 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 12:13:46,790 INFO L794 eck$LassoCheckResult]: Stem: 527787#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string53.base, #t~string53.offset := #Ultimate.alloc(10);call #t~string55.base, #t~string55.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string55.base, #t~string55.offset, 1);call write~init~int(95, #t~string55.base, 1 + #t~string55.offset, 1);call write~init~int(93, #t~string55.base, 2 + #t~string55.offset, 1);call write~init~int(0, #t~string55.base, 3 + #t~string55.offset, 1);call #t~string57.base, #t~string57.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string57.base, #t~string57.offset, 1);call write~init~int(93, #t~string57.base, 1 + #t~string57.offset, 1);call write~init~int(32, #t~string57.base, 2 + #t~string57.offset, 1);call write~init~int(0, #t~string57.base, 3 + #t~string57.offset, 1);call #t~string59.base, #t~string59.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string59.base, #t~string59.offset, 1);call write~init~int(97, #t~string59.base, 1 + #t~string59.offset, 1);call write~init~int(116, #t~string59.base, 2 + #t~string59.offset, 1);call write~init~int(32, #t~string59.base, 3 + #t~string59.offset, 1);call write~init~int(0, #t~string59.base, 4 + #t~string59.offset, 1);call #t~string61.base, #t~string61.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string61.base, #t~string61.offset, 1);call write~init~int(105, #t~string61.base, 1 + #t~string61.offset, 1);call write~init~int(0, #t~string61.base, 2 + #t~string61.offset, 1);call #t~string63.base, #t~string63.offset := #Ultimate.alloc(10);call #t~string65.base, #t~string65.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string65.base, #t~string65.offset, 1);call write~init~int(112, #t~string65.base, 1 + #t~string65.offset, 1);call write~init~int(0, #t~string65.base, 2 + #t~string65.offset, 1);call #t~string67.base, #t~string67.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string67.base, #t~string67.offset, 1);call write~init~int(111, #t~string67.base, 1 + #t~string67.offset, 1);call write~init~int(119, #t~string67.base, 2 + #t~string67.offset, 1);call write~init~int(110, #t~string67.base, 3 + #t~string67.offset, 1);call write~init~int(0, #t~string67.base, 4 + #t~string67.offset, 1);call #t~string69.base, #t~string69.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string69.base, #t~string69.offset, 1);call write~init~int(73, #t~string69.base, 1 + #t~string69.offset, 1);call write~init~int(76, #t~string69.base, 2 + #t~string69.offset, 1);call write~init~int(95, #t~string69.base, 3 + #t~string69.offset, 1);call write~init~int(112, #t~string69.base, 4 + #t~string69.offset, 1);call write~init~int(58, #t~string69.base, 5 + #t~string69.offset, 1);call write~init~int(0, #t~string69.base, 6 + #t~string69.offset, 1);call #t~string71.base, #t~string71.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string71.base, #t~string71.offset, 1);call write~init~int(37, #t~string71.base, 1 + #t~string71.offset, 1);call write~init~int(105, #t~string71.base, 2 + #t~string71.offset, 1);call write~init~int(0, #t~string71.base, 3 + #t~string71.offset, 1);call #t~string73.base, #t~string73.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string73.base, #t~string73.offset, 1);call write~init~int(37, #t~string73.base, 1 + #t~string73.offset, 1);call write~init~int(105, #t~string73.base, 2 + #t~string73.offset, 1);call write~init~int(0, #t~string73.base, 3 + #t~string73.offset, 1);call #t~string75.base, #t~string75.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string75.base, #t~string75.offset, 1);call write~init~int(37, #t~string75.base, 1 + #t~string75.offset, 1);call write~init~int(105, #t~string75.base, 2 + #t~string75.offset, 1);call write~init~int(0, #t~string75.base, 3 + #t~string75.offset, 1);call #t~string77.base, #t~string77.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string77.base, #t~string77.offset, 1);call write~init~int(37, #t~string77.base, 1 + #t~string77.offset, 1);call write~init~int(105, #t~string77.base, 2 + #t~string77.offset, 1);call write~init~int(0, #t~string77.base, 3 + #t~string77.offset, 1);call #t~string79.base, #t~string79.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string79.base, #t~string79.offset, 1);call write~init~int(37, #t~string79.base, 1 + #t~string79.offset, 1);call write~init~int(105, #t~string79.base, 2 + #t~string79.offset, 1);call write~init~int(0, #t~string79.base, 3 + #t~string79.offset, 1);call #t~string81.base, #t~string81.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string81.base, #t~string81.offset, 1);call write~init~int(70, #t~string81.base, 1 + #t~string81.offset, 1);call write~init~int(95, #t~string81.base, 2 + #t~string81.offset, 1);call write~init~int(112, #t~string81.base, 3 + #t~string81.offset, 1);call write~init~int(58, #t~string81.base, 4 + #t~string81.offset, 1);call write~init~int(0, #t~string81.base, 5 + #t~string81.offset, 1);call #t~string84.base, #t~string84.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string84.base, #t~string84.offset, 1);call write~init~int(37, #t~string84.base, 1 + #t~string84.offset, 1);call write~init~int(105, #t~string84.base, 2 + #t~string84.offset, 1);call write~init~int(0, #t~string84.base, 3 + #t~string84.offset, 1);call #t~string87.base, #t~string87.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string87.base, #t~string87.offset, 1);call write~init~int(37, #t~string87.base, 1 + #t~string87.offset, 1);call write~init~int(105, #t~string87.base, 2 + #t~string87.offset, 1);call write~init~int(0, #t~string87.base, 3 + #t~string87.offset, 1);call #t~string90.base, #t~string90.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string90.base, #t~string90.offset, 1);call write~init~int(37, #t~string90.base, 1 + #t~string90.offset, 1);call write~init~int(105, #t~string90.base, 2 + #t~string90.offset, 1);call write~init~int(0, #t~string90.base, 3 + #t~string90.offset, 1);call #t~string93.base, #t~string93.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string93.base, #t~string93.offset, 1);call write~init~int(37, #t~string93.base, 1 + #t~string93.offset, 1);call write~init~int(105, #t~string93.base, 2 + #t~string93.offset, 1);call write~init~int(0, #t~string93.base, 3 + #t~string93.offset, 1);call #t~string96.base, #t~string96.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string96.base, #t~string96.offset, 1);call write~init~int(37, #t~string96.base, 1 + #t~string96.offset, 1);call write~init~int(105, #t~string96.base, 2 + #t~string96.offset, 1);call write~init~int(0, #t~string96.base, 3 + #t~string96.offset, 1);call #t~string98.base, #t~string98.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string98.base, #t~string98.offset, 1);call write~init~int(0, #t~string98.base, 1 + #t~string98.offset, 1);~cleanupTimeShifts~0 := 12;~expectedDirection~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;call #t~string154.base, #t~string154.offset := #Ultimate.alloc(30);call #t~string155.base, #t~string155.offset := #Ultimate.alloc(9);call #t~string156.base, #t~string156.offset := #Ultimate.alloc(21);call #t~string157.base, #t~string157.offset := #Ultimate.alloc(30);call #t~string158.base, #t~string158.offset := #Ultimate.alloc(9);call #t~string159.base, #t~string159.offset := #Ultimate.alloc(21);call #t~string163.base, #t~string163.offset := #Ultimate.alloc(30);call #t~string164.base, #t~string164.offset := #Ultimate.alloc(9);call #t~string165.base, #t~string165.offset := #Ultimate.alloc(25);call #t~string166.base, #t~string166.offset := #Ultimate.alloc(30);call #t~string167.base, #t~string167.offset := #Ultimate.alloc(9);call #t~string168.base, #t~string168.offset := #Ultimate.alloc(25); 527788#L-1 havoc main_#res;havoc main_#t~ret134, main_~retValue_acc~21, main_~tmp~25;havoc main_~retValue_acc~21;havoc main_~tmp~25; 527161#L3055 havoc valid_product_#res;havoc valid_product_~retValue_acc~26;havoc valid_product_~retValue_acc~26;valid_product_~retValue_acc~26 := 1;valid_product_#res := valid_product_~retValue_acc~26; 525729#L3063 main_#t~ret134 := valid_product_#res;main_~tmp~25 := main_#t~ret134;havoc main_#t~ret134; 525685#L2358 assume 0 != main_~tmp~25; 525686#L2332 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 526797#L2447 havoc bobCall_#t~ret122, bobCall_~tmp~17;havoc bobCall_~tmp~17;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~18;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~18; 529469#L1741 assume !(0 == getOrigin_~person); 529395#L1745 assume 1 == getOrigin_~person;getOrigin_~retValue_acc~18 := 3;getOrigin_#res := getOrigin_~retValue_acc~18; 529396#L1766 bobCall_#t~ret122 := getOrigin_#res;bobCall_~tmp~17 := bobCall_#t~ret122;havoc bobCall_#t~ret122;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~17;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 533131#L2725 assume 0 == initPersonOnFloor_~floor; 528977#L2726 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 527475#L2833-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 527392#L2517 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 525946#L2529-2 havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret107, __utac_acc__Specification3_spec__1_#t~ret108, __utac_acc__Specification3_spec__1_#t~ret109, __utac_acc__Specification3_spec__1_#t~ret110, __utac_acc__Specification3_spec__1_#t~ret111, __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~15, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~7, __utac_acc__Specification3_spec__1_~tmp___2~5, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~15;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~7;havoc __utac_acc__Specification3_spec__1_~tmp___2~5;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 525947#L303 __utac_acc__Specification3_spec__1_#t~ret107 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~15 := __utac_acc__Specification3_spec__1_#t~ret107;havoc __utac_acc__Specification3_spec__1_#t~ret107;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~15;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~4;havoc getCurrentHeading_~retValue_acc~4;getCurrentHeading_~retValue_acc~4 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~4; 528106#L355 __utac_acc__Specification3_spec__1_#t~ret108 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret108;havoc __utac_acc__Specification3_spec__1_#t~ret108; 526180#L1840 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 526181#L1902 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~3;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~3; 531443#L320-5 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~3 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~3; 529392#L341-5 __utac_acc__Specification3_spec__1_#t~ret114 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret114;havoc __utac_acc__Specification3_spec__1_#t~ret114; 531006#L1906 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 529484#L1946 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 530950#L2454 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 530825#L2481 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 533124#L1590 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 528847#L972 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 528112#L303-1 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 528113#L976 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 526456#L989 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 525452#L1127 assume !(0 != timeShift_~tmp___9~2); 525454#L1218 assume !(1 == ~doorState~0); 531044#L1218-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 530948#L2454-3 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 530769#L2481-3 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 533126#L1590-1 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 529917#L855 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 528111#L303-2 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 528098#L868 timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 530192#L1226 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 530193#L912 assume !(1 == ~currentHeading~0); 527101#L922 assume !(0 == ~currentFloorID~0); 527102#L922-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 527785#L928-5 havoc __utac_acc__Specification3_spec__2_#t~ret119, __utac_acc__Specification3_spec__2_#t~ret120, __utac_acc__Specification3_spec__2_~tmp~16, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~16;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 533075#L1971 assume !(-1 == ~expectedDirection~0); 526663#L1983 assume !(1 == ~expectedDirection~0); 526664#L1984 havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret107, __utac_acc__Specification3_spec__1_#t~ret108, __utac_acc__Specification3_spec__1_#t~ret109, __utac_acc__Specification3_spec__1_#t~ret110, __utac_acc__Specification3_spec__1_#t~ret111, __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~15, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~7, __utac_acc__Specification3_spec__1_~tmp___2~5, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~15;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~7;havoc __utac_acc__Specification3_spec__1_~tmp___2~5;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 526711#L303-4 __utac_acc__Specification3_spec__1_#t~ret107 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~15 := __utac_acc__Specification3_spec__1_#t~ret107;havoc __utac_acc__Specification3_spec__1_#t~ret107;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~15;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~4;havoc getCurrentHeading_~retValue_acc~4;getCurrentHeading_~retValue_acc~4 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~4; 528109#L355-3 __utac_acc__Specification3_spec__1_#t~ret108 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret108;havoc __utac_acc__Specification3_spec__1_#t~ret108; 533611#L1840-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 531735#L1902-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~3;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~3; 531428#L320-17 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~3 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~3; 529681#L341-17 __utac_acc__Specification3_spec__1_#t~ret114 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret114;havoc __utac_acc__Specification3_spec__1_#t~ret114; 530967#L1906-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 529489#L1946-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 535411#L2454-25 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 535407#L2481-25 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 535406#L1590-3 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 535398#L972-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 535394#L303-5 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 535391#L976-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 535387#L989-1 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 535384#L1127-1 assume !(0 != timeShift_~tmp___9~2); 535382#L1218-3 assume !(1 == ~doorState~0); 535379#L1218-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 534976#L2454-28 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 534973#L2481-28 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 534971#L1590-4 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 534925#L855-2 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 534842#L303-6 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 534837#L868-2 timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 534817#L1226-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 534128#L912-3 assume !(1 == ~currentHeading~0); 527093#L922-9 assume !(0 == ~currentFloorID~0); 527095#L922-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 534155#L928-11 havoc __utac_acc__Specification3_spec__2_#t~ret119, __utac_acc__Specification3_spec__2_#t~ret120, __utac_acc__Specification3_spec__2_~tmp~16, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~16;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 534151#L1971-1 assume !(-1 == ~expectedDirection~0); 534148#L1983-1 assume !(1 == ~expectedDirection~0); 534145#L1984-1 havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret107, __utac_acc__Specification3_spec__1_#t~ret108, __utac_acc__Specification3_spec__1_#t~ret109, __utac_acc__Specification3_spec__1_#t~ret110, __utac_acc__Specification3_spec__1_#t~ret111, __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~15, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~7, __utac_acc__Specification3_spec__1_~tmp___2~5, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~15;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~7;havoc __utac_acc__Specification3_spec__1_~tmp___2~5;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 534143#L303-8 __utac_acc__Specification3_spec__1_#t~ret107 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~15 := __utac_acc__Specification3_spec__1_#t~ret107;havoc __utac_acc__Specification3_spec__1_#t~ret107;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~15;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~4;havoc getCurrentHeading_~retValue_acc~4;getCurrentHeading_~retValue_acc~4 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~4; 534141#L355-6 __utac_acc__Specification3_spec__1_#t~ret108 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret108;havoc __utac_acc__Specification3_spec__1_#t~ret108; 534140#L1840-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 531737#L1902-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~3;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~3; 531399#L320-29 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~3 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~3; 529649#L341-29 __utac_acc__Specification3_spec__1_#t~ret114 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret114;havoc __utac_acc__Specification3_spec__1_#t~ret114; 530682#L1906-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 529462#L1946-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 540884#L2454-50 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 540879#L2481-50 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 540866#L1590-6 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 540164#L972-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 540162#L303-9 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 540135#L976-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 540133#L989-2 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 540130#L1127-2 assume !(0 != timeShift_~tmp___9~2); 540131#L1218-6 assume 1 == ~doorState~0;~doorState~0 := 0; 540714#L1218-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 540706#L2454-53 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 540702#L2481-53 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 540695#L1590-7 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 539459#L855-4 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 539460#L303-10 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 541670#L868-4 timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 541667#L1226-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 534810#L912-6 assume !(1 == ~currentHeading~0); 526794#L922-18 assume !(0 == ~currentFloorID~0); 526796#L922-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 538839#L928-17 havoc __utac_acc__Specification3_spec__2_#t~ret119, __utac_acc__Specification3_spec__2_#t~ret120, __utac_acc__Specification3_spec__2_~tmp~16, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~16;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 538837#L1971-2 assume !(-1 == ~expectedDirection~0); 538834#L1983-2 assume !(1 == ~expectedDirection~0); 538832#L1984-2 havoc bobCall_#t~ret122, bobCall_~tmp~17;havoc bobCall_~tmp~17;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~18;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~18; 538830#L1741-1 assume !(0 == getOrigin_~person); 538827#L1745-1 assume 1 == getOrigin_~person;getOrigin_~retValue_acc~18 := 3;getOrigin_#res := getOrigin_~retValue_acc~18; 538824#L1766-1 bobCall_#t~ret122 := getOrigin_#res;bobCall_~tmp~17 := bobCall_#t~ret122;havoc bobCall_#t~ret122;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~17;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 538823#L2725-1 assume 0 == initPersonOnFloor_~floor; 538796#L2726-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 538788#L2833-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 538785#L2517-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 538782#L2529-5 havoc cleanup_#t~ret128, cleanup_#t~ret129, cleanup_~i~3, cleanup_~tmp~23, cleanup_~tmp___0~12, cleanup_~__cil_tmp4~0;havoc cleanup_~i~3;havoc cleanup_~tmp~23;havoc cleanup_~tmp___0~12;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret107, __utac_acc__Specification3_spec__1_#t~ret108, __utac_acc__Specification3_spec__1_#t~ret109, __utac_acc__Specification3_spec__1_#t~ret110, __utac_acc__Specification3_spec__1_#t~ret111, __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~15, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~7, __utac_acc__Specification3_spec__1_~tmp___2~5, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~15;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~7;havoc __utac_acc__Specification3_spec__1_~tmp___2~5;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 534813#L303-12 __utac_acc__Specification3_spec__1_#t~ret107 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~15 := __utac_acc__Specification3_spec__1_#t~ret107;havoc __utac_acc__Specification3_spec__1_#t~ret107;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~15;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~4;havoc getCurrentHeading_~retValue_acc~4;getCurrentHeading_~retValue_acc~4 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~4; 534811#L355-9 __utac_acc__Specification3_spec__1_#t~ret108 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret108;havoc __utac_acc__Specification3_spec__1_#t~ret108; 534139#L1840-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 531736#L1902-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~3;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~3; 531580#L320-41 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~3 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~3; 529580#L341-41 __utac_acc__Specification3_spec__1_#t~ret114 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret114;havoc __utac_acc__Specification3_spec__1_#t~ret114; 530634#L1906-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 529465#L1946-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 541740#L2454-75 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 541702#L2481-75 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 534809#L1590-9 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 534785#L972-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 534783#L303-13 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 534777#L976-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 534775#L989-3 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 534768#L1127-3 assume !(0 != timeShift_~tmp___9~2); 534766#L1218-9 assume !(1 == ~doorState~0); 534764#L1218-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 534683#L2454-78 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 534677#L2481-78 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 534676#L1590-10 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 534625#L855-6 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 534622#L303-14 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 534621#L868-6 timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 534615#L1226-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 534616#L912-9 assume !(1 == ~currentHeading~0); 526789#L922-27 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 526790#L922-29 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 543272#L928-23 havoc __utac_acc__Specification3_spec__2_#t~ret119, __utac_acc__Specification3_spec__2_#t~ret120, __utac_acc__Specification3_spec__2_~tmp~16, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~16;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 548616#L1971-3 assume !(-1 == ~expectedDirection~0); 548613#L1983-3 assume !(1 == ~expectedDirection~0); 548611#L1984-3 cleanup_~i~3 := 0; 547340#L2164-2 assume !false; 547341#L2165 [2018-11-28 12:13:46,790 INFO L796 eck$LassoCheckResult]: Loop: 547341#L2165 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 555525#L2168 assume cleanup_~i~3 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~0;havoc isBlocked_~retValue_acc~0;isBlocked_~retValue_acc~0 := 0;isBlocked_#res := isBlocked_~retValue_acc~0; 555526#L130 cleanup_#t~ret128 := isBlocked_#res;cleanup_~tmp___0~12 := cleanup_#t~ret128;havoc cleanup_#t~ret128; 555996#L2172 assume 1 != cleanup_~tmp___0~12; 555995#L2172-1 havoc isIdle_#res;havoc isIdle_#t~ret8, isIdle_~retValue_acc~7, isIdle_~tmp~4;havoc isIdle_~retValue_acc~7;havoc isIdle_~tmp~4;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret3, anyStopRequested_#t~ret4, anyStopRequested_#t~ret5, anyStopRequested_#t~ret6, anyStopRequested_#t~ret7, anyStopRequested_~retValue_acc~6, anyStopRequested_~tmp~3, anyStopRequested_~tmp___0~0, anyStopRequested_~tmp___1~0, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~6;havoc anyStopRequested_~tmp~3;havoc anyStopRequested_~tmp___0~0;havoc anyStopRequested_~tmp___1~0;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 555989#L2454-100 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 555488#L2481-100 anyStopRequested_#t~ret3 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret3;havoc anyStopRequested_#t~ret3; 555473#L411 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~6 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~6; 555465#L475 isIdle_#t~ret8 := anyStopRequested_#res;isIdle_~tmp~4 := isIdle_#t~ret8;havoc isIdle_#t~ret8;isIdle_~retValue_acc~7 := (if 0 == isIdle_~tmp~4 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~7; 543659#L488 cleanup_#t~ret129 := isIdle_#res;cleanup_~tmp~23 := cleanup_#t~ret129;havoc cleanup_#t~ret129; 543660#L2184 assume !(0 != cleanup_~tmp~23);havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret107, __utac_acc__Specification3_spec__1_#t~ret108, __utac_acc__Specification3_spec__1_#t~ret109, __utac_acc__Specification3_spec__1_#t~ret110, __utac_acc__Specification3_spec__1_#t~ret111, __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~15, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~7, __utac_acc__Specification3_spec__1_~tmp___2~5, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~15;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~7;havoc __utac_acc__Specification3_spec__1_~tmp___2~5;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 543176#L303-16 __utac_acc__Specification3_spec__1_#t~ret107 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~15 := __utac_acc__Specification3_spec__1_#t~ret107;havoc __utac_acc__Specification3_spec__1_#t~ret107;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~15;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~4;havoc getCurrentHeading_~retValue_acc~4;getCurrentHeading_~retValue_acc~4 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~4; 543177#L355-12 __utac_acc__Specification3_spec__1_#t~ret108 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret108;havoc __utac_acc__Specification3_spec__1_#t~ret108; 555836#L1840-4 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 534134#L1841-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0); 534136#L1851-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 1;buttonForFloorIsPressed_#in~floorID := 1;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~3;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~3; 531568#L320-49 assume !(0 == buttonForFloorIsPressed_~floorID); 531569#L324-49 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~3 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~3; 530540#L341-49 __utac_acc__Specification3_spec__1_#t~ret110 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___3~5 := __utac_acc__Specification3_spec__1_#t~ret110;havoc __utac_acc__Specification3_spec__1_#t~ret110; 530541#L1856-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___3~5;~expectedDirection~0 := 1; 557058#L1946-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 557053#L2454-105 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 557052#L2481-105 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 557051#L1590-12 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 557049#L972-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 557048#L303-17 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 557045#L976-4 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 557043#L989-4 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 557035#L1127-4 assume !(0 != timeShift_~tmp___9~2); 557036#L1218-12 assume 1 == ~doorState~0;~doorState~0 := 0; 557839#L1218-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 556523#L2454-108 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 556519#L2481-108 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 556512#L1590-13 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 556509#L855-8 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 556473#L303-18 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 556472#L868-8 timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 556470#L1226-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 556469#L912-12 assume 1 == ~currentHeading~0;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~24;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~24;isTopFloor_~retValue_acc~24 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~24; 556437#L3028-21 continueInDirection_#t~ret23 := isTopFloor_#res;continueInDirection_~tmp~7 := continueInDirection_#t~ret23;havoc continueInDirection_#t~ret23; 556435#L916-36 assume !(0 != continueInDirection_~tmp~7); 556187#L922-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 556182#L928-29 havoc __utac_acc__Specification3_spec__2_#t~ret119, __utac_acc__Specification3_spec__2_#t~ret120, __utac_acc__Specification3_spec__2_~tmp~16, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~16;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 556181#L1971-4 assume !(-1 == ~expectedDirection~0); 556180#L1983-4 assume 1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~4;havoc getCurrentHeading_~retValue_acc~4;getCurrentHeading_~retValue_acc~4 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~4; 555531#L355-14 __utac_acc__Specification3_spec__2_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp~16 := __utac_acc__Specification3_spec__2_#t~ret120;havoc __utac_acc__Specification3_spec__2_#t~ret120; 555529#L1988-8 assume !(0 == __utac_acc__Specification3_spec__2_~tmp~16); 555528#L1984-4 cleanup_~i~3 := 1 + cleanup_~i~3; 555527#L2164-2 assume !false; 547341#L2165 [2018-11-28 12:13:46,797 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 12:13:46,797 INFO L82 PathProgramCache]: Analyzing trace with hash 221118084, now seen corresponding path program 2 times [2018-11-28 12:13:46,798 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 12:13:46,798 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 12:13:46,798 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:13:46,798 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-28 12:13:46,798 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:13:46,810 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 12:13:46,857 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 12:13:46,857 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 12:13:46,857 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-28 12:13:46,858 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-28 12:13:46,858 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 12:13:46,858 INFO L82 PathProgramCache]: Analyzing trace with hash 123431882, now seen corresponding path program 1 times [2018-11-28 12:13:46,858 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 12:13:46,858 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 12:13:46,858 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:13:46,859 INFO L101 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2018-11-28 12:13:46,859 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:13:46,864 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 12:13:47,008 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 12:13:47,008 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 12:13:47,008 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [16] imperfect sequences [] total 16 [2018-11-28 12:13:47,009 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-28 12:13:47,009 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 16 interpolants. [2018-11-28 12:13:47,009 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=33, Invalid=207, Unknown=0, NotChecked=0, Total=240 [2018-11-28 12:13:47,009 INFO L87 Difference]: Start difference. First operand 46715 states and 86239 transitions. cyclomatic complexity: 39532 Second operand 16 states. [2018-11-28 12:13:49,639 WARN L180 SmtUtils]: Spent 175.00 ms on a formula simplification that was a NOOP. DAG size: 11 [2018-11-28 12:13:57,230 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-28 12:13:57,230 INFO L93 Difference]: Finished difference Result 135792 states and 250308 transitions. [2018-11-28 12:13:57,230 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 93 states. [2018-11-28 12:13:57,230 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 135792 states and 250308 transitions. [2018-11-28 12:13:57,542 INFO L131 ngComponentsAnalysis]: Automaton has 9 accepting balls. 48837 [2018-11-28 12:13:57,789 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 135792 states to 135772 states and 250288 transitions. [2018-11-28 12:13:57,789 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 105545 [2018-11-28 12:13:57,836 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 105545 [2018-11-28 12:13:57,836 INFO L73 IsDeterministic]: Start isDeterministic. Operand 135772 states and 250288 transitions. [2018-11-28 12:13:57,851 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2018-11-28 12:13:57,851 INFO L705 BuchiCegarLoop]: Abstraction has 135772 states and 250288 transitions. [2018-11-28 12:13:57,904 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 135772 states and 250288 transitions. [2018-11-28 12:13:58,519 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 135772 to 77716. [2018-11-28 12:13:58,519 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 77716 states. [2018-11-28 12:13:58,598 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 77716 states to 77716 states and 143937 transitions. [2018-11-28 12:13:58,598 INFO L728 BuchiCegarLoop]: Abstraction has 77716 states and 143937 transitions. [2018-11-28 12:13:58,598 INFO L608 BuchiCegarLoop]: Abstraction has 77716 states and 143937 transitions. [2018-11-28 12:13:58,598 INFO L442 BuchiCegarLoop]: ======== Iteration 8============ [2018-11-28 12:13:58,598 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 77716 states and 143937 transitions. [2018-11-28 12:13:58,727 INFO L131 ngComponentsAnalysis]: Automaton has 8 accepting balls. 26673 [2018-11-28 12:13:58,727 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-28 12:13:58,727 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-28 12:13:58,731 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 12:13:58,731 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 12:13:58,731 INFO L794 eck$LassoCheckResult]: Stem: 710461#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string53.base, #t~string53.offset := #Ultimate.alloc(10);call #t~string55.base, #t~string55.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string55.base, #t~string55.offset, 1);call write~init~int(95, #t~string55.base, 1 + #t~string55.offset, 1);call write~init~int(93, #t~string55.base, 2 + #t~string55.offset, 1);call write~init~int(0, #t~string55.base, 3 + #t~string55.offset, 1);call #t~string57.base, #t~string57.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string57.base, #t~string57.offset, 1);call write~init~int(93, #t~string57.base, 1 + #t~string57.offset, 1);call write~init~int(32, #t~string57.base, 2 + #t~string57.offset, 1);call write~init~int(0, #t~string57.base, 3 + #t~string57.offset, 1);call #t~string59.base, #t~string59.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string59.base, #t~string59.offset, 1);call write~init~int(97, #t~string59.base, 1 + #t~string59.offset, 1);call write~init~int(116, #t~string59.base, 2 + #t~string59.offset, 1);call write~init~int(32, #t~string59.base, 3 + #t~string59.offset, 1);call write~init~int(0, #t~string59.base, 4 + #t~string59.offset, 1);call #t~string61.base, #t~string61.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string61.base, #t~string61.offset, 1);call write~init~int(105, #t~string61.base, 1 + #t~string61.offset, 1);call write~init~int(0, #t~string61.base, 2 + #t~string61.offset, 1);call #t~string63.base, #t~string63.offset := #Ultimate.alloc(10);call #t~string65.base, #t~string65.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string65.base, #t~string65.offset, 1);call write~init~int(112, #t~string65.base, 1 + #t~string65.offset, 1);call write~init~int(0, #t~string65.base, 2 + #t~string65.offset, 1);call #t~string67.base, #t~string67.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string67.base, #t~string67.offset, 1);call write~init~int(111, #t~string67.base, 1 + #t~string67.offset, 1);call write~init~int(119, #t~string67.base, 2 + #t~string67.offset, 1);call write~init~int(110, #t~string67.base, 3 + #t~string67.offset, 1);call write~init~int(0, #t~string67.base, 4 + #t~string67.offset, 1);call #t~string69.base, #t~string69.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string69.base, #t~string69.offset, 1);call write~init~int(73, #t~string69.base, 1 + #t~string69.offset, 1);call write~init~int(76, #t~string69.base, 2 + #t~string69.offset, 1);call write~init~int(95, #t~string69.base, 3 + #t~string69.offset, 1);call write~init~int(112, #t~string69.base, 4 + #t~string69.offset, 1);call write~init~int(58, #t~string69.base, 5 + #t~string69.offset, 1);call write~init~int(0, #t~string69.base, 6 + #t~string69.offset, 1);call #t~string71.base, #t~string71.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string71.base, #t~string71.offset, 1);call write~init~int(37, #t~string71.base, 1 + #t~string71.offset, 1);call write~init~int(105, #t~string71.base, 2 + #t~string71.offset, 1);call write~init~int(0, #t~string71.base, 3 + #t~string71.offset, 1);call #t~string73.base, #t~string73.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string73.base, #t~string73.offset, 1);call write~init~int(37, #t~string73.base, 1 + #t~string73.offset, 1);call write~init~int(105, #t~string73.base, 2 + #t~string73.offset, 1);call write~init~int(0, #t~string73.base, 3 + #t~string73.offset, 1);call #t~string75.base, #t~string75.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string75.base, #t~string75.offset, 1);call write~init~int(37, #t~string75.base, 1 + #t~string75.offset, 1);call write~init~int(105, #t~string75.base, 2 + #t~string75.offset, 1);call write~init~int(0, #t~string75.base, 3 + #t~string75.offset, 1);call #t~string77.base, #t~string77.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string77.base, #t~string77.offset, 1);call write~init~int(37, #t~string77.base, 1 + #t~string77.offset, 1);call write~init~int(105, #t~string77.base, 2 + #t~string77.offset, 1);call write~init~int(0, #t~string77.base, 3 + #t~string77.offset, 1);call #t~string79.base, #t~string79.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string79.base, #t~string79.offset, 1);call write~init~int(37, #t~string79.base, 1 + #t~string79.offset, 1);call write~init~int(105, #t~string79.base, 2 + #t~string79.offset, 1);call write~init~int(0, #t~string79.base, 3 + #t~string79.offset, 1);call #t~string81.base, #t~string81.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string81.base, #t~string81.offset, 1);call write~init~int(70, #t~string81.base, 1 + #t~string81.offset, 1);call write~init~int(95, #t~string81.base, 2 + #t~string81.offset, 1);call write~init~int(112, #t~string81.base, 3 + #t~string81.offset, 1);call write~init~int(58, #t~string81.base, 4 + #t~string81.offset, 1);call write~init~int(0, #t~string81.base, 5 + #t~string81.offset, 1);call #t~string84.base, #t~string84.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string84.base, #t~string84.offset, 1);call write~init~int(37, #t~string84.base, 1 + #t~string84.offset, 1);call write~init~int(105, #t~string84.base, 2 + #t~string84.offset, 1);call write~init~int(0, #t~string84.base, 3 + #t~string84.offset, 1);call #t~string87.base, #t~string87.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string87.base, #t~string87.offset, 1);call write~init~int(37, #t~string87.base, 1 + #t~string87.offset, 1);call write~init~int(105, #t~string87.base, 2 + #t~string87.offset, 1);call write~init~int(0, #t~string87.base, 3 + #t~string87.offset, 1);call #t~string90.base, #t~string90.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string90.base, #t~string90.offset, 1);call write~init~int(37, #t~string90.base, 1 + #t~string90.offset, 1);call write~init~int(105, #t~string90.base, 2 + #t~string90.offset, 1);call write~init~int(0, #t~string90.base, 3 + #t~string90.offset, 1);call #t~string93.base, #t~string93.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string93.base, #t~string93.offset, 1);call write~init~int(37, #t~string93.base, 1 + #t~string93.offset, 1);call write~init~int(105, #t~string93.base, 2 + #t~string93.offset, 1);call write~init~int(0, #t~string93.base, 3 + #t~string93.offset, 1);call #t~string96.base, #t~string96.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string96.base, #t~string96.offset, 1);call write~init~int(37, #t~string96.base, 1 + #t~string96.offset, 1);call write~init~int(105, #t~string96.base, 2 + #t~string96.offset, 1);call write~init~int(0, #t~string96.base, 3 + #t~string96.offset, 1);call #t~string98.base, #t~string98.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string98.base, #t~string98.offset, 1);call write~init~int(0, #t~string98.base, 1 + #t~string98.offset, 1);~cleanupTimeShifts~0 := 12;~expectedDirection~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;call #t~string154.base, #t~string154.offset := #Ultimate.alloc(30);call #t~string155.base, #t~string155.offset := #Ultimate.alloc(9);call #t~string156.base, #t~string156.offset := #Ultimate.alloc(21);call #t~string157.base, #t~string157.offset := #Ultimate.alloc(30);call #t~string158.base, #t~string158.offset := #Ultimate.alloc(9);call #t~string159.base, #t~string159.offset := #Ultimate.alloc(21);call #t~string163.base, #t~string163.offset := #Ultimate.alloc(30);call #t~string164.base, #t~string164.offset := #Ultimate.alloc(9);call #t~string165.base, #t~string165.offset := #Ultimate.alloc(25);call #t~string166.base, #t~string166.offset := #Ultimate.alloc(30);call #t~string167.base, #t~string167.offset := #Ultimate.alloc(9);call #t~string168.base, #t~string168.offset := #Ultimate.alloc(25); 710462#L-1 havoc main_#res;havoc main_#t~ret134, main_~retValue_acc~21, main_~tmp~25;havoc main_~retValue_acc~21;havoc main_~tmp~25; 709865#L3055 havoc valid_product_#res;havoc valid_product_~retValue_acc~26;havoc valid_product_~retValue_acc~26;valid_product_~retValue_acc~26 := 1;valid_product_#res := valid_product_~retValue_acc~26; 708453#L3063 main_#t~ret134 := valid_product_#res;main_~tmp~25 := main_#t~ret134;havoc main_#t~ret134; 708409#L2358 assume 0 != main_~tmp~25; 708410#L2332 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 709508#L2447 havoc bobCall_#t~ret122, bobCall_~tmp~17;havoc bobCall_~tmp~17;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~18;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~18; 712140#L1741 assume !(0 == getOrigin_~person); 712071#L1745 assume 1 == getOrigin_~person;getOrigin_~retValue_acc~18 := 3;getOrigin_#res := getOrigin_~retValue_acc~18; 712072#L1766 bobCall_#t~ret122 := getOrigin_#res;bobCall_~tmp~17 := bobCall_#t~ret122;havoc bobCall_#t~ret122;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~17;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 715697#L2725 assume 0 == initPersonOnFloor_~floor; 711670#L2726 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 710170#L2833-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 710085#L2517 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 708677#L2529-2 havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret107, __utac_acc__Specification3_spec__1_#t~ret108, __utac_acc__Specification3_spec__1_#t~ret109, __utac_acc__Specification3_spec__1_#t~ret110, __utac_acc__Specification3_spec__1_#t~ret111, __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~15, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~7, __utac_acc__Specification3_spec__1_~tmp___2~5, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~15;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~7;havoc __utac_acc__Specification3_spec__1_~tmp___2~5;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 708678#L303 __utac_acc__Specification3_spec__1_#t~ret107 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~15 := __utac_acc__Specification3_spec__1_#t~ret107;havoc __utac_acc__Specification3_spec__1_#t~ret107;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~15;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~4;havoc getCurrentHeading_~retValue_acc~4;getCurrentHeading_~retValue_acc~4 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~4; 710786#L355 __utac_acc__Specification3_spec__1_#t~ret108 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret108;havoc __utac_acc__Specification3_spec__1_#t~ret108; 708901#L1840 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 708902#L1902 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~3;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~3; 714098#L320-5 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~3 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~3; 712068#L341-5 __utac_acc__Specification3_spec__1_#t~ret114 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret114;havoc __utac_acc__Specification3_spec__1_#t~ret114; 713663#L1906 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 712155#L1946 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 713603#L2454 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 713479#L2481 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 715690#L1590 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 711539#L972 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 710792#L303-1 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 710793#L976 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 709166#L989 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 708176#L1127 assume !(0 != timeShift_~tmp___9~2); 708178#L1218 assume !(1 == ~doorState~0); 713697#L1218-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 713601#L2454-3 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 713421#L2481-3 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 715692#L1590-1 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 712578#L855 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 710791#L303-2 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 710777#L868 timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 712850#L1226 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 712851#L912 assume !(1 == ~currentHeading~0); 709806#L922 assume !(0 == ~currentFloorID~0); 709802#L922-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 709333#L928-5 havoc __utac_acc__Specification3_spec__2_#t~ret119, __utac_acc__Specification3_spec__2_#t~ret120, __utac_acc__Specification3_spec__2_~tmp~16, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~16;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 709334#L1971 assume !(-1 == ~expectedDirection~0); 709376#L1983 assume !(1 == ~expectedDirection~0); 709377#L1984 havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret107, __utac_acc__Specification3_spec__1_#t~ret108, __utac_acc__Specification3_spec__1_#t~ret109, __utac_acc__Specification3_spec__1_#t~ret110, __utac_acc__Specification3_spec__1_#t~ret111, __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~15, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~7, __utac_acc__Specification3_spec__1_~tmp___2~5, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~15;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~7;havoc __utac_acc__Specification3_spec__1_~tmp___2~5;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 717612#L303-4 __utac_acc__Specification3_spec__1_#t~ret107 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~15 := __utac_acc__Specification3_spec__1_#t~ret107;havoc __utac_acc__Specification3_spec__1_#t~ret107;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~15;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~4;havoc getCurrentHeading_~retValue_acc~4;getCurrentHeading_~retValue_acc~4 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~4; 717609#L355-3 __utac_acc__Specification3_spec__1_#t~ret108 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret108;havoc __utac_acc__Specification3_spec__1_#t~ret108; 716657#L1840-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 714348#L1902-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~3;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~3; 714083#L320-17 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~3 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~3; 712350#L341-17 __utac_acc__Specification3_spec__1_#t~ret114 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret114;havoc __utac_acc__Specification3_spec__1_#t~ret114; 713623#L1906-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 712160#L1946-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 717940#L2454-25 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 717923#L2481-25 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 717916#L1590-3 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 717910#L972-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 717911#L303-5 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 717893#L976-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 717889#L989-1 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 717874#L1127-1 assume !(0 != timeShift_~tmp___9~2); 717866#L1218-3 assume !(1 == ~doorState~0); 717863#L1218-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 717708#L2454-28 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 717703#L2481-28 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 717702#L1590-4 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 717699#L855-2 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 717647#L303-6 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 717640#L868-2 timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 717630#L1226-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 716648#L912-3 assume !(1 == ~currentHeading~0); 709798#L922-9 assume !(0 == ~currentFloorID~0); 709800#L922-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 723805#L928-11 havoc __utac_acc__Specification3_spec__2_#t~ret119, __utac_acc__Specification3_spec__2_#t~ret120, __utac_acc__Specification3_spec__2_~tmp~16, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~16;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 723770#L1971-1 assume !(-1 == ~expectedDirection~0); 723767#L1983-1 assume !(1 == ~expectedDirection~0); 717619#L1984-1 havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret107, __utac_acc__Specification3_spec__1_#t~ret108, __utac_acc__Specification3_spec__1_#t~ret109, __utac_acc__Specification3_spec__1_#t~ret110, __utac_acc__Specification3_spec__1_#t~ret111, __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~15, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~7, __utac_acc__Specification3_spec__1_~tmp___2~5, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~15;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~7;havoc __utac_acc__Specification3_spec__1_~tmp___2~5;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 717618#L303-8 __utac_acc__Specification3_spec__1_#t~ret107 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~15 := __utac_acc__Specification3_spec__1_#t~ret107;havoc __utac_acc__Specification3_spec__1_#t~ret107;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~15;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~4;havoc getCurrentHeading_~retValue_acc~4;getCurrentHeading_~retValue_acc~4 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~4; 717617#L355-6 __utac_acc__Specification3_spec__1_#t~ret108 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret108;havoc __utac_acc__Specification3_spec__1_#t~ret108; 716659#L1840-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 714350#L1902-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~3;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~3; 714048#L320-29 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~3 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~3; 712318#L341-29 __utac_acc__Specification3_spec__1_#t~ret114 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret114;havoc __utac_acc__Specification3_spec__1_#t~ret114; 713328#L1906-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 712133#L1946-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 716967#L2454-50 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 716962#L2481-50 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 716961#L1590-6 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 716959#L972-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 716960#L303-9 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 716928#L976-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 716926#L989-2 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 716922#L1127-2 assume !(0 != timeShift_~tmp___9~2); 716920#L1218-6 assume 1 == ~doorState~0;~doorState~0 := 0; 716917#L1218-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 716838#L2454-53 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 716830#L2481-53 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 716828#L1590-7 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 716679#L855-4 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 716674#L303-10 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 716671#L868-4 timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 716667#L1226-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 716666#L912-6 assume !(1 == ~currentHeading~0); 709505#L922-18 assume !(0 == ~currentFloorID~0); 709507#L922-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 725705#L928-17 havoc __utac_acc__Specification3_spec__2_#t~ret119, __utac_acc__Specification3_spec__2_#t~ret120, __utac_acc__Specification3_spec__2_~tmp~16, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~16;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 725696#L1971-2 assume !(-1 == ~expectedDirection~0); 725693#L1983-2 assume !(1 == ~expectedDirection~0); 725691#L1984-2 havoc bobCall_#t~ret122, bobCall_~tmp~17;havoc bobCall_~tmp~17;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~18;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~18; 725689#L1741-1 assume !(0 == getOrigin_~person); 725690#L1745-1 assume 1 == getOrigin_~person;getOrigin_~retValue_acc~18 := 3;getOrigin_#res := getOrigin_~retValue_acc~18; 726565#L1766-1 bobCall_#t~ret122 := getOrigin_#res;bobCall_~tmp~17 := bobCall_#t~ret122;havoc bobCall_#t~ret122;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~17;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 725679#L2725-1 assume 0 == initPersonOnFloor_~floor; 725634#L2726-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 725612#L2833-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 725608#L2517-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 717615#L2529-5 havoc cleanup_#t~ret128, cleanup_#t~ret129, cleanup_~i~3, cleanup_~tmp~23, cleanup_~tmp___0~12, cleanup_~__cil_tmp4~0;havoc cleanup_~i~3;havoc cleanup_~tmp~23;havoc cleanup_~tmp___0~12;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret107, __utac_acc__Specification3_spec__1_#t~ret108, __utac_acc__Specification3_spec__1_#t~ret109, __utac_acc__Specification3_spec__1_#t~ret110, __utac_acc__Specification3_spec__1_#t~ret111, __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~15, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~7, __utac_acc__Specification3_spec__1_~tmp___2~5, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~15;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~7;havoc __utac_acc__Specification3_spec__1_~tmp___2~5;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 717613#L303-12 __utac_acc__Specification3_spec__1_#t~ret107 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~15 := __utac_acc__Specification3_spec__1_#t~ret107;havoc __utac_acc__Specification3_spec__1_#t~ret107;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~15;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~4;havoc getCurrentHeading_~retValue_acc~4;getCurrentHeading_~retValue_acc~4 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~4; 717610#L355-9 __utac_acc__Specification3_spec__1_#t~ret108 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret108;havoc __utac_acc__Specification3_spec__1_#t~ret108; 716658#L1840-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 714349#L1902-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~3;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~3; 714215#L320-41 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~3 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~3; 712249#L341-41 __utac_acc__Specification3_spec__1_#t~ret114 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret114;havoc __utac_acc__Specification3_spec__1_#t~ret114; 713278#L1906-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 712136#L1946-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 717552#L2454-75 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 717545#L2481-75 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 717544#L1590-9 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 717532#L972-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 717522#L303-13 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 717511#L976-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 717507#L989-3 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 717499#L1127-3 assume !(0 != timeShift_~tmp___9~2); 717495#L1218-9 assume !(1 == ~doorState~0); 717340#L1218-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 716780#L2454-78 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 716774#L2481-78 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 716771#L1590-10 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 716725#L855-6 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 716676#L303-14 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 716672#L868-6 timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 716669#L1226-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 716665#L912-9 assume !(1 == ~currentHeading~0); 709501#L922-27 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 709502#L922-29 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 777226#L928-23 havoc __utac_acc__Specification3_spec__2_#t~ret119, __utac_acc__Specification3_spec__2_#t~ret120, __utac_acc__Specification3_spec__2_~tmp~16, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~16;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 777206#L1971-3 assume !(-1 == ~expectedDirection~0); 777200#L1983-3 assume !(1 == ~expectedDirection~0); 777196#L1984-3 cleanup_~i~3 := 0; 777197#L2164-2 assume !false; 774022#L2165 [2018-11-28 12:13:58,731 INFO L796 eck$LassoCheckResult]: Loop: 774022#L2165 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 774020#L2168 assume cleanup_~i~3 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~0;havoc isBlocked_~retValue_acc~0;isBlocked_~retValue_acc~0 := 0;isBlocked_#res := isBlocked_~retValue_acc~0; 756343#L130 cleanup_#t~ret128 := isBlocked_#res;cleanup_~tmp___0~12 := cleanup_#t~ret128;havoc cleanup_#t~ret128; 756341#L2172 assume 1 != cleanup_~tmp___0~12; 756342#L2172-1 havoc isIdle_#res;havoc isIdle_#t~ret8, isIdle_~retValue_acc~7, isIdle_~tmp~4;havoc isIdle_~retValue_acc~7;havoc isIdle_~tmp~4;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret3, anyStopRequested_#t~ret4, anyStopRequested_#t~ret5, anyStopRequested_#t~ret6, anyStopRequested_#t~ret7, anyStopRequested_~retValue_acc~6, anyStopRequested_~tmp~3, anyStopRequested_~tmp___0~0, anyStopRequested_~tmp___1~0, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~6;havoc anyStopRequested_~tmp~3;havoc anyStopRequested_~tmp___0~0;havoc anyStopRequested_~tmp___1~0;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 767863#L2454-100 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 767847#L2481-100 anyStopRequested_#t~ret3 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret3;havoc anyStopRequested_#t~ret3; 767838#L411 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~6 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~6; 767762#L475 isIdle_#t~ret8 := anyStopRequested_#res;isIdle_~tmp~4 := isIdle_#t~ret8;havoc isIdle_#t~ret8;isIdle_~retValue_acc~7 := (if 0 == isIdle_~tmp~4 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~7; 767760#L488 cleanup_#t~ret129 := isIdle_#res;cleanup_~tmp~23 := cleanup_#t~ret129;havoc cleanup_#t~ret129; 766867#L2184 assume !(0 != cleanup_~tmp~23);havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret107, __utac_acc__Specification3_spec__1_#t~ret108, __utac_acc__Specification3_spec__1_#t~ret109, __utac_acc__Specification3_spec__1_#t~ret110, __utac_acc__Specification3_spec__1_#t~ret111, __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~15, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~7, __utac_acc__Specification3_spec__1_~tmp___2~5, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~15;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~7;havoc __utac_acc__Specification3_spec__1_~tmp___2~5;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 766866#L303-16 __utac_acc__Specification3_spec__1_#t~ret107 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~15 := __utac_acc__Specification3_spec__1_#t~ret107;havoc __utac_acc__Specification3_spec__1_#t~ret107;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~15;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~4;havoc getCurrentHeading_~retValue_acc~4;getCurrentHeading_~retValue_acc~4 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~4; 766865#L355-12 __utac_acc__Specification3_spec__1_#t~ret108 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret108;havoc __utac_acc__Specification3_spec__1_#t~ret108; 766860#L1840-4 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 766858#L1841-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0); 717634#L1851-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 1;buttonForFloorIsPressed_#in~floorID := 1;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~3;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~3; 766852#L320-49 assume !(0 == buttonForFloorIsPressed_~floorID); 766862#L324-49 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~3 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~3; 766859#L341-49 __utac_acc__Specification3_spec__1_#t~ret110 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___3~5 := __utac_acc__Specification3_spec__1_#t~ret110;havoc __utac_acc__Specification3_spec__1_#t~ret110; 766853#L1856-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___3~5;~expectedDirection~0 := 1; 766831#L1946-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 772089#L2454-105 assume !(0 == isFloorCalling_~floorID); 772086#L2458-105 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 772084#L2481-105 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 772075#L1590-12 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 772063#L972-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 772057#L303-17 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 755777#L976-4 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 755775#L989-4 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 755773#L1127-4 assume !(0 != timeShift_~tmp___9~2); 755772#L1218-12 assume 1 == ~doorState~0;~doorState~0 := 0; 755770#L1218-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 755771#L2454-108 assume !(0 == isFloorCalling_~floorID); 772048#L2458-108 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 772194#L2481-108 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 755761#L1590-13 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 755762#L855-8 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 772153#L303-18 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 756019#L868-8 timeShift_#t~ret49 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 772200#L1226-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 772201#L912-12 assume 1 == ~currentHeading~0;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~24;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~24;isTopFloor_~retValue_acc~24 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~24; 777193#L3028-21 continueInDirection_#t~ret23 := isTopFloor_#res;continueInDirection_~tmp~7 := continueInDirection_#t~ret23;havoc continueInDirection_#t~ret23; 777194#L916-36 assume !(0 != continueInDirection_~tmp~7); 779800#L922-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 709474#L928-29 havoc __utac_acc__Specification3_spec__2_#t~ret119, __utac_acc__Specification3_spec__2_#t~ret120, __utac_acc__Specification3_spec__2_~tmp~16, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~16;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 779788#L1971-4 assume !(-1 == ~expectedDirection~0); 777227#L1983-4 assume 1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~4;havoc getCurrentHeading_~retValue_acc~4;getCurrentHeading_~retValue_acc~4 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~4; 777204#L355-14 __utac_acc__Specification3_spec__2_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp~16 := __utac_acc__Specification3_spec__2_#t~ret120;havoc __utac_acc__Specification3_spec__2_#t~ret120; 777202#L1988-8 assume !(0 == __utac_acc__Specification3_spec__2_~tmp~16); 777198#L1984-4 cleanup_~i~3 := 1 + cleanup_~i~3; 774024#L2164-2 assume !false; 774022#L2165 [2018-11-28 12:13:58,738 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 12:13:58,738 INFO L82 PathProgramCache]: Analyzing trace with hash 221118084, now seen corresponding path program 3 times [2018-11-28 12:13:58,739 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 12:13:58,739 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 12:13:58,739 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:13:58,739 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-28 12:13:58,739 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:13:58,750 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 12:13:58,792 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 12:13:58,793 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 12:13:58,793 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-28 12:13:58,793 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-28 12:13:58,793 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 12:13:58,793 INFO L82 PathProgramCache]: Analyzing trace with hash 1065080080, now seen corresponding path program 1 times [2018-11-28 12:13:58,793 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 12:13:58,794 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 12:13:58,794 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:13:58,794 INFO L101 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2018-11-28 12:13:58,794 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 12:13:58,800 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2018-11-28 12:13:58,807 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2018-11-28 12:13:59,269 WARN L180 SmtUtils]: Spent 447.00 ms on a formula simplification. DAG size of input: 219 DAG size of output: 192 [2018-11-28 12:13:59,757 WARN L180 SmtUtils]: Spent 474.00 ms on a formula simplification. DAG size of input: 178 DAG size of output: 149 [2018-11-28 12:13:59,759 INFO L216 LassoAnalysis]: Preferences: [2018-11-28 12:13:59,759 INFO L124 ssoRankerPreferences]: Compute integeral hull: false [2018-11-28 12:13:59,759 INFO L125 ssoRankerPreferences]: Enable LassoPartitioneer: true [2018-11-28 12:13:59,759 INFO L126 ssoRankerPreferences]: Term annotations enabled: false [2018-11-28 12:13:59,759 INFO L127 ssoRankerPreferences]: Use exernal solver: true [2018-11-28 12:13:59,759 INFO L128 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 12:13:59,759 INFO L129 ssoRankerPreferences]: Dump SMT script to file: false [2018-11-28 12:13:59,759 INFO L130 ssoRankerPreferences]: Path of dumped script: [2018-11-28 12:13:59,759 INFO L131 ssoRankerPreferences]: Filename of dumped script: elevator_spec3_product27_false-unreach-call_true-termination.cil.c_Iteration8_Loop [2018-11-28 12:13:59,759 INFO L132 ssoRankerPreferences]: MapElimAlgo: Frank [2018-11-28 12:13:59,759 INFO L282 LassoAnalysis]: Starting lasso preprocessing... [2018-11-28 12:13:59,763 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:59,767 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:59,771 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:59,772 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:59,779 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:59,780 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:59,782 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:59,783 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:59,784 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:59,785 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:59,786 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:59,786 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:59,788 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:59,789 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:59,789 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:59,790 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:59,794 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:59,797 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:59,797 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:59,800 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:59,801 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:59,802 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:59,803 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:59,803 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:59,805 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:59,806 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:59,815 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:59,817 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:59,820 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:59,821 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:59,821 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:59,822 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:59,823 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:59,831 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:59,832 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:59,833 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:59,833 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:59,834 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:59,835 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:59,836 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:59,838 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:59,842 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:59,843 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:59,844 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:59,845 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:59,848 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:59,849 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:59,849 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:59,850 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:59,852 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:59,853 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:59,855 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:59,855 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:59,870 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:59,871 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:59,872 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:59,873 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:59,874 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:59,874 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:59,875 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:59,876 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:59,877 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:59,878 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:59,878 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:59,883 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:59,883 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:59,884 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:59,885 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:59,889 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:59,889 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:59,890 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:59,891 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:59,892 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:59,892 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:59,895 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:59,896 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:59,897 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:59,898 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:59,898 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:59,899 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:59,900 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:59,901 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:59,904 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:59,905 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:59,906 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:59,907 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:13:59,909 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:14:00,269 INFO L300 LassoAnalysis]: Preprocessing complete. [2018-11-28 12:14:00,269 INFO L412 LassoAnalysis]: Checking for nontermination... No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_5dbd214c-3e27-4a76-8832-000731adef50/bin-2019/uautomizer/z3 Starting monitored process 34 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 34 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 12:14:00,278 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 12:14:00,278 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 12:14:00,281 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 12:14:00,282 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_#in~respectFloorCalls=1, ULTIMATE.start_stopRequestedInDirection_~respectFloorCalls=1} Honda state: {ULTIMATE.start_stopRequestedInDirection_#in~respectFloorCalls=1, ULTIMATE.start_stopRequestedInDirection_~respectFloorCalls=1} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_5dbd214c-3e27-4a76-8832-000731adef50/bin-2019/uautomizer/z3 Starting monitored process 35 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 35 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 12:14:00,474 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 12:14:00,474 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 12:14:00,478 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 12:14:00,478 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_isBlocked_~retValue_acc~0=0, ULTIMATE.start_cleanup_~tmp___0~12=0, ULTIMATE.start_isBlocked_#res=0} Honda state: {ULTIMATE.start_isBlocked_~retValue_acc~0=0, ULTIMATE.start_cleanup_~tmp___0~12=0, ULTIMATE.start_isBlocked_#res=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_5dbd214c-3e27-4a76-8832-000731adef50/bin-2019/uautomizer/z3 Starting monitored process 36 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 36 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 12:14:00,492 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 12:14:00,492 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 12:14:00,496 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 12:14:00,496 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_#t~ret20=0} Honda state: {ULTIMATE.start_stopRequestedInDirection_#t~ret20=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_5dbd214c-3e27-4a76-8832-000731adef50/bin-2019/uautomizer/z3 Starting monitored process 37 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 37 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 12:14:00,511 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 12:14:00,511 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 12:14:00,517 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 12:14:00,517 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_~tmp___0~2=-8, ULTIMATE.start_isFloorCalling_#res=-8, ULTIMATE.start_isExecutiveFloorCalling_~retValue_acc~15=-8, ~calls_1~0=-8, ULTIMATE.start_isExecutiveFloorCalling_#res=-8, ULTIMATE.start_stopRequestedAtCurrentFloor_~tmp~9=-8, ULTIMATE.start_isFloorCalling_~retValue_acc~22=-8} Honda state: {ULTIMATE.start_stopRequestedInDirection_~tmp___0~2=-8, ULTIMATE.start_isFloorCalling_#res=-8, ULTIMATE.start_isExecutiveFloorCalling_~retValue_acc~15=-8, ~calls_1~0=-8, ULTIMATE.start_isExecutiveFloorCalling_#res=-8, ULTIMATE.start_stopRequestedAtCurrentFloor_~tmp~9=-8, ULTIMATE.start_isFloorCalling_~retValue_acc~22=-8} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_5dbd214c-3e27-4a76-8832-000731adef50/bin-2019/uautomizer/z3 Starting monitored process 38 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 38 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 12:14:00,532 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 12:14:00,532 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 12:14:00,536 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 12:14:00,536 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedAtCurrentFloor_#t~ret28=0} Honda state: {ULTIMATE.start_stopRequestedAtCurrentFloor_#t~ret28=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_5dbd214c-3e27-4a76-8832-000731adef50/bin-2019/uautomizer/z3 Starting monitored process 39 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 39 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 12:14:00,552 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 12:14:00,553 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 12:14:00,556 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 12:14:00,556 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___9~2=0, ULTIMATE.start_stopRequestedAtCurrentFloor_#res=0} Honda state: {ULTIMATE.start_timeShift_~tmp___9~2=0, ULTIMATE.start_stopRequestedAtCurrentFloor_#res=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_5dbd214c-3e27-4a76-8832-000731adef50/bin-2019/uautomizer/z3 Starting monitored process 40 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 40 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 12:14:00,581 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 12:14:00,581 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 12:14:00,584 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 12:14:00,584 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___2~3=0} Honda state: {ULTIMATE.start_timeShift_~tmp___2~3=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_5dbd214c-3e27-4a76-8832-000731adef50/bin-2019/uautomizer/z3 Starting monitored process 41 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 41 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 12:14:00,608 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 12:14:00,608 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 12:14:00,611 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 12:14:00,611 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___2~5=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___2~5=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_5dbd214c-3e27-4a76-8832-000731adef50/bin-2019/uautomizer/z3 Starting monitored process 42 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 42 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 12:14:00,628 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 12:14:00,628 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 12:14:00,632 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 12:14:00,632 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___5~3=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___5~3=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_5dbd214c-3e27-4a76-8832-000731adef50/bin-2019/uautomizer/z3 Starting monitored process 43 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 43 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 12:14:00,649 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 12:14:00,649 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 12:14:00,652 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 12:14:00,652 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__1_#t~ret117=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__1_#t~ret117=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_5dbd214c-3e27-4a76-8832-000731adef50/bin-2019/uautomizer/z3 Starting monitored process 44 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 44 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 12:14:00,669 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 12:14:00,669 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 12:14:00,672 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 12:14:00,672 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret45=0} Honda state: {ULTIMATE.start_timeShift_#t~ret45=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_5dbd214c-3e27-4a76-8832-000731adef50/bin-2019/uautomizer/z3 Starting monitored process 45 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 45 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 12:14:00,688 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 12:14:00,689 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 12:14:00,691 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 12:14:00,691 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__2_#t~ret119=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__2_#t~ret119=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_5dbd214c-3e27-4a76-8832-000731adef50/bin-2019/uautomizer/z3 Starting monitored process 46 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 46 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 12:14:00,706 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 12:14:00,707 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 12:14:00,709 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 12:14:00,709 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_anyStopRequested_#t~ret5=0} Honda state: {ULTIMATE.start_anyStopRequested_#t~ret5=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_5dbd214c-3e27-4a76-8832-000731adef50/bin-2019/uautomizer/z3 Starting monitored process 47 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 47 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 12:14:00,730 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 12:14:00,730 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 12:14:00,732 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 12:14:00,732 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_#t~ret21=0} Honda state: {ULTIMATE.start_stopRequestedInDirection_#t~ret21=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_5dbd214c-3e27-4a76-8832-000731adef50/bin-2019/uautomizer/z3 Starting monitored process 48 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 48 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 12:14:00,747 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 12:14:00,748 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 12:14:00,752 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 12:14:00,752 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___1~7=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___1~7=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_5dbd214c-3e27-4a76-8832-000731adef50/bin-2019/uautomizer/z3 Starting monitored process 49 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 49 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 12:14:00,774 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 12:14:00,774 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 12:14:00,779 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 12:14:00,779 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_#res=1, ULTIMATE.start_stopRequestedInDirection_~retValue_acc~9=1, ULTIMATE.start_timeShift_~tmp___8~2=1} Honda state: {ULTIMATE.start_stopRequestedInDirection_#res=1, ULTIMATE.start_stopRequestedInDirection_~retValue_acc~9=1, ULTIMATE.start_timeShift_~tmp___8~2=1} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_5dbd214c-3e27-4a76-8832-000731adef50/bin-2019/uautomizer/z3 Starting monitored process 50 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 50 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 12:14:00,805 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 12:14:00,805 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 12:14:00,808 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 12:14:00,808 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_~__cil_tmp7~0=1, ULTIMATE.start_stopRequestedInDirection_~__cil_tmp8~0=1} Honda state: {ULTIMATE.start_stopRequestedInDirection_~__cil_tmp7~0=1, ULTIMATE.start_stopRequestedInDirection_~__cil_tmp8~0=1} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_5dbd214c-3e27-4a76-8832-000731adef50/bin-2019/uautomizer/z3 Starting monitored process 51 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 51 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 12:14:00,823 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 12:14:00,823 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 12:14:00,825 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 12:14:00,826 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp~11=0} Honda state: {ULTIMATE.start_timeShift_~tmp~11=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_5dbd214c-3e27-4a76-8832-000731adef50/bin-2019/uautomizer/z3 Starting monitored process 52 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 52 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 12:14:00,840 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 12:14:00,840 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 12:14:00,843 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 12:14:00,843 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_isExecutiveFloorCalling_#t~ret100=0} Honda state: {ULTIMATE.start_isExecutiveFloorCalling_#t~ret100=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_5dbd214c-3e27-4a76-8832-000731adef50/bin-2019/uautomizer/z3 Starting monitored process 53 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 53 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 12:14:00,857 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 12:14:00,857 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 12:14:00,864 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 12:14:00,864 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__2_~tmp___0~11=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__2_~tmp___0~11=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_5dbd214c-3e27-4a76-8832-000731adef50/bin-2019/uautomizer/z3 Starting monitored process 54 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 54 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 12:14:00,880 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 12:14:00,880 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 12:14:00,882 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 12:14:00,882 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret51=0} Honda state: {ULTIMATE.start_timeShift_#t~ret51=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_5dbd214c-3e27-4a76-8832-000731adef50/bin-2019/uautomizer/z3 Starting monitored process 55 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 55 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 12:14:00,898 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 12:14:00,898 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 12:14:00,900 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 12:14:00,900 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___1~3=0} Honda state: {ULTIMATE.start_timeShift_~tmp___1~3=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_5dbd214c-3e27-4a76-8832-000731adef50/bin-2019/uautomizer/z3 Starting monitored process 56 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 56 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 12:14:00,914 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 12:14:00,915 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 12:14:00,919 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 12:14:00,919 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__1_#t~ret112=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__1_#t~ret112=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_5dbd214c-3e27-4a76-8832-000731adef50/bin-2019/uautomizer/z3 Starting monitored process 57 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 57 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 12:14:00,935 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 12:14:00,935 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 12:14:00,938 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 12:14:00,938 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___4~3=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___4~3=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_5dbd214c-3e27-4a76-8832-000731adef50/bin-2019/uautomizer/z3 Starting monitored process 58 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 58 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 12:14:00,954 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 12:14:00,954 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 12:14:00,956 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 12:14:00,956 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__1_#t~ret118=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__1_#t~ret118=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_5dbd214c-3e27-4a76-8832-000731adef50/bin-2019/uautomizer/z3 Starting monitored process 59 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 59 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 12:14:00,971 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 12:14:00,971 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 12:14:00,980 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 12:14:00,980 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_cleanup_#t~ret129=0} Honda state: {ULTIMATE.start_cleanup_#t~ret129=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_5dbd214c-3e27-4a76-8832-000731adef50/bin-2019/uautomizer/z3 Starting monitored process 60 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 60 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 12:14:00,996 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 12:14:00,996 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 12:14:00,998 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 12:14:00,998 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_buttonForFloorIsPressed_~floorID=1} Honda state: {ULTIMATE.start_buttonForFloorIsPressed_~floorID=1} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_5dbd214c-3e27-4a76-8832-000731adef50/bin-2019/uautomizer/z3 Starting monitored process 61 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 61 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 12:14:01,012 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 12:14:01,013 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 12:14:01,015 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 12:14:01,015 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_~respectInLiftCalls=1, ULTIMATE.start_stopRequestedInDirection_#in~respectInLiftCalls=1} Honda state: {ULTIMATE.start_stopRequestedInDirection_~respectInLiftCalls=1, ULTIMATE.start_stopRequestedInDirection_#in~respectInLiftCalls=1} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_5dbd214c-3e27-4a76-8832-000731adef50/bin-2019/uautomizer/z3 Starting monitored process 62 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 62 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 12:14:01,032 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 12:14:01,032 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 12:14:01,033 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 12:14:01,033 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__1_#t~ret115=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__1_#t~ret115=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_5dbd214c-3e27-4a76-8832-000731adef50/bin-2019/uautomizer/z3 Starting monitored process 63 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 63 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 12:14:01,049 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 12:14:01,049 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 12:14:01,051 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 12:14:01,051 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___5~2=0} Honda state: {ULTIMATE.start_timeShift_~tmp___5~2=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_5dbd214c-3e27-4a76-8832-000731adef50/bin-2019/uautomizer/z3 Starting monitored process 64 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 64 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 12:14:01,066 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 12:14:01,066 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 12:14:01,068 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 12:14:01,068 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___9~3=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___9~3=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_5dbd214c-3e27-4a76-8832-000731adef50/bin-2019/uautomizer/z3 Starting monitored process 65 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 65 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 12:14:01,083 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 12:14:01,083 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 12:14:01,086 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 12:14:01,086 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__2_#t~ret120=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__2_#t~ret120=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_5dbd214c-3e27-4a76-8832-000731adef50/bin-2019/uautomizer/z3 Starting monitored process 66 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 66 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 12:14:01,101 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 12:14:01,101 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 12:14:01,105 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 12:14:01,105 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_continueInDirection_#in~dir=1, ULTIMATE.start_stopRequestedInDirection_~dir=1, ULTIMATE.start___utac_acc__Specification3_spec__2_~tmp~16=1, ~currentHeading~0=1, ULTIMATE.start_stopRequestedInDirection_#in~dir=1, ULTIMATE.start_continueInDirection_~dir=1, ULTIMATE.start_getCurrentHeading_~retValue_acc~4=1, ULTIMATE.start_getCurrentHeading_#res=1} Honda state: {ULTIMATE.start_continueInDirection_#in~dir=1, ULTIMATE.start_stopRequestedInDirection_~dir=1, ULTIMATE.start___utac_acc__Specification3_spec__2_~tmp~16=1, ~currentHeading~0=1, ULTIMATE.start_stopRequestedInDirection_#in~dir=1, ULTIMATE.start_continueInDirection_~dir=1, ULTIMATE.start_getCurrentHeading_~retValue_acc~4=1, ULTIMATE.start_getCurrentHeading_#res=1} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_5dbd214c-3e27-4a76-8832-000731adef50/bin-2019/uautomizer/z3 Starting monitored process 67 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 67 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 12:14:01,120 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 12:14:01,120 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 12:14:01,122 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 12:14:01,122 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__1_#t~ret109=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__1_#t~ret109=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_5dbd214c-3e27-4a76-8832-000731adef50/bin-2019/uautomizer/z3 Starting monitored process 68 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 68 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 12:14:01,139 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 12:14:01,139 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 12:14:01,141 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 12:14:01,141 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret47=0} Honda state: {ULTIMATE.start_timeShift_#t~ret47=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_5dbd214c-3e27-4a76-8832-000731adef50/bin-2019/uautomizer/z3 Starting monitored process 69 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 69 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 12:14:01,156 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 12:14:01,156 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 12:14:01,158 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 12:14:01,158 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret42=0} Honda state: {ULTIMATE.start_timeShift_#t~ret42=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_5dbd214c-3e27-4a76-8832-000731adef50/bin-2019/uautomizer/z3 Starting monitored process 70 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 70 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 12:14:01,173 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 12:14:01,173 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 12:14:01,175 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 12:14:01,175 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret49=0} Honda state: {ULTIMATE.start_timeShift_#t~ret49=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_5dbd214c-3e27-4a76-8832-000731adef50/bin-2019/uautomizer/z3 Starting monitored process 71 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 71 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 12:14:01,190 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 12:14:01,190 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 12:14:01,191 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 12:14:01,191 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_anyStopRequested_#t~ret4=0} Honda state: {ULTIMATE.start_anyStopRequested_#t~ret4=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_5dbd214c-3e27-4a76-8832-000731adef50/bin-2019/uautomizer/z3 Starting monitored process 72 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 72 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 12:14:01,206 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 12:14:01,206 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 12:14:01,208 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 12:14:01,208 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_isIdle_#t~ret8=0} Honda state: {ULTIMATE.start_isIdle_#t~ret8=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_5dbd214c-3e27-4a76-8832-000731adef50/bin-2019/uautomizer/z3 Starting monitored process 73 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 73 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 12:14:01,225 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 12:14:01,225 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 12:14:01,229 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 12:14:01,229 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {~calls_0~0=-8, ULTIMATE.start_anyStopRequested_~tmp___3~0=-8} Honda state: {~calls_0~0=-8, ULTIMATE.start_anyStopRequested_~tmp___3~0=-8} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_5dbd214c-3e27-4a76-8832-000731adef50/bin-2019/uautomizer/z3 Starting monitored process 74 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 74 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 12:14:01,247 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 12:14:01,247 INFO L163 nArgumentSynthesizer]: Using integer mode. No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_5dbd214c-3e27-4a76-8832-000731adef50/bin-2019/uautomizer/z3 Starting monitored process 75 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 75 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 12:14:01,265 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 3 Nilpotent components: true [2018-11-28 12:14:01,265 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 12:14:01,670 INFO L452 LassoAnalysis]: Proving nontermination failed: No geometric nontermination argument exists. [2018-11-28 12:14:01,672 INFO L216 LassoAnalysis]: Preferences: [2018-11-28 12:14:01,672 INFO L124 ssoRankerPreferences]: Compute integeral hull: false [2018-11-28 12:14:01,672 INFO L125 ssoRankerPreferences]: Enable LassoPartitioneer: true [2018-11-28 12:14:01,672 INFO L126 ssoRankerPreferences]: Term annotations enabled: false [2018-11-28 12:14:01,672 INFO L127 ssoRankerPreferences]: Use exernal solver: false [2018-11-28 12:14:01,672 INFO L128 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 12:14:01,672 INFO L129 ssoRankerPreferences]: Dump SMT script to file: false [2018-11-28 12:14:01,672 INFO L130 ssoRankerPreferences]: Path of dumped script: [2018-11-28 12:14:01,672 INFO L131 ssoRankerPreferences]: Filename of dumped script: elevator_spec3_product27_false-unreach-call_true-termination.cil.c_Iteration8_Loop [2018-11-28 12:14:01,672 INFO L132 ssoRankerPreferences]: MapElimAlgo: Frank [2018-11-28 12:14:01,672 INFO L282 LassoAnalysis]: Starting lasso preprocessing... [2018-11-28 12:14:01,675 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:14:01,688 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:14:01,689 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:14:01,692 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:14:01,696 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:14:01,702 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:14:01,704 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:14:01,705 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:14:01,706 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:14:01,707 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:14:01,707 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:14:01,708 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:14:01,709 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:14:01,710 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:14:01,710 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:14:01,711 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:14:01,714 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:14:01,715 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:14:01,715 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:14:01,716 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:14:01,717 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:14:01,718 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:14:01,718 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:14:01,719 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:14:01,720 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:14:01,721 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:14:01,722 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:14:01,725 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:14:01,726 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:14:01,727 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:14:01,727 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:14:01,737 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:14:01,738 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:14:01,738 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:14:01,739 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:14:01,740 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:14:01,741 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:14:01,741 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:14:01,745 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:14:01,748 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:14:01,749 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:14:01,750 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:14:01,750 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:14:01,752 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:14:01,755 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:14:01,756 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:14:01,757 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:14:01,758 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:14:01,759 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:14:01,760 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:14:01,761 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:14:01,763 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:14:01,764 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:14:01,765 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:14:01,765 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:14:01,766 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:14:01,767 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:14:01,768 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:14:01,769 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:14:01,770 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:14:01,771 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:14:01,776 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:14:01,777 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:14:01,778 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:14:01,782 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:14:01,783 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:14:01,784 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:14:01,785 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:14:01,786 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:14:01,786 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:14:01,787 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:14:01,788 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:14:01,791 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:14:01,792 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:14:01,793 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:14:01,811 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:14:01,812 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:14:01,813 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:14:01,816 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:14:01,817 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:14:01,818 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:14:01,819 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:14:01,821 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:14:01,822 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:14:01,823 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:14:01,824 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:14:01,825 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 12:14:02,165 INFO L300 LassoAnalysis]: Preprocessing complete. [2018-11-28 12:14:02,165 INFO L497 LassoAnalysis]: Using template 'affine'. [2018-11-28 12:14:02,165 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 12:14:02,166 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 12:14:02,166 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 12:14:02,166 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 12:14:02,166 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 12:14:02,166 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 12:14:02,166 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 12:14:02,167 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 12:14:02,168 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 12:14:02,168 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 12:14:02,168 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 12:14:02,168 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 12:14:02,168 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 12:14:02,168 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 12:14:02,168 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 12:14:02,169 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 12:14:02,169 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 12:14:02,169 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 12:14:02,169 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 12:14:02,169 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 12:14:02,170 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 12:14:02,170 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 12:14:02,170 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 12:14:02,170 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 12:14:02,170 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 12:14:02,170 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 12:14:02,170 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 12:14:02,170 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 12:14:02,170 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 12:14:02,171 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 12:14:02,171 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 12:14:02,171 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 12:14:02,171 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 12:14:02,171 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 12:14:02,171 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 12:14:02,171 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 12:14:02,172 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 12:14:02,172 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 12:14:02,172 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 12:14:02,172 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 12:14:02,172 INFO L206 nArgumentSynthesizer]: 2 loop disjuncts [2018-11-28 12:14:02,172 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 12:14:02,173 INFO L402 nArgumentSynthesizer]: We have 4 Motzkin's Theorem applications. [2018-11-28 12:14:02,173 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 12:14:02,177 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 12:14:02,177 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 12:14:02,177 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 12:14:02,177 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 12:14:02,178 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 12:14:02,178 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 12:14:02,178 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 12:14:02,178 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 12:14:02,178 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 12:14:02,179 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 12:14:02,179 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 12:14:02,179 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 12:14:02,179 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 12:14:02,180 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 12:14:02,180 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 12:14:02,180 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 12:14:02,180 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 12:14:02,180 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 12:14:02,180 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 12:14:02,181 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 12:14:02,181 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 12:14:02,181 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 12:14:02,181 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 12:14:02,181 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 12:14:02,181 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 12:14:02,182 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 12:14:02,182 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 12:14:02,182 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 12:14:02,182 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 12:14:02,182 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 12:14:02,183 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 12:14:02,183 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 12:14:02,183 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 12:14:02,183 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 12:14:02,183 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 12:14:02,183 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 12:14:02,183 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 12:14:02,184 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 12:14:02,184 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 12:14:02,184 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 12:14:02,184 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 12:14:02,184 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 12:14:02,184 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 12:14:02,185 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 12:14:02,185 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 12:14:02,185 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 12:14:02,185 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 12:14:02,186 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 12:14:02,186 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 12:14:02,186 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 12:14:02,186 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 12:14:02,186 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 12:14:02,186 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 12:14:02,186 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 12:14:02,187 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 12:14:02,187 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 12:14:02,187 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 12:14:02,187 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 12:14:02,187 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 12:14:02,188 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 12:14:02,188 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 12:14:02,188 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 12:14:02,188 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 12:14:02,188 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 12:14:02,189 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 12:14:02,189 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 12:14:02,189 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 12:14:02,189 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 12:14:02,189 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 12:14:02,189 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 12:14:02,189 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 12:14:02,190 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 12:14:02,190 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 12:14:02,190 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 12:14:02,190 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 12:14:02,191 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 12:14:02,191 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 12:14:02,191 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 12:14:02,191 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 12:14:02,191 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 12:14:02,191 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 12:14:02,191 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 12:14:02,192 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 12:14:02,192 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 12:14:02,192 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 12:14:02,192 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 12:14:02,192 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 12:14:02,192 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 12:14:02,193 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 12:14:02,193 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 12:14:02,193 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 12:14:02,193 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 12:14:02,194 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 12:14:02,194 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 12:14:02,194 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 12:14:02,194 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 12:14:02,194 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 12:14:02,194 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 12:14:02,194 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 12:14:02,196 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 12:14:02,196 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 12:14:02,196 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 12:14:02,196 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 12:14:02,196 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 12:14:02,196 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 12:14:02,196 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 12:14:02,197 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 12:14:02,197 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 12:14:02,197 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 12:14:02,197 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 12:14:02,198 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 12:14:02,198 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 12:14:02,198 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 12:14:02,198 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 12:14:02,198 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 12:14:02,198 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 12:14:02,198 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 12:14:02,199 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 12:14:02,199 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 12:14:02,199 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 12:14:02,199 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 12:14:02,200 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 12:14:02,200 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 12:14:02,200 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 12:14:02,200 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 12:14:02,200 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 12:14:02,200 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 12:14:02,201 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 12:14:02,201 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 12:14:02,201 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 12:14:02,201 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 12:14:02,201 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 12:14:02,201 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 12:14:02,202 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 12:14:02,202 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 12:14:02,202 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 12:14:02,202 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 12:14:02,202 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 12:14:02,203 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 12:14:02,203 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 12:14:02,203 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 12:14:02,203 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 12:14:02,203 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 12:14:02,203 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 12:14:02,204 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 12:14:02,204 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 12:14:02,204 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 12:14:02,204 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 12:14:02,204 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 12:14:02,204 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 12:14:02,205 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 12:14:02,205 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 12:14:02,205 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 12:14:02,205 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 12:14:02,205 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 12:14:02,206 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 12:14:02,206 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 12:14:02,206 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 12:14:02,206 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 12:14:02,206 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 12:14:02,206 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 12:14:02,206 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 12:14:02,207 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 12:14:02,207 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 12:14:02,207 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 12:14:02,207 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 12:14:02,208 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 12:14:02,208 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 12:14:02,208 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 12:14:02,208 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 12:14:02,208 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 12:14:02,208 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 12:14:02,209 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 12:14:02,209 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 12:14:02,209 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 12:14:02,209 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 12:14:02,209 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 12:14:02,209 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 12:14:02,210 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 12:14:02,210 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 12:14:02,210 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 12:14:02,210 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 12:14:02,210 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 12:14:02,211 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 12:14:02,211 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 12:14:02,211 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 12:14:02,211 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 12:14:02,211 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 12:14:02,211 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 12:14:02,212 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 12:14:02,212 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 12:14:02,213 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 12:14:02,213 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 12:14:02,213 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 12:14:02,213 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 12:14:02,213 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 12:14:02,213 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 12:14:02,213 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 12:14:02,216 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 12:14:02,216 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 12:14:02,216 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 12:14:02,217 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 12:14:02,217 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 12:14:02,217 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 12:14:02,217 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 12:14:02,217 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 12:14:02,217 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 12:14:02,218 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 12:14:02,218 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 12:14:02,218 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 12:14:02,218 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 12:14:02,218 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 12:14:02,218 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 12:14:02,218 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 12:14:02,219 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 12:14:02,219 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 12:14:02,219 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 12:14:02,219 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 12:14:02,219 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 12:14:02,219 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 12:14:02,220 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 12:14:02,220 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 12:14:02,220 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 12:14:02,220 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 12:14:02,220 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 12:14:02,220 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 12:14:02,221 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 12:14:02,221 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 12:14:02,221 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 12:14:02,221 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 12:14:02,221 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 12:14:02,221 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 12:14:02,222 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 12:14:02,222 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 12:14:02,224 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 12:14:02,225 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 12:14:02,225 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 12:14:02,225 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 12:14:02,225 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 12:14:02,225 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 12:14:02,225 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 12:14:02,226 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 12:14:02,226 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 12:14:02,226 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 12:14:02,226 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 12:14:02,227 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 12:14:02,227 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 12:14:02,227 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 12:14:02,227 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 12:14:02,227 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 12:14:02,228 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 12:14:02,228 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 12:14:02,228 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 12:14:02,228 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 12:14:02,229 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 12:14:02,229 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 12:14:02,229 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 12:14:02,229 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 12:14:02,229 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 12:14:02,229 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 12:14:02,229 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 12:14:02,230 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 12:14:02,230 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 12:14:02,230 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 12:14:02,230 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 12:14:02,230 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 12:14:02,230 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 12:14:02,230 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 12:14:02,231 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 12:14:02,231 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 12:14:02,231 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 12:14:02,231 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 12:14:02,232 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 12:14:02,232 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 12:14:02,232 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 12:14:02,232 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 12:14:02,232 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 12:14:02,232 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 12:14:02,232 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 12:14:02,233 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 12:14:02,233 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 12:14:02,233 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 12:14:02,233 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 12:14:02,233 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 12:14:02,233 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 12:14:02,234 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 12:14:02,234 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 12:14:02,234 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 12:14:02,234 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 12:14:02,234 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 12:14:02,235 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 12:14:02,235 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 12:14:02,235 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 12:14:02,235 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 12:14:02,235 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 12:14:02,235 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 12:14:02,235 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 12:14:02,237 INFO L421 nArgumentSynthesizer]: Found a termination argument, trying to simplify. [2018-11-28 12:14:02,239 INFO L443 ModelExtractionUtils]: Simplification made 4 calls to the SMT solver. [2018-11-28 12:14:02,239 INFO L444 ModelExtractionUtils]: 1 out of 5 variables were initially zero. Simplification set additionally 1 variables to zero. [2018-11-28 12:14:02,239 INFO L437 nArgumentSynthesizer]: Simplifying supporting invariants... [2018-11-28 12:14:02,239 INFO L440 nArgumentSynthesizer]: Removed 0 redundant supporting invariants from a total of 0. [2018-11-28 12:14:02,239 INFO L518 LassoAnalysis]: Proved termination. [2018-11-28 12:14:02,239 INFO L520 LassoAnalysis]: Termination argument consisting of: Ranking function f(~cleanupTimeShifts~0, ULTIMATE.start_cleanup_~i~3) = 1*~cleanupTimeShifts~0 - 1*ULTIMATE.start_cleanup_~i~3 Supporting invariants [] [2018-11-28 12:14:02,240 INFO L297 tatePredicateManager]: 0 out of 0 supporting invariants were superfluous and have been removed [2018-11-28 12:14:02,326 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 12:14:02,442 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 12:14:02,449 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-28 12:14:02,512 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 12:14:02,515 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-28 12:14:02,607 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 12:14:02,609 INFO L152 lantAutomatonBouncer]: Defining deterministic Buchi interpolant automaton with honda bouncer for stem and without honda bouncer for loop.1 stem predicates 4 loop predicates [2018-11-28 12:14:02,609 INFO L72 iDifferenceNCSBLazy3]: Start buchiDifferenceNCSBLazy3. First operand 77716 states and 143937 transitions. cyclomatic complexity: 66231 Second operand 5 states. [2018-11-28 12:14:04,538 INFO L76 iDifferenceNCSBLazy3]: Finished buchiDifferenceNCSBLazy3. First operand 77716 states and 143937 transitions. cyclomatic complexity: 66231. Second operand 5 states. Result 122368 states and 226446 transitions. Complement of second has 8 states. [2018-11-28 12:14:04,541 INFO L142 InterpolantAutomaton]: Switched to read-only mode: Buchi interpolant automaton has 5 states 1 stem states 3 non-accepting loop states 1 accepting loop states [2018-11-28 12:14:04,541 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2018-11-28 12:14:04,546 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 12188 transitions. [2018-11-28 12:14:04,547 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 5 states and 12188 transitions. Stem has 152 letters. Loop has 51 letters. [2018-11-28 12:14:04,547 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2018-11-28 12:14:04,547 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 5 states and 12188 transitions. Stem has 203 letters. Loop has 51 letters. [2018-11-28 12:14:04,548 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2018-11-28 12:14:04,548 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 5 states and 12188 transitions. Stem has 152 letters. Loop has 102 letters. [2018-11-28 12:14:04,549 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2018-11-28 12:14:04,549 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 122368 states and 226446 transitions. [2018-11-28 12:14:04,833 INFO L131 ngComponentsAnalysis]: Automaton has 0 accepting balls. 0 [2018-11-28 12:14:04,833 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 122368 states to 0 states and 0 transitions. [2018-11-28 12:14:04,833 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 0 [2018-11-28 12:14:04,833 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 0 [2018-11-28 12:14:04,833 INFO L73 IsDeterministic]: Start isDeterministic. Operand 0 states and 0 transitions. [2018-11-28 12:14:04,833 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-28 12:14:04,833 INFO L705 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2018-11-28 12:14:04,833 INFO L728 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2018-11-28 12:14:04,833 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-28 12:14:04,833 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-28 12:14:04,834 INFO L87 Difference]: Start difference. First operand 0 states and 0 transitions. Second operand 3 states. [2018-11-28 12:14:04,834 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-28 12:14:04,834 INFO L93 Difference]: Finished difference Result 0 states and 0 transitions. [2018-11-28 12:14:04,834 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2018-11-28 12:14:04,834 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 0 states and 0 transitions. [2018-11-28 12:14:04,834 INFO L131 ngComponentsAnalysis]: Automaton has 0 accepting balls. 0 [2018-11-28 12:14:04,834 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 0 states to 0 states and 0 transitions. [2018-11-28 12:14:04,834 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 0 [2018-11-28 12:14:04,834 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 0 [2018-11-28 12:14:04,834 INFO L73 IsDeterministic]: Start isDeterministic. Operand 0 states and 0 transitions. [2018-11-28 12:14:04,834 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-28 12:14:04,834 INFO L705 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2018-11-28 12:14:04,834 INFO L728 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2018-11-28 12:14:04,835 INFO L608 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2018-11-28 12:14:04,835 INFO L442 BuchiCegarLoop]: ======== Iteration 9============ [2018-11-28 12:14:04,835 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 0 states and 0 transitions. [2018-11-28 12:14:04,835 INFO L131 ngComponentsAnalysis]: Automaton has 0 accepting balls. 0 [2018-11-28 12:14:04,835 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is true [2018-11-28 12:14:04,840 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer CFG 28.11 12:14:04 BoogieIcfgContainer [2018-11-28 12:14:04,840 INFO L132 PluginConnector]: ------------------------ END BuchiAutomizer---------------------------- [2018-11-28 12:14:04,841 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2018-11-28 12:14:04,841 INFO L271 PluginConnector]: Initializing Witness Printer... [2018-11-28 12:14:04,841 INFO L276 PluginConnector]: Witness Printer initialized [2018-11-28 12:14:04,841 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 28.11 12:13:21" (3/4) ... [2018-11-28 12:14:04,844 INFO L147 WitnessPrinter]: No result that supports witness generation found [2018-11-28 12:14:04,844 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2018-11-28 12:14:04,845 INFO L168 Benchmark]: Toolchain (without parser) took 50874.16 ms. Allocated memory was 1.0 GB in the beginning and 4.7 GB in the end (delta: 3.7 GB). Free memory was 950.6 MB in the beginning and 3.9 GB in the end (delta: -3.0 GB). Peak memory consumption was 741.1 MB. Max. memory is 11.5 GB. [2018-11-28 12:14:04,848 INFO L168 Benchmark]: CDTParser took 0.14 ms. Allocated memory is still 1.0 GB. Free memory is still 979.6 MB. There was no memory consumed. Max. memory is 11.5 GB. [2018-11-28 12:14:04,848 INFO L168 Benchmark]: CACSL2BoogieTranslator took 560.25 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 132.1 MB). Free memory was 950.6 MB in the beginning and 1.1 GB in the end (delta: -133.6 MB). Peak memory consumption was 42.9 MB. Max. memory is 11.5 GB. [2018-11-28 12:14:04,848 INFO L168 Benchmark]: Boogie Procedure Inliner took 265.08 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.0 GB in the end (delta: 65.4 MB). Peak memory consumption was 65.4 MB. Max. memory is 11.5 GB. [2018-11-28 12:14:04,848 INFO L168 Benchmark]: Boogie Preprocessor took 267.57 ms. Allocated memory is still 1.2 GB. Free memory was 1.0 GB in the beginning and 960.1 MB in the end (delta: 58.7 MB). Peak memory consumption was 58.7 MB. Max. memory is 11.5 GB. [2018-11-28 12:14:04,849 INFO L168 Benchmark]: RCFGBuilder took 6569.94 ms. Allocated memory was 1.2 GB in the beginning and 1.6 GB in the end (delta: 462.9 MB). Free memory was 960.1 MB in the beginning and 1.4 GB in the end (delta: -478.7 MB). Peak memory consumption was 432.6 MB. Max. memory is 11.5 GB. [2018-11-28 12:14:04,849 INFO L168 Benchmark]: BuchiAutomizer took 43204.32 ms. Allocated memory was 1.6 GB in the beginning and 4.7 GB in the end (delta: 3.1 GB). Free memory was 1.4 GB in the beginning and 3.9 GB in the end (delta: -2.5 GB). Peak memory consumption was 634.2 MB. Max. memory is 11.5 GB. [2018-11-28 12:14:04,849 INFO L168 Benchmark]: Witness Printer took 3.62 ms. Allocated memory is still 4.7 GB. Free memory is still 3.9 GB. There was no memory consumed. Max. memory is 11.5 GB. [2018-11-28 12:14:04,852 INFO L336 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.14 ms. Allocated memory is still 1.0 GB. Free memory is still 979.6 MB. There was no memory consumed. Max. memory is 11.5 GB. * CACSL2BoogieTranslator took 560.25 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 132.1 MB). Free memory was 950.6 MB in the beginning and 1.1 GB in the end (delta: -133.6 MB). Peak memory consumption was 42.9 MB. Max. memory is 11.5 GB. * Boogie Procedure Inliner took 265.08 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.0 GB in the end (delta: 65.4 MB). Peak memory consumption was 65.4 MB. Max. memory is 11.5 GB. * Boogie Preprocessor took 267.57 ms. Allocated memory is still 1.2 GB. Free memory was 1.0 GB in the beginning and 960.1 MB in the end (delta: 58.7 MB). Peak memory consumption was 58.7 MB. Max. memory is 11.5 GB. * RCFGBuilder took 6569.94 ms. Allocated memory was 1.2 GB in the beginning and 1.6 GB in the end (delta: 462.9 MB). Free memory was 960.1 MB in the beginning and 1.4 GB in the end (delta: -478.7 MB). Peak memory consumption was 432.6 MB. Max. memory is 11.5 GB. * BuchiAutomizer took 43204.32 ms. Allocated memory was 1.6 GB in the beginning and 4.7 GB in the end (delta: 3.1 GB). Free memory was 1.4 GB in the beginning and 3.9 GB in the end (delta: -2.5 GB). Peak memory consumption was 634.2 MB. Max. memory is 11.5 GB. * Witness Printer took 3.62 ms. Allocated memory is still 4.7 GB. Free memory is still 3.9 GB. There was no memory consumed. Max. memory is 11.5 GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: Constructed decomposition of program Your program was decomposed into 10 terminating modules (8 trivial, 2 deterministic, 0 nondeterministic). One deterministic module has affine ranking function -1 * currentFloorID and consists of 8 locations. One deterministic module has affine ranking function cleanupTimeShifts + -1 * i and consists of 5 locations. 8 modules have a trivial ranking function, the largest among these consists of 16 locations. - StatisticsResult: Timing statistics BüchiAutomizer plugin needed 43.1s and 9 iterations. TraceHistogramMax:1. Analysis of lassos took 9.7s. Construction of modules took 14.1s. Büchi inclusion checks took 12.4s. Highest rank in rank-based complementation 3. Minimization of det autom 6. Minimization of nondet autom 4. Automata minimization 3.0s AutomataMinimizationTime, 8 MinimizatonAttempts, 207162 StatesRemovedByMinimization, 8 NontrivialMinimizations. Non-live state removal took 2.7s Buchi closure took 0.2s. Biggest automaton had 77716 states and ocurred in iteration 7. Nontrivial modules had stage [2, 0, 0, 0, 0]. InterpolantCoveringCapabilityFinite: 0/0 InterpolantCoveringCapabilityBuchi: 0/0 HoareTripleCheckerStatistics: 166725 SDtfs, 465253 SDslu, 528219 SDs, 0 SdLazy, 36740 SolverSat, 2498 SolverUnsat, 0 SolverUnknown, 0 SolverNotchecked, 14.1s Time LassoAnalysisResults: nont0 unkn0 SFLI0 SFLT0 conc0 concLT0 SILN0 SILU0 SILI6 SILT2 lasso0 LassoPreprocessingBenchmarks: Lassos: inital215 mio100 ax100 hnf99 lsp20 ukn100 mio100 lsp100 div100 bol100 ite100 ukn100 eq212 hnf87 smp85 dnf129 smp100 tf102 neg97 sie104 LassoTerminationAnalysisBenchmarks: ConstraintsSatisfiability: unsat Degree: 0 Time: 5ms VariablesStem: 0 VariablesLoop: 7 DisjunctsStem: 1 DisjunctsLoop: 2 SupportingInvariants: 0 MotzkinApplications: 4 LassoTerminationAnalysisBenchmarks: LassoNonterminationAnalysisSatFixpoint: 70 LassoNonterminationAnalysisSatUnbounded: 0 LassoNonterminationAnalysisUnsat: 2 LassoNonterminationAnalysisUnknown: 0 LassoNonterminationAnalysisTime: 2.6s - TerminationAnalysisResult: Termination proven Buchi Automizer proved that your program is terminating RESULT: Ultimate proved your program to be correct! Received shutdown request...