./Ultimate.py --spec ../../sv-benchmarks/c/properties/termination.prp --file ../../sv-benchmarks/c/product-lines/elevator_spec3_product31_false-unreach-call_true-termination.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for termination Using default analysis Version 635dfa2a Calling Ultimate with: java -Dosgi.configuration.area=/tmp/vcloud-vcloud-master/worker/working_dir_c86073a4-3492-4269-9a37-fba1051f5e9e/bin-2019/uautomizer/data/config -Xmx12G -Xms1G -jar /tmp/vcloud-vcloud-master/worker/working_dir_c86073a4-3492-4269-9a37-fba1051f5e9e/bin-2019/uautomizer/plugins/org.eclipse.equinox.launcher_1.3.100.v20150511-1540.jar -data @noDefault -ultimatedata /tmp/vcloud-vcloud-master/worker/working_dir_c86073a4-3492-4269-9a37-fba1051f5e9e/bin-2019/uautomizer/data -tc /tmp/vcloud-vcloud-master/worker/working_dir_c86073a4-3492-4269-9a37-fba1051f5e9e/bin-2019/uautomizer/config/AutomizerTermination.xml -i ../../sv-benchmarks/c/product-lines/elevator_spec3_product31_false-unreach-call_true-termination.cil.c -s /tmp/vcloud-vcloud-master/worker/working_dir_c86073a4-3492-4269-9a37-fba1051f5e9e/bin-2019/uautomizer/config/svcomp-Termination-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud-vcloud-master/worker/working_dir_c86073a4-3492-4269-9a37-fba1051f5e9e/bin-2019/uautomizer --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(F end) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash e4c8b021dd10e17f75bc3f05209475156561c2f7 .................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................... Execution finished normally Writing output log to file Ultimate.log Result: TRUE --- Real Ultimate output --- This is Ultimate 0.1.23-635dfa2 [2018-12-09 11:34:01,792 INFO L170 SettingsManager]: Resetting all preferences to default values... [2018-12-09 11:34:01,793 INFO L174 SettingsManager]: Resetting UltimateCore preferences to default values [2018-12-09 11:34:01,801 INFO L177 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2018-12-09 11:34:01,801 INFO L174 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2018-12-09 11:34:01,802 INFO L174 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2018-12-09 11:34:01,803 INFO L174 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2018-12-09 11:34:01,804 INFO L174 SettingsManager]: Resetting LassoRanker preferences to default values [2018-12-09 11:34:01,805 INFO L174 SettingsManager]: Resetting Reaching Definitions preferences to default values [2018-12-09 11:34:01,806 INFO L174 SettingsManager]: Resetting SyntaxChecker preferences to default values [2018-12-09 11:34:01,806 INFO L177 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2018-12-09 11:34:01,806 INFO L174 SettingsManager]: Resetting LTL2Aut preferences to default values [2018-12-09 11:34:01,807 INFO L174 SettingsManager]: Resetting PEA to Boogie preferences to default values [2018-12-09 11:34:01,808 INFO L174 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2018-12-09 11:34:01,808 INFO L174 SettingsManager]: Resetting ChcToBoogie preferences to default values [2018-12-09 11:34:01,809 INFO L174 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2018-12-09 11:34:01,810 INFO L174 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2018-12-09 11:34:01,811 INFO L174 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2018-12-09 11:34:01,812 INFO L174 SettingsManager]: Resetting CodeCheck preferences to default values [2018-12-09 11:34:01,813 INFO L174 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2018-12-09 11:34:01,814 INFO L174 SettingsManager]: Resetting RCFGBuilder preferences to default values [2018-12-09 11:34:01,815 INFO L174 SettingsManager]: Resetting TraceAbstraction preferences to default values [2018-12-09 11:34:01,816 INFO L177 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2018-12-09 11:34:01,816 INFO L177 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2018-12-09 11:34:01,817 INFO L174 SettingsManager]: Resetting TreeAutomizer preferences to default values [2018-12-09 11:34:01,817 INFO L174 SettingsManager]: Resetting IcfgTransformer preferences to default values [2018-12-09 11:34:01,818 INFO L174 SettingsManager]: Resetting Boogie Printer preferences to default values [2018-12-09 11:34:01,819 INFO L174 SettingsManager]: Resetting ReqPrinter preferences to default values [2018-12-09 11:34:01,819 INFO L174 SettingsManager]: Resetting Witness Printer preferences to default values [2018-12-09 11:34:01,820 INFO L177 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2018-12-09 11:34:01,820 INFO L174 SettingsManager]: Resetting CDTParser preferences to default values [2018-12-09 11:34:01,821 INFO L177 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2018-12-09 11:34:01,821 INFO L177 SettingsManager]: ReqParser provides no preferences, ignoring... [2018-12-09 11:34:01,821 INFO L174 SettingsManager]: Resetting SmtParser preferences to default values [2018-12-09 11:34:01,822 INFO L174 SettingsManager]: Resetting Witness Parser preferences to default values [2018-12-09 11:34:01,822 INFO L181 SettingsManager]: Finished resetting all preferences to default values... [2018-12-09 11:34:01,822 INFO L98 SettingsManager]: Beginning loading settings from /tmp/vcloud-vcloud-master/worker/working_dir_c86073a4-3492-4269-9a37-fba1051f5e9e/bin-2019/uautomizer/config/svcomp-Termination-32bit-Automizer_Default.epf [2018-12-09 11:34:01,833 INFO L110 SettingsManager]: Loading preferences was successful [2018-12-09 11:34:01,833 INFO L112 SettingsManager]: Preferences different from defaults after loading the file: [2018-12-09 11:34:01,834 INFO L131 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2018-12-09 11:34:01,834 INFO L133 SettingsManager]: * Create parallel compositions if possible=false [2018-12-09 11:34:01,834 INFO L133 SettingsManager]: * Use SBE=true [2018-12-09 11:34:01,834 INFO L131 SettingsManager]: Preferences of BuchiAutomizer differ from their defaults: [2018-12-09 11:34:01,835 INFO L133 SettingsManager]: * NCSB implementation=INTSET_LAZY3 [2018-12-09 11:34:01,835 INFO L133 SettingsManager]: * Use old map elimination=false [2018-12-09 11:34:01,835 INFO L133 SettingsManager]: * Use external solver (rank synthesis)=false [2018-12-09 11:34:01,835 INFO L133 SettingsManager]: * Use only trivial implications for array writes=true [2018-12-09 11:34:01,835 INFO L133 SettingsManager]: * Rank analysis=LINEAR_WITH_GUESSES [2018-12-09 11:34:01,835 INFO L131 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2018-12-09 11:34:01,835 INFO L133 SettingsManager]: * sizeof long=4 [2018-12-09 11:34:01,835 INFO L133 SettingsManager]: * Check unreachability of error function in SV-COMP mode=false [2018-12-09 11:34:01,835 INFO L133 SettingsManager]: * Overapproximate operations on floating types=true [2018-12-09 11:34:01,836 INFO L133 SettingsManager]: * sizeof POINTER=4 [2018-12-09 11:34:01,836 INFO L133 SettingsManager]: * Check division by zero=IGNORE [2018-12-09 11:34:01,836 INFO L133 SettingsManager]: * Pointer to allocated memory at dereference=ASSUME [2018-12-09 11:34:01,836 INFO L133 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=ASSUME [2018-12-09 11:34:01,836 INFO L133 SettingsManager]: * Check array bounds for arrays that are off heap=ASSUME [2018-12-09 11:34:01,836 INFO L133 SettingsManager]: * sizeof long double=12 [2018-12-09 11:34:01,836 INFO L133 SettingsManager]: * Check if freed pointer was valid=false [2018-12-09 11:34:01,836 INFO L133 SettingsManager]: * Assume nondeterminstic values are in range=false [2018-12-09 11:34:01,836 INFO L133 SettingsManager]: * Use constant arrays=true [2018-12-09 11:34:01,837 INFO L133 SettingsManager]: * Pointer base address is valid at dereference=ASSUME [2018-12-09 11:34:01,837 INFO L131 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2018-12-09 11:34:01,837 INFO L133 SettingsManager]: * Size of a code block=SequenceOfStatements [2018-12-09 11:34:01,837 INFO L133 SettingsManager]: * To the following directory=/home/matthias/ultimate/dump [2018-12-09 11:34:01,837 INFO L131 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2018-12-09 11:34:01,837 INFO L133 SettingsManager]: * Trace refinement strategy=CAMEL [2018-12-09 11:34:01,837 INFO L133 SettingsManager]: * Dump automata to the following directory=/home/matthias/ultimate/dump/auto [2018-12-09 11:34:01,838 INFO L131 SettingsManager]: Preferences of IcfgTransformer differ from their defaults: [2018-12-09 11:34:01,838 INFO L133 SettingsManager]: * TransformationType=MODULO_NEIGHBOR Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud-vcloud-master/worker/working_dir_c86073a4-3492-4269-9a37-fba1051f5e9e/bin-2019/uautomizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(F end) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> e4c8b021dd10e17f75bc3f05209475156561c2f7 [2018-12-09 11:34:01,856 INFO L81 nceAwareModelManager]: Repository-Root is: /tmp [2018-12-09 11:34:01,863 INFO L258 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2018-12-09 11:34:01,865 INFO L214 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2018-12-09 11:34:01,866 INFO L271 PluginConnector]: Initializing CDTParser... [2018-12-09 11:34:01,866 INFO L276 PluginConnector]: CDTParser initialized [2018-12-09 11:34:01,867 INFO L418 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud-vcloud-master/worker/working_dir_c86073a4-3492-4269-9a37-fba1051f5e9e/bin-2019/uautomizer/../../sv-benchmarks/c/product-lines/elevator_spec3_product31_false-unreach-call_true-termination.cil.c [2018-12-09 11:34:01,904 INFO L221 CDTParser]: Created temporary CDT project at /tmp/vcloud-vcloud-master/worker/working_dir_c86073a4-3492-4269-9a37-fba1051f5e9e/bin-2019/uautomizer/data/f75fe0814/4872f7463e744cd382f236e9dd6b57a2/FLAGc2ca501ba [2018-12-09 11:34:02,440 INFO L307 CDTParser]: Found 1 translation units. [2018-12-09 11:34:02,440 INFO L161 CDTParser]: Scanning /tmp/vcloud-vcloud-master/worker/working_dir_c86073a4-3492-4269-9a37-fba1051f5e9e/sv-benchmarks/c/product-lines/elevator_spec3_product31_false-unreach-call_true-termination.cil.c [2018-12-09 11:34:02,452 INFO L355 CDTParser]: About to delete temporary CDT project at /tmp/vcloud-vcloud-master/worker/working_dir_c86073a4-3492-4269-9a37-fba1051f5e9e/bin-2019/uautomizer/data/f75fe0814/4872f7463e744cd382f236e9dd6b57a2/FLAGc2ca501ba [2018-12-09 11:34:02,887 INFO L363 CDTParser]: Successfully deleted /tmp/vcloud-vcloud-master/worker/working_dir_c86073a4-3492-4269-9a37-fba1051f5e9e/bin-2019/uautomizer/data/f75fe0814/4872f7463e744cd382f236e9dd6b57a2 [2018-12-09 11:34:02,889 INFO L296 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2018-12-09 11:34:02,890 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2018-12-09 11:34:02,890 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2018-12-09 11:34:02,890 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2018-12-09 11:34:02,892 INFO L276 PluginConnector]: CACSL2BoogieTranslator initialized [2018-12-09 11:34:02,893 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 09.12 11:34:02" (1/1) ... [2018-12-09 11:34:02,894 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@5f773398 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.12 11:34:02, skipping insertion in model container [2018-12-09 11:34:02,894 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 09.12 11:34:02" (1/1) ... [2018-12-09 11:34:02,898 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2018-12-09 11:34:02,938 INFO L176 MainTranslator]: Built tables and reachable declarations [2018-12-09 11:34:03,231 INFO L203 PostProcessor]: Analyzing one entry point: main [2018-12-09 11:34:03,240 INFO L191 MainTranslator]: Completed pre-run [2018-12-09 11:34:03,327 INFO L203 PostProcessor]: Analyzing one entry point: main [2018-12-09 11:34:03,365 INFO L195 MainTranslator]: Completed translation [2018-12-09 11:34:03,365 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.12 11:34:03 WrapperNode [2018-12-09 11:34:03,365 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2018-12-09 11:34:03,366 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2018-12-09 11:34:03,366 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2018-12-09 11:34:03,366 INFO L276 PluginConnector]: Boogie Procedure Inliner initialized [2018-12-09 11:34:03,371 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.12 11:34:03" (1/1) ... [2018-12-09 11:34:03,394 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.12 11:34:03" (1/1) ... [2018-12-09 11:34:03,604 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2018-12-09 11:34:03,604 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2018-12-09 11:34:03,604 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2018-12-09 11:34:03,604 INFO L276 PluginConnector]: Boogie Preprocessor initialized [2018-12-09 11:34:03,610 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.12 11:34:03" (1/1) ... [2018-12-09 11:34:03,611 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.12 11:34:03" (1/1) ... [2018-12-09 11:34:03,643 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.12 11:34:03" (1/1) ... [2018-12-09 11:34:03,643 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.12 11:34:03" (1/1) ... [2018-12-09 11:34:03,717 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.12 11:34:03" (1/1) ... [2018-12-09 11:34:03,798 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.12 11:34:03" (1/1) ... [2018-12-09 11:34:03,827 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.12 11:34:03" (1/1) ... [2018-12-09 11:34:03,873 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2018-12-09 11:34:03,873 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2018-12-09 11:34:03,873 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2018-12-09 11:34:03,873 INFO L276 PluginConnector]: RCFGBuilder initialized [2018-12-09 11:34:03,874 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.12 11:34:03" (1/1) ... No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_c86073a4-3492-4269-9a37-fba1051f5e9e/bin-2019/uautomizer/z3 Starting monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 11:34:03,909 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.alloc [2018-12-09 11:34:03,909 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2018-12-09 11:34:03,909 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2018-12-09 11:34:03,909 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2018-12-09 11:34:11,270 INFO L275 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2018-12-09 11:34:11,271 INFO L280 CfgBuilder]: Removed 2197 assue(true) statements. [2018-12-09 11:34:11,271 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 09.12 11:34:11 BoogieIcfgContainer [2018-12-09 11:34:11,271 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2018-12-09 11:34:11,271 INFO L113 PluginConnector]: ------------------------BuchiAutomizer---------------------------- [2018-12-09 11:34:11,271 INFO L271 PluginConnector]: Initializing BuchiAutomizer... [2018-12-09 11:34:11,273 INFO L276 PluginConnector]: BuchiAutomizer initialized [2018-12-09 11:34:11,274 INFO L102 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2018-12-09 11:34:11,274 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "CDTParser AST 09.12 11:34:02" (1/3) ... [2018-12-09 11:34:11,275 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@19b42b98 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 09.12 11:34:11, skipping insertion in model container [2018-12-09 11:34:11,275 INFO L102 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2018-12-09 11:34:11,275 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.12 11:34:03" (2/3) ... [2018-12-09 11:34:11,275 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@19b42b98 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 09.12 11:34:11, skipping insertion in model container [2018-12-09 11:34:11,275 INFO L102 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2018-12-09 11:34:11,275 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 09.12 11:34:11" (3/3) ... [2018-12-09 11:34:11,276 INFO L375 chiAutomizerObserver]: Analyzing ICFG elevator_spec3_product31_false-unreach-call_true-termination.cil.c [2018-12-09 11:34:11,307 INFO L133 ementStrategyFactory]: Using default assertion order modulation [2018-12-09 11:34:11,308 INFO L374 BuchiCegarLoop]: Interprodecural is true [2018-12-09 11:34:11,308 INFO L375 BuchiCegarLoop]: Hoare is false [2018-12-09 11:34:11,308 INFO L376 BuchiCegarLoop]: Compute interpolants for ForwardPredicates [2018-12-09 11:34:11,308 INFO L377 BuchiCegarLoop]: Backedges is STRAIGHT_LINE [2018-12-09 11:34:11,308 INFO L378 BuchiCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2018-12-09 11:34:11,308 INFO L379 BuchiCegarLoop]: Difference is false [2018-12-09 11:34:11,308 INFO L380 BuchiCegarLoop]: Minimize is MINIMIZE_SEVPA [2018-12-09 11:34:11,309 INFO L383 BuchiCegarLoop]: ======== Iteration 0==of CEGAR loop == BuchiCegarLoop======== [2018-12-09 11:34:11,391 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 9243 states. [2018-12-09 11:34:11,486 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1866 [2018-12-09 11:34:11,486 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-12-09 11:34:11,486 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-12-09 11:34:11,499 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-09 11:34:11,499 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-09 11:34:11,499 INFO L442 BuchiCegarLoop]: ======== Iteration 1============ [2018-12-09 11:34:11,499 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 9243 states. [2018-12-09 11:34:11,546 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1866 [2018-12-09 11:34:11,546 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-12-09 11:34:11,546 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-12-09 11:34:11,549 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-09 11:34:11,550 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-09 11:34:11,555 INFO L794 eck$LassoCheckResult]: Stem: 2261#ULTIMATE.startENTRYtrue #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0;call #t~string33.base, #t~string33.offset := #Ultimate.alloc(30);call #t~string34.base, #t~string34.offset := #Ultimate.alloc(9);call #t~string35.base, #t~string35.offset := #Ultimate.alloc(21);call #t~string36.base, #t~string36.offset := #Ultimate.alloc(30);call #t~string37.base, #t~string37.offset := #Ultimate.alloc(9);call #t~string38.base, #t~string38.offset := #Ultimate.alloc(21);call #t~string42.base, #t~string42.offset := #Ultimate.alloc(30);call #t~string43.base, #t~string43.offset := #Ultimate.alloc(9);call #t~string44.base, #t~string44.offset := #Ultimate.alloc(25);call #t~string45.base, #t~string45.offset := #Ultimate.alloc(30);call #t~string46.base, #t~string46.offset := #Ultimate.alloc(9);call #t~string47.base, #t~string47.offset := #Ultimate.alloc(25);~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string116.base, #t~string116.offset := #Ultimate.alloc(10);call #t~string118.base, #t~string118.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string118.base, #t~string118.offset, 1);call write~init~int(95, #t~string118.base, 1 + #t~string118.offset, 1);call write~init~int(93, #t~string118.base, 2 + #t~string118.offset, 1);call write~init~int(0, #t~string118.base, 3 + #t~string118.offset, 1);call #t~string120.base, #t~string120.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string120.base, #t~string120.offset, 1);call write~init~int(93, #t~string120.base, 1 + #t~string120.offset, 1);call write~init~int(32, #t~string120.base, 2 + #t~string120.offset, 1);call write~init~int(0, #t~string120.base, 3 + #t~string120.offset, 1);call #t~string122.base, #t~string122.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string122.base, #t~string122.offset, 1);call write~init~int(97, #t~string122.base, 1 + #t~string122.offset, 1);call write~init~int(116, #t~string122.base, 2 + #t~string122.offset, 1);call write~init~int(32, #t~string122.base, 3 + #t~string122.offset, 1);call write~init~int(0, #t~string122.base, 4 + #t~string122.offset, 1);call #t~string124.base, #t~string124.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string124.base, #t~string124.offset, 1);call write~init~int(105, #t~string124.base, 1 + #t~string124.offset, 1);call write~init~int(0, #t~string124.base, 2 + #t~string124.offset, 1);call #t~string126.base, #t~string126.offset := #Ultimate.alloc(10);call #t~string128.base, #t~string128.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string128.base, #t~string128.offset, 1);call write~init~int(112, #t~string128.base, 1 + #t~string128.offset, 1);call write~init~int(0, #t~string128.base, 2 + #t~string128.offset, 1);call #t~string130.base, #t~string130.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string130.base, #t~string130.offset, 1);call write~init~int(111, #t~string130.base, 1 + #t~string130.offset, 1);call write~init~int(119, #t~string130.base, 2 + #t~string130.offset, 1);call write~init~int(110, #t~string130.base, 3 + #t~string130.offset, 1);call write~init~int(0, #t~string130.base, 4 + #t~string130.offset, 1);call #t~string132.base, #t~string132.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string132.base, #t~string132.offset, 1);call write~init~int(73, #t~string132.base, 1 + #t~string132.offset, 1);call write~init~int(76, #t~string132.base, 2 + #t~string132.offset, 1);call write~init~int(95, #t~string132.base, 3 + #t~string132.offset, 1);call write~init~int(112, #t~string132.base, 4 + #t~string132.offset, 1);call write~init~int(58, #t~string132.base, 5 + #t~string132.offset, 1);call write~init~int(0, #t~string132.base, 6 + #t~string132.offset, 1);call #t~string134.base, #t~string134.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string134.base, #t~string134.offset, 1);call write~init~int(37, #t~string134.base, 1 + #t~string134.offset, 1);call write~init~int(105, #t~string134.base, 2 + #t~string134.offset, 1);call write~init~int(0, #t~string134.base, 3 + #t~string134.offset, 1);call #t~string136.base, #t~string136.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string136.base, #t~string136.offset, 1);call write~init~int(37, #t~string136.base, 1 + #t~string136.offset, 1);call write~init~int(105, #t~string136.base, 2 + #t~string136.offset, 1);call write~init~int(0, #t~string136.base, 3 + #t~string136.offset, 1);call #t~string138.base, #t~string138.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string138.base, #t~string138.offset, 1);call write~init~int(37, #t~string138.base, 1 + #t~string138.offset, 1);call write~init~int(105, #t~string138.base, 2 + #t~string138.offset, 1);call write~init~int(0, #t~string138.base, 3 + #t~string138.offset, 1);call #t~string140.base, #t~string140.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string140.base, #t~string140.offset, 1);call write~init~int(37, #t~string140.base, 1 + #t~string140.offset, 1);call write~init~int(105, #t~string140.base, 2 + #t~string140.offset, 1);call write~init~int(0, #t~string140.base, 3 + #t~string140.offset, 1);call #t~string142.base, #t~string142.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string142.base, #t~string142.offset, 1);call write~init~int(37, #t~string142.base, 1 + #t~string142.offset, 1);call write~init~int(105, #t~string142.base, 2 + #t~string142.offset, 1);call write~init~int(0, #t~string142.base, 3 + #t~string142.offset, 1);call #t~string144.base, #t~string144.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string144.base, #t~string144.offset, 1);call write~init~int(70, #t~string144.base, 1 + #t~string144.offset, 1);call write~init~int(95, #t~string144.base, 2 + #t~string144.offset, 1);call write~init~int(112, #t~string144.base, 3 + #t~string144.offset, 1);call write~init~int(58, #t~string144.base, 4 + #t~string144.offset, 1);call write~init~int(0, #t~string144.base, 5 + #t~string144.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string147.base, #t~string147.offset, 1);call write~init~int(37, #t~string147.base, 1 + #t~string147.offset, 1);call write~init~int(105, #t~string147.base, 2 + #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 3 + #t~string147.offset, 1);call #t~string150.base, #t~string150.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string150.base, #t~string150.offset, 1);call write~init~int(37, #t~string150.base, 1 + #t~string150.offset, 1);call write~init~int(105, #t~string150.base, 2 + #t~string150.offset, 1);call write~init~int(0, #t~string150.base, 3 + #t~string150.offset, 1);call #t~string153.base, #t~string153.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string153.base, #t~string153.offset, 1);call write~init~int(37, #t~string153.base, 1 + #t~string153.offset, 1);call write~init~int(105, #t~string153.base, 2 + #t~string153.offset, 1);call write~init~int(0, #t~string153.base, 3 + #t~string153.offset, 1);call #t~string156.base, #t~string156.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string156.base, #t~string156.offset, 1);call write~init~int(37, #t~string156.base, 1 + #t~string156.offset, 1);call write~init~int(105, #t~string156.base, 2 + #t~string156.offset, 1);call write~init~int(0, #t~string156.base, 3 + #t~string156.offset, 1);call #t~string159.base, #t~string159.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string159.base, #t~string159.offset, 1);call write~init~int(37, #t~string159.base, 1 + #t~string159.offset, 1);call write~init~int(105, #t~string159.base, 2 + #t~string159.offset, 1);call write~init~int(0, #t~string159.base, 3 + #t~string159.offset, 1);call #t~string161.base, #t~string161.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string161.base, #t~string161.offset, 1);call write~init~int(0, #t~string161.base, 1 + #t~string161.offset, 1); 8412#L-1true havoc main_#res;havoc main_#t~ret177, main_~retValue_acc~31, main_~tmp~30;havoc main_~retValue_acc~31;havoc main_~tmp~30; 824#L73true havoc valid_product_#res;havoc valid_product_~retValue_acc~1;havoc valid_product_~retValue_acc~1;valid_product_~retValue_acc~1 := 1;valid_product_#res := valid_product_~retValue_acc~1; 550#L81true main_#t~ret177 := valid_product_#res;main_~tmp~30 := main_#t~ret177;havoc main_#t~ret177; 7117#L3495true assume 0 != main_~tmp~30; 2519#L3472true ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 6430#L842true havoc bobCall_#t~ret165, bobCall_~tmp~22;havoc bobCall_~tmp~22;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~9;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~9; 492#L1473true assume 0 == getOrigin_~person;getOrigin_~retValue_acc~9 := 4;getOrigin_#res := getOrigin_~retValue_acc~9; 3308#L1498true bobCall_#t~ret165 := getOrigin_#res;bobCall_~tmp~22 := bobCall_#t~ret165;havoc bobCall_#t~ret165;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~22;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 523#L1120true assume 0 == initPersonOnFloor_~floor; 350#L1121true assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 5416#L1228-1true callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 7868#L912true assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 1260#L924-2true havoc timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_~tmp~20, timeShift_~tmp___0~11, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~20;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_#t~ret3, __utac_acc__Specification3_spec__1_#t~ret4, __utac_acc__Specification3_spec__1_#t~ret5, __utac_acc__Specification3_spec__1_#t~ret6, __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_#t~ret12, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 7945#L1794true __utac_acc__Specification3_spec__1_#t~ret1 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~15;havoc getCurrentHeading_~retValue_acc~15;getCurrentHeading_~retValue_acc~15 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~15; 3440#L1846true __utac_acc__Specification3_spec__1_#t~ret2 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret2;havoc __utac_acc__Specification3_spec__1_#t~ret2; 2047#L115true assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 2962#L116true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~14;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~14; 1016#L1811true assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~14 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~14; 22#L1832true __utac_acc__Specification3_spec__1_#t~ret3 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~0 := __utac_acc__Specification3_spec__1_#t~ret3;havoc __utac_acc__Specification3_spec__1_#t~ret3; 2771#L120true assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0;~expectedDirection~0 := 1; 1085#L221true havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_#t~ret90, stopRequestedAtCurrentFloor_#t~ret91, stopRequestedAtCurrentFloor_#t~ret92, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~18, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~18;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret163, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 7157#L849true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 8696#L876true isExecutiveFloorCalling_#t~ret163 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret163;havoc isExecutiveFloorCalling_#t~ret163;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 4947#L3147true stopRequestedAtCurrentFloor_#t~ret89 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~18 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 284#L2531true assume 0 != stopRequestedAtCurrentFloor_~tmp~18;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 7948#L1794-1true stopRequestedAtCurrentFloor_#t~ret90 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret90;havoc stopRequestedAtCurrentFloor_#t~ret90; 231#L2535true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 602#L2548true timeShift_#t~ret105 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret105;havoc timeShift_#t~ret105; 1299#L2684true assume !(0 != timeShift_~tmp___9~3); 6674#L2775true assume !(1 == ~doorState~0); 6679#L2775-2true stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~14, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~6;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~14;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~6;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret163, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 7151#L849-3true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 8682#L876-3true isExecutiveFloorCalling_#t~ret163 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret163;havoc isExecutiveFloorCalling_#t~ret163;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 4944#L3147-1true stopRequestedInDirection_#t~ret80 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~6 := stopRequestedInDirection_#t~ret80;havoc stopRequestedInDirection_#t~ret80; 4076#L2386true assume 0 != stopRequestedInDirection_~tmp___0~6;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 7933#L1794-4true stopRequestedInDirection_#t~ret81 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~14 := stopRequestedInDirection_#t~ret81;havoc stopRequestedInDirection_#t~ret81;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~6 := (if stopRequestedInDirection_~tmp~14 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~21 := (if stopRequestedInDirection_~__cil_tmp8~6 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 2203#L2399true timeShift_#t~ret112 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 7407#L2783true assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret83, continueInDirection_~dir, continueInDirection_~tmp~15;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~15;~currentHeading~0 := continueInDirection_~dir; 4856#L2443true assume !(1 == ~currentHeading~0); 6198#L2453true assume !(0 == ~currentFloorID~0); 5838#L2453-2true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 5393#L2459-5true havoc __utac_acc__Specification3_spec__2_#t~ret13, __utac_acc__Specification3_spec__2_#t~ret14, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 48#L246true assume !(-1 == ~expectedDirection~0); 607#L258true assume !(1 == ~expectedDirection~0); 589#L259true havoc timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_~tmp~20, timeShift_~tmp___0~11, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~20;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_#t~ret3, __utac_acc__Specification3_spec__1_#t~ret4, __utac_acc__Specification3_spec__1_#t~ret5, __utac_acc__Specification3_spec__1_#t~ret6, __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_#t~ret12, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 7940#L1794-6true __utac_acc__Specification3_spec__1_#t~ret1 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~15;havoc getCurrentHeading_~retValue_acc~15;getCurrentHeading_~retValue_acc~15 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~15; 3482#L1846-3true __utac_acc__Specification3_spec__1_#t~ret2 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret2;havoc __utac_acc__Specification3_spec__1_#t~ret2; 2046#L115-1true assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 8315#L177-1true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~14;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~14; 984#L1811-19true assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~14 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~14; 139#L1832-19true __utac_acc__Specification3_spec__1_#t~ret8 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret8;havoc __utac_acc__Specification3_spec__1_#t~ret8; 8254#L181-2true assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 1082#L221-1true havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_#t~ret90, stopRequestedAtCurrentFloor_#t~ret91, stopRequestedAtCurrentFloor_#t~ret92, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~18, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~18;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret163, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 7024#L849-65true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 8719#L876-65true isExecutiveFloorCalling_#t~ret163 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret163;havoc isExecutiveFloorCalling_#t~ret163;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 4916#L3147-3true stopRequestedAtCurrentFloor_#t~ret89 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~18 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 291#L2531-1true assume 0 != stopRequestedAtCurrentFloor_~tmp~18;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 7939#L1794-7true stopRequestedAtCurrentFloor_#t~ret90 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret90;havoc stopRequestedAtCurrentFloor_#t~ret90; 234#L2535-1true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 600#L2548-1true timeShift_#t~ret105 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret105;havoc timeShift_#t~ret105; 1297#L2684-1true assume !(0 != timeShift_~tmp___9~3); 6505#L2775-3true assume !(1 == ~doorState~0); 6508#L2775-5true stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~14, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~6;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~14;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~6;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret163, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 6993#L849-68true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 8712#L876-68true isExecutiveFloorCalling_#t~ret163 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret163;havoc isExecutiveFloorCalling_#t~ret163;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 4920#L3147-4true stopRequestedInDirection_#t~ret80 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~6 := stopRequestedInDirection_#t~ret80;havoc stopRequestedInDirection_#t~ret80; 4085#L2386-2true assume 0 != stopRequestedInDirection_~tmp___0~6;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 7923#L1794-10true stopRequestedInDirection_#t~ret81 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~14 := stopRequestedInDirection_#t~ret81;havoc stopRequestedInDirection_#t~ret81;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~6 := (if stopRequestedInDirection_~tmp~14 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~21 := (if stopRequestedInDirection_~__cil_tmp8~6 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 2189#L2399-2true timeShift_#t~ret112 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 7402#L2783-1true assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret83, continueInDirection_~dir, continueInDirection_~tmp~15;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~15;~currentHeading~0 := continueInDirection_~dir; 4832#L2443-3true assume !(1 == ~currentHeading~0); 5830#L2453-9true assume !(0 == ~currentFloorID~0); 5833#L2453-11true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 5388#L2459-11true havoc __utac_acc__Specification3_spec__2_#t~ret13, __utac_acc__Specification3_spec__2_#t~ret14, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 46#L246-1true assume !(-1 == ~expectedDirection~0); 605#L258-1true assume !(1 == ~expectedDirection~0); 587#L259-1true havoc timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_~tmp~20, timeShift_~tmp___0~11, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~20;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_#t~ret3, __utac_acc__Specification3_spec__1_#t~ret4, __utac_acc__Specification3_spec__1_#t~ret5, __utac_acc__Specification3_spec__1_#t~ret6, __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_#t~ret12, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 7926#L1794-12true __utac_acc__Specification3_spec__1_#t~ret1 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~15;havoc getCurrentHeading_~retValue_acc~15;getCurrentHeading_~retValue_acc~15 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~15; 3487#L1846-6true __utac_acc__Specification3_spec__1_#t~ret2 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret2;havoc __utac_acc__Specification3_spec__1_#t~ret2; 2043#L115-2true assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 2952#L116-2true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~14;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~14; 1906#L1811-28true assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~14 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~14; 116#L1832-28true __utac_acc__Specification3_spec__1_#t~ret3 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~0 := __utac_acc__Specification3_spec__1_#t~ret3;havoc __utac_acc__Specification3_spec__1_#t~ret3; 2877#L120-4true assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0;~expectedDirection~0 := 1; 1079#L221-2true havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_#t~ret90, stopRequestedAtCurrentFloor_#t~ret91, stopRequestedAtCurrentFloor_#t~ret92, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~18, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~18;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret163, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 7079#L849-130true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 8609#L876-130true isExecutiveFloorCalling_#t~ret163 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret163;havoc isExecutiveFloorCalling_#t~ret163;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 4926#L3147-6true stopRequestedAtCurrentFloor_#t~ret89 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~18 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 296#L2531-2true assume 0 != stopRequestedAtCurrentFloor_~tmp~18;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 7931#L1794-13true stopRequestedAtCurrentFloor_#t~ret90 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret90;havoc stopRequestedAtCurrentFloor_#t~ret90; 237#L2535-2true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 604#L2548-2true timeShift_#t~ret105 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret105;havoc timeShift_#t~ret105; 1300#L2684-2true assume !(0 != timeShift_~tmp___9~3); 6509#L2775-6true assume !(1 == ~doorState~0); 6512#L2775-8true stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~14, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~6;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~14;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~6;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret163, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 7058#L849-133true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 8586#L876-133true isExecutiveFloorCalling_#t~ret163 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret163;havoc isExecutiveFloorCalling_#t~ret163;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 4899#L3147-7true stopRequestedInDirection_#t~ret80 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~6 := stopRequestedInDirection_#t~ret80;havoc stopRequestedInDirection_#t~ret80; 4067#L2386-4true assume 0 != stopRequestedInDirection_~tmp___0~6;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 7906#L1794-16true stopRequestedInDirection_#t~ret81 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~14 := stopRequestedInDirection_#t~ret81;havoc stopRequestedInDirection_#t~ret81;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~6 := (if stopRequestedInDirection_~tmp~14 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~21 := (if stopRequestedInDirection_~__cil_tmp8~6 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 2191#L2399-4true timeShift_#t~ret112 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 7403#L2783-2true assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret83, continueInDirection_~dir, continueInDirection_~tmp~15;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~15;~currentHeading~0 := continueInDirection_~dir; 4848#L2443-6true assume !(1 == ~currentHeading~0); 5761#L2453-18true assume !(0 == ~currentFloorID~0); 5779#L2453-20true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 5381#L2459-17true havoc __utac_acc__Specification3_spec__2_#t~ret13, __utac_acc__Specification3_spec__2_#t~ret14, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 37#L246-2true assume !(-1 == ~expectedDirection~0); 603#L258-2true assume !(1 == ~expectedDirection~0); 586#L259-2true havoc bobCall_#t~ret165, bobCall_~tmp~22;havoc bobCall_~tmp~22;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~9;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~9; 493#L1473-1true assume 0 == getOrigin_~person;getOrigin_~retValue_acc~9 := 4;getOrigin_#res := getOrigin_~retValue_acc~9; 3291#L1498-1true bobCall_#t~ret165 := getOrigin_#res;bobCall_~tmp~22 := bobCall_#t~ret165;havoc bobCall_#t~ret165;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~22;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 524#L1120-1true assume 0 == initPersonOnFloor_~floor; 354#L1121-2true assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 8701#L1228-3true callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 7867#L912-2true assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 1250#L924-5true havoc cleanup_#t~ret171, cleanup_#t~ret172, cleanup_~i~3, cleanup_~tmp~28, cleanup_~tmp___0~13, cleanup_~__cil_tmp4~3;havoc cleanup_~i~3;havoc cleanup_~tmp~28;havoc cleanup_~tmp___0~13;havoc cleanup_~__cil_tmp4~3;havoc timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_~tmp~20, timeShift_~tmp___0~11, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~20;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_#t~ret3, __utac_acc__Specification3_spec__1_#t~ret4, __utac_acc__Specification3_spec__1_#t~ret5, __utac_acc__Specification3_spec__1_#t~ret6, __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_#t~ret12, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 7917#L1794-18true __utac_acc__Specification3_spec__1_#t~ret1 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~15;havoc getCurrentHeading_~retValue_acc~15;getCurrentHeading_~retValue_acc~15 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~15; 3478#L1846-9true __utac_acc__Specification3_spec__1_#t~ret2 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret2;havoc __utac_acc__Specification3_spec__1_#t~ret2; 2042#L115-3true assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 8326#L177-3true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~14;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~14; 1848#L1811-47true assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~14 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~14; 59#L1832-47true __utac_acc__Specification3_spec__1_#t~ret8 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret8;havoc __utac_acc__Specification3_spec__1_#t~ret8; 8246#L181-6true assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 1077#L221-3true havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_#t~ret90, stopRequestedAtCurrentFloor_#t~ret91, stopRequestedAtCurrentFloor_#t~ret92, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~18, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~18;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret163, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 5339#L849-195true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 8296#L876-195true isExecutiveFloorCalling_#t~ret163 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret163;havoc isExecutiveFloorCalling_#t~ret163;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 4896#L3147-9true stopRequestedAtCurrentFloor_#t~ret89 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~18 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 304#L2531-3true assume 0 != stopRequestedAtCurrentFloor_~tmp~18;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 7916#L1794-19true stopRequestedAtCurrentFloor_#t~ret90 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret90;havoc stopRequestedAtCurrentFloor_#t~ret90; 223#L2535-3true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 608#L2548-3true timeShift_#t~ret105 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret105;havoc timeShift_#t~ret105; 1287#L2684-3true assume !(0 != timeShift_~tmp___9~3); 6494#L2775-9true assume !(1 == ~doorState~0); 6500#L2775-11true stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~14, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~6;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~14;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~6;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret163, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 5347#L849-198true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 8299#L876-198true isExecutiveFloorCalling_#t~ret163 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret163;havoc isExecutiveFloorCalling_#t~ret163;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 4914#L3147-10true stopRequestedInDirection_#t~ret80 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~6 := stopRequestedInDirection_#t~ret80;havoc stopRequestedInDirection_#t~ret80; 4073#L2386-6true assume 0 != stopRequestedInDirection_~tmp___0~6;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 7897#L1794-22true stopRequestedInDirection_#t~ret81 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~14 := stopRequestedInDirection_#t~ret81;havoc stopRequestedInDirection_#t~ret81;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~6 := (if stopRequestedInDirection_~tmp~14 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~21 := (if stopRequestedInDirection_~__cil_tmp8~6 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 2177#L2399-6true timeShift_#t~ret112 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 7405#L2783-3true assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret83, continueInDirection_~dir, continueInDirection_~tmp~15;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~15;~currentHeading~0 := continueInDirection_~dir; 4801#L2443-9true assume !(1 == ~currentHeading~0); 5753#L2453-27true assume !(0 == ~currentFloorID~0); 5712#L2453-29true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 5366#L2459-23true havoc __utac_acc__Specification3_spec__2_#t~ret13, __utac_acc__Specification3_spec__2_#t~ret14, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 35#L246-3true assume !(-1 == ~expectedDirection~0); 601#L258-3true assume !(1 == ~expectedDirection~0); 585#L259-3true cleanup_~i~3 := 0; 6490#L3304-2true [2018-12-09 11:34:11,556 INFO L796 eck$LassoCheckResult]: Loop: 6490#L3304-2true assume !false; 6592#L3305true cleanup_~__cil_tmp4~3 := ~cleanupTimeShifts~0 - 1; 6441#L3308true assume cleanup_~i~3 < cleanup_~__cil_tmp4~3;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~11;havoc isBlocked_~retValue_acc~11;isBlocked_~retValue_acc~11 := 0;isBlocked_#res := isBlocked_~retValue_acc~11; 7863#L1621true cleanup_#t~ret171 := isBlocked_#res;cleanup_~tmp___0~13 := cleanup_#t~ret171;havoc cleanup_#t~ret171; 7313#L3312true assume 1 != cleanup_~tmp___0~13; 7314#L3312-1true havoc isIdle_#res;havoc isIdle_#t~ret64, isIdle_~retValue_acc~18, isIdle_~tmp~11;havoc isIdle_~retValue_acc~18;havoc isIdle_~tmp~11;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret59, anyStopRequested_#t~ret60, anyStopRequested_#t~ret61, anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_~retValue_acc~17, anyStopRequested_~tmp~10, anyStopRequested_~tmp___0~4, anyStopRequested_~tmp___1~3, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~1;havoc anyStopRequested_~retValue_acc~17;havoc anyStopRequested_~tmp~10;havoc anyStopRequested_~tmp___0~4;havoc anyStopRequested_~tmp___1~3;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~1;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 4855#L849-260true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 8184#L876-260true anyStopRequested_#t~ret59 := isFloorCalling_#res;anyStopRequested_~tmp___3~1 := anyStopRequested_#t~ret59;havoc anyStopRequested_#t~ret59; 7406#L1902true assume 0 != anyStopRequested_~tmp___3~1;anyStopRequested_~retValue_acc~17 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~17; 8021#L1966true isIdle_#t~ret64 := anyStopRequested_#res;isIdle_~tmp~11 := isIdle_#t~ret64;havoc isIdle_#t~ret64;isIdle_~retValue_acc~18 := (if 0 == isIdle_~tmp~11 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~18; 1311#L1979true cleanup_#t~ret172 := isIdle_#res;cleanup_~tmp~28 := cleanup_#t~ret172;havoc cleanup_#t~ret172; 4843#L3324true assume !(0 != cleanup_~tmp~28);havoc timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_~tmp~20, timeShift_~tmp___0~11, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~20;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_#t~ret3, __utac_acc__Specification3_spec__1_#t~ret4, __utac_acc__Specification3_spec__1_#t~ret5, __utac_acc__Specification3_spec__1_#t~ret6, __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_#t~ret12, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 7900#L1794-24true __utac_acc__Specification3_spec__1_#t~ret1 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~15;havoc getCurrentHeading_~retValue_acc~15;getCurrentHeading_~retValue_acc~15 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~15; 3481#L1846-12true __utac_acc__Specification3_spec__1_#t~ret2 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret2;havoc __utac_acc__Specification3_spec__1_#t~ret2; 2039#L115-4true assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 2946#L116-4true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~14;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~14; 1838#L1811-56true assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~14 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~14; 896#L1832-56true __utac_acc__Specification3_spec__1_#t~ret3 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~0 := __utac_acc__Specification3_spec__1_#t~ret3;havoc __utac_acc__Specification3_spec__1_#t~ret3; 2869#L120-8true assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0;~expectedDirection~0 := 1; 1099#L221-4true havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_#t~ret90, stopRequestedAtCurrentFloor_#t~ret91, stopRequestedAtCurrentFloor_#t~ret92, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~18, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~18;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret163, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 4829#L849-265true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 8167#L876-265true isExecutiveFloorCalling_#t~ret163 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret163;havoc isExecutiveFloorCalling_#t~ret163;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 4911#L3147-12true stopRequestedAtCurrentFloor_#t~ret89 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~18 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 300#L2531-4true assume 0 != stopRequestedAtCurrentFloor_~tmp~18;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 7878#L1794-25true stopRequestedAtCurrentFloor_#t~ret90 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret90;havoc stopRequestedAtCurrentFloor_#t~ret90; 222#L2535-4true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 609#L2548-4true timeShift_#t~ret105 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret105;havoc timeShift_#t~ret105; 1290#L2684-4true assume !(0 != timeShift_~tmp___9~3); 6497#L2775-12true assume 1 == ~doorState~0;~doorState~0 := 0; 6486#L2775-14true stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~14, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~6;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~14;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~6;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret163, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 4846#L849-268true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 8176#L876-268true isExecutiveFloorCalling_#t~ret163 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret163;havoc isExecutiveFloorCalling_#t~ret163;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 4882#L3147-13true stopRequestedInDirection_#t~ret80 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~6 := stopRequestedInDirection_#t~ret80;havoc stopRequestedInDirection_#t~ret80; 4074#L2386-8true assume 0 != stopRequestedInDirection_~tmp___0~6;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 7883#L1794-28true stopRequestedInDirection_#t~ret81 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~14 := stopRequestedInDirection_#t~ret81;havoc stopRequestedInDirection_#t~ret81;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~6 := (if stopRequestedInDirection_~tmp~14 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~21 := (if stopRequestedInDirection_~__cil_tmp8~6 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 2180#L2399-8true timeShift_#t~ret112 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 7404#L2783-4true assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret83, continueInDirection_~dir, continueInDirection_~tmp~15;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~15;~currentHeading~0 := continueInDirection_~dir; 4813#L2443-12true assume !(1 == ~currentHeading~0); 5691#L2453-36true assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 5695#L2453-38true assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 5459#L2459-29true havoc __utac_acc__Specification3_spec__2_#t~ret13, __utac_acc__Specification3_spec__2_#t~ret14, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 34#L246-4true assume !(-1 == ~expectedDirection~0); 595#L258-4true assume !(1 == ~expectedDirection~0); 584#L259-4true cleanup_~i~3 := 1 + cleanup_~i~3; 6490#L3304-2true [2018-12-09 11:34:11,565 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-12-09 11:34:11,565 INFO L82 PathProgramCache]: Analyzing trace with hash -1377477376, now seen corresponding path program 1 times [2018-12-09 11:34:11,567 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-09 11:34:11,567 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-09 11:34:11,597 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-09 11:34:11,597 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-12-09 11:34:11,597 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-09 11:34:11,655 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-09 11:34:11,763 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-09 11:34:11,764 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-09 11:34:11,765 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-12-09 11:34:11,767 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-12-09 11:34:11,767 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-12-09 11:34:11,767 INFO L82 PathProgramCache]: Analyzing trace with hash 1652895332, now seen corresponding path program 1 times [2018-12-09 11:34:11,767 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-09 11:34:11,767 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-09 11:34:11,768 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-09 11:34:11,768 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-12-09 11:34:11,768 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-09 11:34:11,776 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-09 11:34:11,798 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-09 11:34:11,798 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-09 11:34:11,799 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-12-09 11:34:11,800 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-12-09 11:34:11,808 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-12-09 11:34:11,809 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-12-09 11:34:11,810 INFO L87 Difference]: Start difference. First operand 9243 states. Second operand 5 states. [2018-12-09 11:34:12,557 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-12-09 11:34:12,557 INFO L93 Difference]: Finished difference Result 18533 states and 34743 transitions. [2018-12-09 11:34:12,557 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2018-12-09 11:34:12,559 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 18533 states and 34743 transitions. [2018-12-09 11:34:12,635 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 3860 [2018-12-09 11:34:12,694 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 18533 states to 18469 states and 34666 transitions. [2018-12-09 11:34:12,695 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 18469 [2018-12-09 11:34:12,710 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 18469 [2018-12-09 11:34:12,710 INFO L73 IsDeterministic]: Start isDeterministic. Operand 18469 states and 34666 transitions. [2018-12-09 11:34:12,732 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-12-09 11:34:12,732 INFO L705 BuchiCegarLoop]: Abstraction has 18469 states and 34666 transitions. [2018-12-09 11:34:12,759 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 18469 states and 34666 transitions. [2018-12-09 11:34:12,941 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 18469 to 17939. [2018-12-09 11:34:12,941 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 17939 states. [2018-12-09 11:34:12,959 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 17939 states to 17939 states and 33767 transitions. [2018-12-09 11:34:12,960 INFO L728 BuchiCegarLoop]: Abstraction has 17939 states and 33767 transitions. [2018-12-09 11:34:12,960 INFO L608 BuchiCegarLoop]: Abstraction has 17939 states and 33767 transitions. [2018-12-09 11:34:12,960 INFO L442 BuchiCegarLoop]: ======== Iteration 2============ [2018-12-09 11:34:12,960 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 17939 states and 33767 transitions. [2018-12-09 11:34:12,996 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 3636 [2018-12-09 11:34:12,997 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-12-09 11:34:12,997 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-12-09 11:34:13,000 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-09 11:34:13,000 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-09 11:34:13,001 INFO L794 eck$LassoCheckResult]: Stem: 30888#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0;call #t~string33.base, #t~string33.offset := #Ultimate.alloc(30);call #t~string34.base, #t~string34.offset := #Ultimate.alloc(9);call #t~string35.base, #t~string35.offset := #Ultimate.alloc(21);call #t~string36.base, #t~string36.offset := #Ultimate.alloc(30);call #t~string37.base, #t~string37.offset := #Ultimate.alloc(9);call #t~string38.base, #t~string38.offset := #Ultimate.alloc(21);call #t~string42.base, #t~string42.offset := #Ultimate.alloc(30);call #t~string43.base, #t~string43.offset := #Ultimate.alloc(9);call #t~string44.base, #t~string44.offset := #Ultimate.alloc(25);call #t~string45.base, #t~string45.offset := #Ultimate.alloc(30);call #t~string46.base, #t~string46.offset := #Ultimate.alloc(9);call #t~string47.base, #t~string47.offset := #Ultimate.alloc(25);~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string116.base, #t~string116.offset := #Ultimate.alloc(10);call #t~string118.base, #t~string118.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string118.base, #t~string118.offset, 1);call write~init~int(95, #t~string118.base, 1 + #t~string118.offset, 1);call write~init~int(93, #t~string118.base, 2 + #t~string118.offset, 1);call write~init~int(0, #t~string118.base, 3 + #t~string118.offset, 1);call #t~string120.base, #t~string120.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string120.base, #t~string120.offset, 1);call write~init~int(93, #t~string120.base, 1 + #t~string120.offset, 1);call write~init~int(32, #t~string120.base, 2 + #t~string120.offset, 1);call write~init~int(0, #t~string120.base, 3 + #t~string120.offset, 1);call #t~string122.base, #t~string122.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string122.base, #t~string122.offset, 1);call write~init~int(97, #t~string122.base, 1 + #t~string122.offset, 1);call write~init~int(116, #t~string122.base, 2 + #t~string122.offset, 1);call write~init~int(32, #t~string122.base, 3 + #t~string122.offset, 1);call write~init~int(0, #t~string122.base, 4 + #t~string122.offset, 1);call #t~string124.base, #t~string124.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string124.base, #t~string124.offset, 1);call write~init~int(105, #t~string124.base, 1 + #t~string124.offset, 1);call write~init~int(0, #t~string124.base, 2 + #t~string124.offset, 1);call #t~string126.base, #t~string126.offset := #Ultimate.alloc(10);call #t~string128.base, #t~string128.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string128.base, #t~string128.offset, 1);call write~init~int(112, #t~string128.base, 1 + #t~string128.offset, 1);call write~init~int(0, #t~string128.base, 2 + #t~string128.offset, 1);call #t~string130.base, #t~string130.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string130.base, #t~string130.offset, 1);call write~init~int(111, #t~string130.base, 1 + #t~string130.offset, 1);call write~init~int(119, #t~string130.base, 2 + #t~string130.offset, 1);call write~init~int(110, #t~string130.base, 3 + #t~string130.offset, 1);call write~init~int(0, #t~string130.base, 4 + #t~string130.offset, 1);call #t~string132.base, #t~string132.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string132.base, #t~string132.offset, 1);call write~init~int(73, #t~string132.base, 1 + #t~string132.offset, 1);call write~init~int(76, #t~string132.base, 2 + #t~string132.offset, 1);call write~init~int(95, #t~string132.base, 3 + #t~string132.offset, 1);call write~init~int(112, #t~string132.base, 4 + #t~string132.offset, 1);call write~init~int(58, #t~string132.base, 5 + #t~string132.offset, 1);call write~init~int(0, #t~string132.base, 6 + #t~string132.offset, 1);call #t~string134.base, #t~string134.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string134.base, #t~string134.offset, 1);call write~init~int(37, #t~string134.base, 1 + #t~string134.offset, 1);call write~init~int(105, #t~string134.base, 2 + #t~string134.offset, 1);call write~init~int(0, #t~string134.base, 3 + #t~string134.offset, 1);call #t~string136.base, #t~string136.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string136.base, #t~string136.offset, 1);call write~init~int(37, #t~string136.base, 1 + #t~string136.offset, 1);call write~init~int(105, #t~string136.base, 2 + #t~string136.offset, 1);call write~init~int(0, #t~string136.base, 3 + #t~string136.offset, 1);call #t~string138.base, #t~string138.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string138.base, #t~string138.offset, 1);call write~init~int(37, #t~string138.base, 1 + #t~string138.offset, 1);call write~init~int(105, #t~string138.base, 2 + #t~string138.offset, 1);call write~init~int(0, #t~string138.base, 3 + #t~string138.offset, 1);call #t~string140.base, #t~string140.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string140.base, #t~string140.offset, 1);call write~init~int(37, #t~string140.base, 1 + #t~string140.offset, 1);call write~init~int(105, #t~string140.base, 2 + #t~string140.offset, 1);call write~init~int(0, #t~string140.base, 3 + #t~string140.offset, 1);call #t~string142.base, #t~string142.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string142.base, #t~string142.offset, 1);call write~init~int(37, #t~string142.base, 1 + #t~string142.offset, 1);call write~init~int(105, #t~string142.base, 2 + #t~string142.offset, 1);call write~init~int(0, #t~string142.base, 3 + #t~string142.offset, 1);call #t~string144.base, #t~string144.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string144.base, #t~string144.offset, 1);call write~init~int(70, #t~string144.base, 1 + #t~string144.offset, 1);call write~init~int(95, #t~string144.base, 2 + #t~string144.offset, 1);call write~init~int(112, #t~string144.base, 3 + #t~string144.offset, 1);call write~init~int(58, #t~string144.base, 4 + #t~string144.offset, 1);call write~init~int(0, #t~string144.base, 5 + #t~string144.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string147.base, #t~string147.offset, 1);call write~init~int(37, #t~string147.base, 1 + #t~string147.offset, 1);call write~init~int(105, #t~string147.base, 2 + #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 3 + #t~string147.offset, 1);call #t~string150.base, #t~string150.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string150.base, #t~string150.offset, 1);call write~init~int(37, #t~string150.base, 1 + #t~string150.offset, 1);call write~init~int(105, #t~string150.base, 2 + #t~string150.offset, 1);call write~init~int(0, #t~string150.base, 3 + #t~string150.offset, 1);call #t~string153.base, #t~string153.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string153.base, #t~string153.offset, 1);call write~init~int(37, #t~string153.base, 1 + #t~string153.offset, 1);call write~init~int(105, #t~string153.base, 2 + #t~string153.offset, 1);call write~init~int(0, #t~string153.base, 3 + #t~string153.offset, 1);call #t~string156.base, #t~string156.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string156.base, #t~string156.offset, 1);call write~init~int(37, #t~string156.base, 1 + #t~string156.offset, 1);call write~init~int(105, #t~string156.base, 2 + #t~string156.offset, 1);call write~init~int(0, #t~string156.base, 3 + #t~string156.offset, 1);call #t~string159.base, #t~string159.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string159.base, #t~string159.offset, 1);call write~init~int(37, #t~string159.base, 1 + #t~string159.offset, 1);call write~init~int(105, #t~string159.base, 2 + #t~string159.offset, 1);call write~init~int(0, #t~string159.base, 3 + #t~string159.offset, 1);call #t~string161.base, #t~string161.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string161.base, #t~string161.offset, 1);call write~init~int(0, #t~string161.base, 1 + #t~string161.offset, 1); 30889#L-1 havoc main_#res;havoc main_#t~ret177, main_~retValue_acc~31, main_~tmp~30;havoc main_~retValue_acc~31;havoc main_~tmp~30; 29144#L73 havoc valid_product_#res;havoc valid_product_~retValue_acc~1;havoc valid_product_~retValue_acc~1;valid_product_~retValue_acc~1 := 1;valid_product_#res := valid_product_~retValue_acc~1; 28792#L81 main_#t~ret177 := valid_product_#res;main_~tmp~30 := main_#t~ret177;havoc main_#t~ret177; 28793#L3495 assume 0 != main_~tmp~30; 31199#L3472 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 31200#L842 havoc bobCall_#t~ret165, bobCall_~tmp~22;havoc bobCall_~tmp~22;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~9;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~9; 28723#L1473 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~9 := 4;getOrigin_#res := getOrigin_~retValue_acc~9; 27985#L1498 bobCall_#t~ret165 := getOrigin_#res;bobCall_~tmp~22 := bobCall_#t~ret165;havoc bobCall_#t~ret165;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~22;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 28759#L1120 assume 0 == initPersonOnFloor_~floor; 28518#L1121 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 27901#L1228-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 34930#L912 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 29672#L924-2 havoc timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_~tmp~20, timeShift_~tmp___0~11, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~20;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_#t~ret3, __utac_acc__Specification3_spec__1_#t~ret4, __utac_acc__Specification3_spec__1_#t~ret5, __utac_acc__Specification3_spec__1_#t~ret6, __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_#t~ret12, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 29674#L1794 __utac_acc__Specification3_spec__1_#t~ret1 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~15;havoc getCurrentHeading_~retValue_acc~15;getCurrentHeading_~retValue_acc~15 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~15; 32331#L1846 __utac_acc__Specification3_spec__1_#t~ret2 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret2;havoc __utac_acc__Specification3_spec__1_#t~ret2; 30544#L115 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 30546#L177 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~14;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~14; 29321#L1811-5 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~14 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~14; 27801#L1832-5 __utac_acc__Specification3_spec__1_#t~ret8 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret8;havoc __utac_acc__Specification3_spec__1_#t~ret8; 27802#L181 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 29382#L221 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_#t~ret90, stopRequestedAtCurrentFloor_#t~ret91, stopRequestedAtCurrentFloor_#t~ret92, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~18, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~18;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret163, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 40919#L849 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 40915#L876 isExecutiveFloorCalling_#t~ret163 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret163;havoc isExecutiveFloorCalling_#t~ret163;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 40914#L3147 stopRequestedAtCurrentFloor_#t~ret89 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~18 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 40908#L2531 assume 0 != stopRequestedAtCurrentFloor_~tmp~18;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 40906#L1794-1 stopRequestedAtCurrentFloor_#t~ret90 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret90;havoc stopRequestedAtCurrentFloor_#t~ret90; 40897#L2535 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 40894#L2548 timeShift_#t~ret105 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret105;havoc timeShift_#t~ret105; 40892#L2684 assume !(0 != timeShift_~tmp___9~3); 40891#L2775 assume !(1 == ~doorState~0); 40890#L2775-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~14, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~6;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~14;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~6;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret163, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 40888#L849-3 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 40884#L876-3 isExecutiveFloorCalling_#t~ret163 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret163;havoc isExecutiveFloorCalling_#t~ret163;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 40883#L3147-1 stopRequestedInDirection_#t~ret80 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~6 := stopRequestedInDirection_#t~ret80;havoc stopRequestedInDirection_#t~ret80; 40882#L2386 assume 0 != stopRequestedInDirection_~tmp___0~6;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 40794#L1794-4 stopRequestedInDirection_#t~ret81 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~14 := stopRequestedInDirection_#t~ret81;havoc stopRequestedInDirection_#t~ret81;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~6 := (if stopRequestedInDirection_~tmp~14 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~21 := (if stopRequestedInDirection_~__cil_tmp8~6 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 40793#L2399 timeShift_#t~ret112 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 40791#L2783 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret83, continueInDirection_~dir, continueInDirection_~tmp~15;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~15;~currentHeading~0 := continueInDirection_~dir; 40792#L2443 assume !(1 == ~currentHeading~0); 35432#L2453 assume !(0 == ~currentFloorID~0); 34176#L2453-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 34907#L2459-5 havoc __utac_acc__Specification3_spec__2_#t~ret13, __utac_acc__Specification3_spec__2_#t~ret14, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 27923#L246 assume !(-1 == ~expectedDirection~0); 27924#L258 assume !(1 == ~expectedDirection~0); 28860#L259 havoc timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_~tmp~20, timeShift_~tmp___0~11, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~20;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_#t~ret3, __utac_acc__Specification3_spec__1_#t~ret4, __utac_acc__Specification3_spec__1_#t~ret5, __utac_acc__Specification3_spec__1_#t~ret6, __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_#t~ret12, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 28861#L1794-6 __utac_acc__Specification3_spec__1_#t~ret1 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~15;havoc getCurrentHeading_~retValue_acc~15;getCurrentHeading_~retValue_acc~15 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~15; 37355#L1846-3 __utac_acc__Specification3_spec__1_#t~ret2 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret2;havoc __utac_acc__Specification3_spec__1_#t~ret2; 37351#L115-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 36910#L177-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~14;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~14; 29287#L1811-19 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~14 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~14; 28116#L1832-19 __utac_acc__Specification3_spec__1_#t~ret8 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret8;havoc __utac_acc__Specification3_spec__1_#t~ret8; 28117#L181-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 29367#L221-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_#t~ret90, stopRequestedAtCurrentFloor_#t~ret91, stopRequestedAtCurrentFloor_#t~ret92, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~18, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~18;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret163, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 29454#L849-65 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 32902#L876-65 isExecutiveFloorCalling_#t~ret163 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret163;havoc isExecutiveFloorCalling_#t~ret163;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 40700#L3147-3 stopRequestedAtCurrentFloor_#t~ret89 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~18 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 40697#L2531-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~18;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 40693#L1794-7 stopRequestedAtCurrentFloor_#t~ret90 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret90;havoc stopRequestedAtCurrentFloor_#t~ret90; 40688#L2535-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 40686#L2548-1 timeShift_#t~ret105 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret105;havoc timeShift_#t~ret105; 40685#L2684-1 assume !(0 != timeShift_~tmp___9~3); 40684#L2775-3 assume !(1 == ~doorState~0); 40683#L2775-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~14, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~6;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~14;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~6;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret163, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 40044#L849-68 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 40034#L876-68 isExecutiveFloorCalling_#t~ret163 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret163;havoc isExecutiveFloorCalling_#t~ret163;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 40032#L3147-4 stopRequestedInDirection_#t~ret80 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~6 := stopRequestedInDirection_#t~ret80;havoc stopRequestedInDirection_#t~ret80; 39906#L2386-2 assume 0 != stopRequestedInDirection_~tmp___0~6;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 39900#L1794-10 stopRequestedInDirection_#t~ret81 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~14 := stopRequestedInDirection_#t~ret81;havoc stopRequestedInDirection_#t~ret81;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~6 := (if stopRequestedInDirection_~tmp~14 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~21 := (if stopRequestedInDirection_~__cil_tmp8~6 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 39896#L2399-2 timeShift_#t~ret112 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 39893#L2783-1 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret83, continueInDirection_~dir, continueInDirection_~tmp~15;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~15;~currentHeading~0 := continueInDirection_~dir; 39891#L2443-3 assume !(1 == ~currentHeading~0); 35306#L2453-9 assume !(0 == ~currentFloorID~0); 34054#L2453-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 34902#L2459-11 havoc __utac_acc__Specification3_spec__2_#t~ret13, __utac_acc__Specification3_spec__2_#t~ret14, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 27917#L246-1 assume !(-1 == ~expectedDirection~0); 27918#L258-1 assume !(1 == ~expectedDirection~0); 28857#L259-1 havoc timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_~tmp~20, timeShift_~tmp___0~11, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~20;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_#t~ret3, __utac_acc__Specification3_spec__1_#t~ret4, __utac_acc__Specification3_spec__1_#t~ret5, __utac_acc__Specification3_spec__1_#t~ret6, __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_#t~ret12, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 28858#L1794-12 __utac_acc__Specification3_spec__1_#t~ret1 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~15;havoc getCurrentHeading_~retValue_acc~15;getCurrentHeading_~retValue_acc~15 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~15; 37354#L1846-6 __utac_acc__Specification3_spec__1_#t~ret2 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret2;havoc __utac_acc__Specification3_spec__1_#t~ret2; 37350#L115-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 36908#L177-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~14;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~14; 30328#L1811-33 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~14 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~14; 28051#L1832-33 __utac_acc__Specification3_spec__1_#t~ret8 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret8;havoc __utac_acc__Specification3_spec__1_#t~ret8; 28052#L181-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 29362#L221-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_#t~ret90, stopRequestedAtCurrentFloor_#t~ret91, stopRequestedAtCurrentFloor_#t~ret92, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~18, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~18;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret163, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 39613#L849-130 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 39604#L876-130 isExecutiveFloorCalling_#t~ret163 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret163;havoc isExecutiveFloorCalling_#t~ret163;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 39602#L3147-6 stopRequestedAtCurrentFloor_#t~ret89 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~18 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 39597#L2531-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~18;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 39594#L1794-13 stopRequestedAtCurrentFloor_#t~ret90 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret90;havoc stopRequestedAtCurrentFloor_#t~ret90; 39592#L2535-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 39589#L2548-2 timeShift_#t~ret105 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret105;havoc timeShift_#t~ret105; 39588#L2684-2 assume !(0 != timeShift_~tmp___9~3); 39587#L2775-6 assume !(1 == ~doorState~0); 39586#L2775-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~14, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~6;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~14;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~6;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret163, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 39425#L849-133 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 39418#L876-133 isExecutiveFloorCalling_#t~ret163 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret163;havoc isExecutiveFloorCalling_#t~ret163;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 39416#L3147-7 stopRequestedInDirection_#t~ret80 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~6 := stopRequestedInDirection_#t~ret80;havoc stopRequestedInDirection_#t~ret80; 39371#L2386-4 assume 0 != stopRequestedInDirection_~tmp___0~6;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 39290#L1794-16 stopRequestedInDirection_#t~ret81 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~14 := stopRequestedInDirection_#t~ret81;havoc stopRequestedInDirection_#t~ret81;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~6 := (if stopRequestedInDirection_~tmp~14 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~21 := (if stopRequestedInDirection_~__cil_tmp8~6 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 39288#L2399-4 timeShift_#t~ret112 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 39286#L2783-2 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret83, continueInDirection_~dir, continueInDirection_~tmp~15;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~15;~currentHeading~0 := continueInDirection_~dir; 39287#L2443-6 assume !(1 == ~currentHeading~0); 35264#L2453-18 assume !(0 == ~currentFloorID~0); 33307#L2453-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 34895#L2459-17 havoc __utac_acc__Specification3_spec__2_#t~ret13, __utac_acc__Specification3_spec__2_#t~ret14, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 27890#L246-2 assume !(-1 == ~expectedDirection~0); 27891#L258-2 assume !(1 == ~expectedDirection~0); 28856#L259-2 havoc bobCall_#t~ret165, bobCall_~tmp~22;havoc bobCall_~tmp~22;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~9;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~9; 28724#L1473-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~9 := 4;getOrigin_#res := getOrigin_~retValue_acc~9; 27993#L1498-1 bobCall_#t~ret165 := getOrigin_#res;bobCall_~tmp~22 := bobCall_#t~ret165;havoc bobCall_#t~ret165;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~22;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 43259#L1120-1 assume 0 == initPersonOnFloor_~floor; 43227#L1121-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 37100#L1228-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 36670#L912-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 29666#L924-5 havoc cleanup_#t~ret171, cleanup_#t~ret172, cleanup_~i~3, cleanup_~tmp~28, cleanup_~tmp___0~13, cleanup_~__cil_tmp4~3;havoc cleanup_~i~3;havoc cleanup_~tmp~28;havoc cleanup_~tmp___0~13;havoc cleanup_~__cil_tmp4~3;havoc timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_~tmp~20, timeShift_~tmp___0~11, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~20;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_#t~ret3, __utac_acc__Specification3_spec__1_#t~ret4, __utac_acc__Specification3_spec__1_#t~ret5, __utac_acc__Specification3_spec__1_#t~ret6, __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_#t~ret12, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 29668#L1794-18 __utac_acc__Specification3_spec__1_#t~ret1 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~15;havoc getCurrentHeading_~retValue_acc~15;getCurrentHeading_~retValue_acc~15 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~15; 37357#L1846-9 __utac_acc__Specification3_spec__1_#t~ret2 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret2;havoc __utac_acc__Specification3_spec__1_#t~ret2; 37353#L115-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 36912#L177-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~14;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~14; 30295#L1811-47 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~14 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~14; 27956#L1832-47 __utac_acc__Specification3_spec__1_#t~ret8 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret8;havoc __utac_acc__Specification3_spec__1_#t~ret8; 27957#L181-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 29373#L221-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_#t~ret90, stopRequestedAtCurrentFloor_#t~ret91, stopRequestedAtCurrentFloor_#t~ret92, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~18, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~18;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret163, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 38304#L849-195 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 38300#L876-195 isExecutiveFloorCalling_#t~ret163 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret163;havoc isExecutiveFloorCalling_#t~ret163;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 38299#L3147-9 stopRequestedAtCurrentFloor_#t~ret89 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~18 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 38297#L2531-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~18;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 38298#L1794-19 stopRequestedAtCurrentFloor_#t~ret90 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret90;havoc stopRequestedAtCurrentFloor_#t~ret90; 38272#L2535-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 38269#L2548-3 timeShift_#t~ret105 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret105;havoc timeShift_#t~ret105; 38268#L2684-3 assume !(0 != timeShift_~tmp___9~3); 38267#L2775-9 assume !(1 == ~doorState~0); 38266#L2775-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~14, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~6;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~14;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~6;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret163, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 38264#L849-198 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 38260#L876-198 isExecutiveFloorCalling_#t~ret163 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret163;havoc isExecutiveFloorCalling_#t~ret163;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 38259#L3147-10 stopRequestedInDirection_#t~ret80 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~6 := stopRequestedInDirection_#t~ret80;havoc stopRequestedInDirection_#t~ret80; 38258#L2386-6 assume 0 != stopRequestedInDirection_~tmp___0~6;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 38063#L1794-22 stopRequestedInDirection_#t~ret81 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~14 := stopRequestedInDirection_#t~ret81;havoc stopRequestedInDirection_#t~ret81;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~6 := (if stopRequestedInDirection_~tmp~14 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~21 := (if stopRequestedInDirection_~__cil_tmp8~6 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 38061#L2399-6 timeShift_#t~ret112 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 38059#L2783-3 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret83, continueInDirection_~dir, continueInDirection_~tmp~15;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~15;~currentHeading~0 := continueInDirection_~dir; 38060#L2443-9 assume !(1 == ~currentHeading~0); 35257#L2453-27 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 33174#L2453-29 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 35213#L2459-23 havoc __utac_acc__Specification3_spec__2_#t~ret13, __utac_acc__Specification3_spec__2_#t~ret14, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 44923#L246-3 assume !(-1 == ~expectedDirection~0); 28874#L258-3 assume !(1 == ~expectedDirection~0); 28855#L259-3 cleanup_~i~3 := 0; 28854#L3304-2 [2018-12-09 11:34:13,001 INFO L796 eck$LassoCheckResult]: Loop: 28854#L3304-2 assume !false; 35597#L3305 cleanup_~__cil_tmp4~3 := ~cleanupTimeShifts~0 - 1; 42447#L3308 assume cleanup_~i~3 < cleanup_~__cil_tmp4~3;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~11;havoc isBlocked_~retValue_acc~11;isBlocked_~retValue_acc~11 := 0;isBlocked_#res := isBlocked_~retValue_acc~11; 42446#L1621 cleanup_#t~ret171 := isBlocked_#res;cleanup_~tmp___0~13 := cleanup_#t~ret171;havoc cleanup_#t~ret171; 42441#L3312 assume 1 != cleanup_~tmp___0~13; 42439#L3312-1 havoc isIdle_#res;havoc isIdle_#t~ret64, isIdle_~retValue_acc~18, isIdle_~tmp~11;havoc isIdle_~retValue_acc~18;havoc isIdle_~tmp~11;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret59, anyStopRequested_#t~ret60, anyStopRequested_#t~ret61, anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_~retValue_acc~17, anyStopRequested_~tmp~10, anyStopRequested_~tmp___0~4, anyStopRequested_~tmp___1~3, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~1;havoc anyStopRequested_~retValue_acc~17;havoc anyStopRequested_~tmp~10;havoc anyStopRequested_~tmp___0~4;havoc anyStopRequested_~tmp___1~3;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~1;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 42436#L849-260 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 42433#L876-260 anyStopRequested_#t~ret59 := isFloorCalling_#res;anyStopRequested_~tmp___3~1 := anyStopRequested_#t~ret59;havoc anyStopRequested_#t~ret59; 42406#L1902 assume 0 != anyStopRequested_~tmp___3~1;anyStopRequested_~retValue_acc~17 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~17; 42397#L1966 isIdle_#t~ret64 := anyStopRequested_#res;isIdle_~tmp~11 := isIdle_#t~ret64;havoc isIdle_#t~ret64;isIdle_~retValue_acc~18 := (if 0 == isIdle_~tmp~11 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~18; 42393#L1979 cleanup_#t~ret172 := isIdle_#res;cleanup_~tmp~28 := cleanup_#t~ret172;havoc cleanup_#t~ret172; 41612#L3324 assume !(0 != cleanup_~tmp~28);havoc timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_~tmp~20, timeShift_~tmp___0~11, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~20;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_#t~ret3, __utac_acc__Specification3_spec__1_#t~ret4, __utac_acc__Specification3_spec__1_#t~ret5, __utac_acc__Specification3_spec__1_#t~ret6, __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_#t~ret12, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 36688#L1794-24 __utac_acc__Specification3_spec__1_#t~ret1 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~15;havoc getCurrentHeading_~retValue_acc~15;getCurrentHeading_~retValue_acc~15 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~15; 32346#L1846-12 __utac_acc__Specification3_spec__1_#t~ret2 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret2;havoc __utac_acc__Specification3_spec__1_#t~ret2; 30524#L115-4 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 30525#L116-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~14;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~14; 30289#L1811-56 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~14 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~14; 28182#L1832-56 __utac_acc__Specification3_spec__1_#t~ret3 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~0 := __utac_acc__Specification3_spec__1_#t~ret3;havoc __utac_acc__Specification3_spec__1_#t~ret3; 29165#L120-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0;~expectedDirection~0 := 1; 29477#L221-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_#t~ret90, stopRequestedAtCurrentFloor_#t~ret91, stopRequestedAtCurrentFloor_#t~ret92, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~18, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~18;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret163, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 29478#L849-265 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 34107#L876-265 isExecutiveFloorCalling_#t~ret163 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret163;havoc isExecutiveFloorCalling_#t~ret163;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 34487#L3147-12 stopRequestedAtCurrentFloor_#t~ret89 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~18 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 28430#L2531-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~18;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 28432#L1794-25 stopRequestedAtCurrentFloor_#t~ret90 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret90;havoc stopRequestedAtCurrentFloor_#t~ret90; 28251#L2535-4 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 28252#L2548-4 timeShift_#t~ret105 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret105;havoc timeShift_#t~ret105; 28883#L2684-4 assume !(0 != timeShift_~tmp___9~3); 29704#L2775-12 assume 1 == ~doorState~0;~doorState~0 := 0; 35593#L2775-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~14, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~6;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~14;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~6;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret163, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 34427#L849-268 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 34025#L876-268 isExecutiveFloorCalling_#t~ret163 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret163;havoc isExecutiveFloorCalling_#t~ret163;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 34462#L3147-13 stopRequestedInDirection_#t~ret80 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~6 := stopRequestedInDirection_#t~ret80;havoc stopRequestedInDirection_#t~ret80; 32772#L2386-8 assume 0 != stopRequestedInDirection_~tmp___0~6;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 32773#L1794-28 stopRequestedInDirection_#t~ret81 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~14 := stopRequestedInDirection_#t~ret81;havoc stopRequestedInDirection_#t~ret81;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~6 := (if stopRequestedInDirection_~tmp~14 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~21 := (if stopRequestedInDirection_~__cil_tmp8~6 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 28944#L2399-8 timeShift_#t~ret112 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 30807#L2783-4 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret83, continueInDirection_~dir, continueInDirection_~tmp~15;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~15;~currentHeading~0 := continueInDirection_~dir; 34392#L2443-12 assume 1 == ~currentHeading~0;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~7;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~7;isTopFloor_~retValue_acc~7 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~7; 34393#L1423-39 continueInDirection_#t~ret83 := isTopFloor_#res;continueInDirection_~tmp~15 := continueInDirection_#t~ret83;havoc continueInDirection_#t~ret83; 33121#L2447-36 assume 0 != continueInDirection_~tmp~15;~currentHeading~0 := 0; 33122#L2453-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 35197#L2459-29 havoc __utac_acc__Specification3_spec__2_#t~ret13, __utac_acc__Specification3_spec__2_#t~ret14, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 43265#L246-4 assume !(-1 == ~expectedDirection~0); 28867#L258-4 assume !(1 == ~expectedDirection~0); 28853#L259-4 cleanup_~i~3 := 1 + cleanup_~i~3; 28854#L3304-2 [2018-12-09 11:34:13,008 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-12-09 11:34:13,008 INFO L82 PathProgramCache]: Analyzing trace with hash 437044170, now seen corresponding path program 1 times [2018-12-09 11:34:13,008 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-09 11:34:13,008 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-09 11:34:13,009 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-09 11:34:13,009 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-12-09 11:34:13,009 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-09 11:34:13,022 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-09 11:34:13,070 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-09 11:34:13,070 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-09 11:34:13,070 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-12-09 11:34:13,071 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-12-09 11:34:13,071 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-12-09 11:34:13,071 INFO L82 PathProgramCache]: Analyzing trace with hash 347216907, now seen corresponding path program 1 times [2018-12-09 11:34:13,071 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-09 11:34:13,071 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-09 11:34:13,072 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-09 11:34:13,072 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-12-09 11:34:13,072 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-09 11:34:13,079 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-09 11:34:13,104 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-09 11:34:13,104 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-09 11:34:13,104 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-12-09 11:34:13,104 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-12-09 11:34:13,105 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-12-09 11:34:13,105 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-12-09 11:34:13,105 INFO L87 Difference]: Start difference. First operand 17939 states and 33767 transitions. cyclomatic complexity: 15829 Second operand 5 states. [2018-12-09 11:34:13,645 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-12-09 11:34:13,645 INFO L93 Difference]: Finished difference Result 25101 states and 47199 transitions. [2018-12-09 11:34:13,645 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2018-12-09 11:34:13,645 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 25101 states and 47199 transitions. [2018-12-09 11:34:13,712 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 5445 [2018-12-09 11:34:13,770 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 25101 states to 25091 states and 47189 transitions. [2018-12-09 11:34:13,770 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 25091 [2018-12-09 11:34:13,783 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 25091 [2018-12-09 11:34:13,783 INFO L73 IsDeterministic]: Start isDeterministic. Operand 25091 states and 47189 transitions. [2018-12-09 11:34:13,803 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-12-09 11:34:13,803 INFO L705 BuchiCegarLoop]: Abstraction has 25091 states and 47189 transitions. [2018-12-09 11:34:13,821 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 25091 states and 47189 transitions. [2018-12-09 11:34:13,982 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 25091 to 25071. [2018-12-09 11:34:13,982 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 25071 states. [2018-12-09 11:34:14,007 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 25071 states to 25071 states and 47165 transitions. [2018-12-09 11:34:14,008 INFO L728 BuchiCegarLoop]: Abstraction has 25071 states and 47165 transitions. [2018-12-09 11:34:14,008 INFO L608 BuchiCegarLoop]: Abstraction has 25071 states and 47165 transitions. [2018-12-09 11:34:14,008 INFO L442 BuchiCegarLoop]: ======== Iteration 3============ [2018-12-09 11:34:14,008 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 25071 states and 47165 transitions. [2018-12-09 11:34:14,051 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 5443 [2018-12-09 11:34:14,052 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-12-09 11:34:14,052 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-12-09 11:34:14,055 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-09 11:34:14,056 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-09 11:34:14,056 INFO L794 eck$LassoCheckResult]: Stem: 73948#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0;call #t~string33.base, #t~string33.offset := #Ultimate.alloc(30);call #t~string34.base, #t~string34.offset := #Ultimate.alloc(9);call #t~string35.base, #t~string35.offset := #Ultimate.alloc(21);call #t~string36.base, #t~string36.offset := #Ultimate.alloc(30);call #t~string37.base, #t~string37.offset := #Ultimate.alloc(9);call #t~string38.base, #t~string38.offset := #Ultimate.alloc(21);call #t~string42.base, #t~string42.offset := #Ultimate.alloc(30);call #t~string43.base, #t~string43.offset := #Ultimate.alloc(9);call #t~string44.base, #t~string44.offset := #Ultimate.alloc(25);call #t~string45.base, #t~string45.offset := #Ultimate.alloc(30);call #t~string46.base, #t~string46.offset := #Ultimate.alloc(9);call #t~string47.base, #t~string47.offset := #Ultimate.alloc(25);~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string116.base, #t~string116.offset := #Ultimate.alloc(10);call #t~string118.base, #t~string118.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string118.base, #t~string118.offset, 1);call write~init~int(95, #t~string118.base, 1 + #t~string118.offset, 1);call write~init~int(93, #t~string118.base, 2 + #t~string118.offset, 1);call write~init~int(0, #t~string118.base, 3 + #t~string118.offset, 1);call #t~string120.base, #t~string120.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string120.base, #t~string120.offset, 1);call write~init~int(93, #t~string120.base, 1 + #t~string120.offset, 1);call write~init~int(32, #t~string120.base, 2 + #t~string120.offset, 1);call write~init~int(0, #t~string120.base, 3 + #t~string120.offset, 1);call #t~string122.base, #t~string122.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string122.base, #t~string122.offset, 1);call write~init~int(97, #t~string122.base, 1 + #t~string122.offset, 1);call write~init~int(116, #t~string122.base, 2 + #t~string122.offset, 1);call write~init~int(32, #t~string122.base, 3 + #t~string122.offset, 1);call write~init~int(0, #t~string122.base, 4 + #t~string122.offset, 1);call #t~string124.base, #t~string124.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string124.base, #t~string124.offset, 1);call write~init~int(105, #t~string124.base, 1 + #t~string124.offset, 1);call write~init~int(0, #t~string124.base, 2 + #t~string124.offset, 1);call #t~string126.base, #t~string126.offset := #Ultimate.alloc(10);call #t~string128.base, #t~string128.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string128.base, #t~string128.offset, 1);call write~init~int(112, #t~string128.base, 1 + #t~string128.offset, 1);call write~init~int(0, #t~string128.base, 2 + #t~string128.offset, 1);call #t~string130.base, #t~string130.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string130.base, #t~string130.offset, 1);call write~init~int(111, #t~string130.base, 1 + #t~string130.offset, 1);call write~init~int(119, #t~string130.base, 2 + #t~string130.offset, 1);call write~init~int(110, #t~string130.base, 3 + #t~string130.offset, 1);call write~init~int(0, #t~string130.base, 4 + #t~string130.offset, 1);call #t~string132.base, #t~string132.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string132.base, #t~string132.offset, 1);call write~init~int(73, #t~string132.base, 1 + #t~string132.offset, 1);call write~init~int(76, #t~string132.base, 2 + #t~string132.offset, 1);call write~init~int(95, #t~string132.base, 3 + #t~string132.offset, 1);call write~init~int(112, #t~string132.base, 4 + #t~string132.offset, 1);call write~init~int(58, #t~string132.base, 5 + #t~string132.offset, 1);call write~init~int(0, #t~string132.base, 6 + #t~string132.offset, 1);call #t~string134.base, #t~string134.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string134.base, #t~string134.offset, 1);call write~init~int(37, #t~string134.base, 1 + #t~string134.offset, 1);call write~init~int(105, #t~string134.base, 2 + #t~string134.offset, 1);call write~init~int(0, #t~string134.base, 3 + #t~string134.offset, 1);call #t~string136.base, #t~string136.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string136.base, #t~string136.offset, 1);call write~init~int(37, #t~string136.base, 1 + #t~string136.offset, 1);call write~init~int(105, #t~string136.base, 2 + #t~string136.offset, 1);call write~init~int(0, #t~string136.base, 3 + #t~string136.offset, 1);call #t~string138.base, #t~string138.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string138.base, #t~string138.offset, 1);call write~init~int(37, #t~string138.base, 1 + #t~string138.offset, 1);call write~init~int(105, #t~string138.base, 2 + #t~string138.offset, 1);call write~init~int(0, #t~string138.base, 3 + #t~string138.offset, 1);call #t~string140.base, #t~string140.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string140.base, #t~string140.offset, 1);call write~init~int(37, #t~string140.base, 1 + #t~string140.offset, 1);call write~init~int(105, #t~string140.base, 2 + #t~string140.offset, 1);call write~init~int(0, #t~string140.base, 3 + #t~string140.offset, 1);call #t~string142.base, #t~string142.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string142.base, #t~string142.offset, 1);call write~init~int(37, #t~string142.base, 1 + #t~string142.offset, 1);call write~init~int(105, #t~string142.base, 2 + #t~string142.offset, 1);call write~init~int(0, #t~string142.base, 3 + #t~string142.offset, 1);call #t~string144.base, #t~string144.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string144.base, #t~string144.offset, 1);call write~init~int(70, #t~string144.base, 1 + #t~string144.offset, 1);call write~init~int(95, #t~string144.base, 2 + #t~string144.offset, 1);call write~init~int(112, #t~string144.base, 3 + #t~string144.offset, 1);call write~init~int(58, #t~string144.base, 4 + #t~string144.offset, 1);call write~init~int(0, #t~string144.base, 5 + #t~string144.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string147.base, #t~string147.offset, 1);call write~init~int(37, #t~string147.base, 1 + #t~string147.offset, 1);call write~init~int(105, #t~string147.base, 2 + #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 3 + #t~string147.offset, 1);call #t~string150.base, #t~string150.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string150.base, #t~string150.offset, 1);call write~init~int(37, #t~string150.base, 1 + #t~string150.offset, 1);call write~init~int(105, #t~string150.base, 2 + #t~string150.offset, 1);call write~init~int(0, #t~string150.base, 3 + #t~string150.offset, 1);call #t~string153.base, #t~string153.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string153.base, #t~string153.offset, 1);call write~init~int(37, #t~string153.base, 1 + #t~string153.offset, 1);call write~init~int(105, #t~string153.base, 2 + #t~string153.offset, 1);call write~init~int(0, #t~string153.base, 3 + #t~string153.offset, 1);call #t~string156.base, #t~string156.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string156.base, #t~string156.offset, 1);call write~init~int(37, #t~string156.base, 1 + #t~string156.offset, 1);call write~init~int(105, #t~string156.base, 2 + #t~string156.offset, 1);call write~init~int(0, #t~string156.base, 3 + #t~string156.offset, 1);call #t~string159.base, #t~string159.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string159.base, #t~string159.offset, 1);call write~init~int(37, #t~string159.base, 1 + #t~string159.offset, 1);call write~init~int(105, #t~string159.base, 2 + #t~string159.offset, 1);call write~init~int(0, #t~string159.base, 3 + #t~string159.offset, 1);call #t~string161.base, #t~string161.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string161.base, #t~string161.offset, 1);call write~init~int(0, #t~string161.base, 1 + #t~string161.offset, 1); 73949#L-1 havoc main_#res;havoc main_#t~ret177, main_~retValue_acc~31, main_~tmp~30;havoc main_~retValue_acc~31;havoc main_~tmp~30; 72215#L73 havoc valid_product_#res;havoc valid_product_~retValue_acc~1;havoc valid_product_~retValue_acc~1;valid_product_~retValue_acc~1 := 1;valid_product_#res := valid_product_~retValue_acc~1; 71853#L81 main_#t~ret177 := valid_product_#res;main_~tmp~30 := main_#t~ret177;havoc main_#t~ret177; 71854#L3495 assume 0 != main_~tmp~30; 74265#L3472 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 74266#L842 havoc bobCall_#t~ret165, bobCall_~tmp~22;havoc bobCall_~tmp~22;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~9;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~9; 71785#L1473 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~9 := 4;getOrigin_#res := getOrigin_~retValue_acc~9; 71043#L1498 bobCall_#t~ret165 := getOrigin_#res;bobCall_~tmp~22 := bobCall_#t~ret165;havoc bobCall_#t~ret165;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~22;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 71820#L1120 assume 0 == initPersonOnFloor_~floor; 71580#L1121 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 70959#L1228-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 77982#L912 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 72743#L924-2 havoc timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_~tmp~20, timeShift_~tmp___0~11, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~20;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_#t~ret3, __utac_acc__Specification3_spec__1_#t~ret4, __utac_acc__Specification3_spec__1_#t~ret5, __utac_acc__Specification3_spec__1_#t~ret6, __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_#t~ret12, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 72745#L1794 __utac_acc__Specification3_spec__1_#t~ret1 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~15;havoc getCurrentHeading_~retValue_acc~15;getCurrentHeading_~retValue_acc~15 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~15; 75379#L1846 __utac_acc__Specification3_spec__1_#t~ret2 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret2;havoc __utac_acc__Specification3_spec__1_#t~ret2; 73602#L115 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 73604#L177 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~14;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~14; 72395#L1811-5 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~14 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~14; 70862#L1832-5 __utac_acc__Specification3_spec__1_#t~ret8 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret8;havoc __utac_acc__Specification3_spec__1_#t~ret8; 70863#L181 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 72456#L221 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_#t~ret90, stopRequestedAtCurrentFloor_#t~ret91, stopRequestedAtCurrentFloor_#t~ret92, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~18, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~18;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret163, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 83611#L849 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 83602#L876 isExecutiveFloorCalling_#t~ret163 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret163;havoc isExecutiveFloorCalling_#t~ret163;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 83600#L3147 stopRequestedAtCurrentFloor_#t~ret89 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~18 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 83598#L2531 assume 0 != stopRequestedAtCurrentFloor_~tmp~18;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 83594#L1794-1 stopRequestedAtCurrentFloor_#t~ret90 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret90;havoc stopRequestedAtCurrentFloor_#t~ret90; 83589#L2535 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 83588#L2548 timeShift_#t~ret105 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret105;havoc timeShift_#t~ret105; 83581#L2684 assume !(0 != timeShift_~tmp___9~3); 78821#L2775 assume !(1 == ~doorState~0); 78822#L2775-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~14, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~6;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~14;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~6;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret163, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 78824#L849-3 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 77321#L876-3 isExecutiveFloorCalling_#t~ret163 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret163;havoc isExecutiveFloorCalling_#t~ret163;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 77544#L3147-1 stopRequestedInDirection_#t~ret80 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~6 := stopRequestedInDirection_#t~ret80;havoc stopRequestedInDirection_#t~ret80; 75818#L2386 assume 0 != stopRequestedInDirection_~tmp___0~6;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 75819#L1794-4 stopRequestedInDirection_#t~ret81 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~14 := stopRequestedInDirection_#t~ret81;havoc stopRequestedInDirection_#t~ret81;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~6 := (if stopRequestedInDirection_~tmp~14 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~21 := (if stopRequestedInDirection_~__cil_tmp8~6 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 72005#L2399 timeShift_#t~ret112 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 73890#L2783 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret83, continueInDirection_~dir, continueInDirection_~tmp~15;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~15;~currentHeading~0 := continueInDirection_~dir; 77466#L2443 assume !(1 == ~currentHeading~0); 77467#L2453 assume !(0 == ~currentFloorID~0); 78474#L2453-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 80922#L2459-5 havoc __utac_acc__Specification3_spec__2_#t~ret13, __utac_acc__Specification3_spec__2_#t~ret14, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 80883#L246 assume !(-1 == ~expectedDirection~0); 80880#L258 assume !(1 == ~expectedDirection~0); 80877#L259 havoc timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_~tmp~20, timeShift_~tmp___0~11, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~20;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_#t~ret3, __utac_acc__Specification3_spec__1_#t~ret4, __utac_acc__Specification3_spec__1_#t~ret5, __utac_acc__Specification3_spec__1_#t~ret6, __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_#t~ret12, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 80875#L1794-6 __utac_acc__Specification3_spec__1_#t~ret1 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~15;havoc getCurrentHeading_~retValue_acc~15;getCurrentHeading_~retValue_acc~15 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~15; 80873#L1846-3 __utac_acc__Specification3_spec__1_#t~ret2 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret2;havoc __utac_acc__Specification3_spec__1_#t~ret2; 80417#L115-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 79964#L177-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~14;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~14; 72361#L1811-19 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~14 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~14; 71174#L1832-19 __utac_acc__Specification3_spec__1_#t~ret8 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret8;havoc __utac_acc__Specification3_spec__1_#t~ret8; 71175#L181-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 72441#L221-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_#t~ret90, stopRequestedAtCurrentFloor_#t~ret91, stopRequestedAtCurrentFloor_#t~ret92, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~18, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~18;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret163, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 72528#L849-65 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 89306#L876-65 isExecutiveFloorCalling_#t~ret163 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret163;havoc isExecutiveFloorCalling_#t~ret163;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 89301#L3147-3 stopRequestedAtCurrentFloor_#t~ret89 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~18 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 89298#L2531-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~18;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 89294#L1794-7 stopRequestedAtCurrentFloor_#t~ret90 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret90;havoc stopRequestedAtCurrentFloor_#t~ret90; 89289#L2535-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 89287#L2548-1 timeShift_#t~ret105 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret105;havoc timeShift_#t~ret105; 89286#L2684-1 assume !(0 != timeShift_~tmp___9~3); 78652#L2775-3 assume !(1 == ~doorState~0); 78653#L2775-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~14, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~6;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~14;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~6;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret163, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 78656#L849-68 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 75838#L876-68 isExecutiveFloorCalling_#t~ret163 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret163;havoc isExecutiveFloorCalling_#t~ret163;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 80177#L3147-4 stopRequestedInDirection_#t~ret80 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~6 := stopRequestedInDirection_#t~ret80;havoc stopRequestedInDirection_#t~ret80; 90148#L2386-2 assume 0 != stopRequestedInDirection_~tmp___0~6;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 90147#L1794-10 stopRequestedInDirection_#t~ret81 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~14 := stopRequestedInDirection_#t~ret81;havoc stopRequestedInDirection_#t~ret81;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~6 := (if stopRequestedInDirection_~tmp~14 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~21 := (if stopRequestedInDirection_~__cil_tmp8~6 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 88533#L2399-2 timeShift_#t~ret112 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 88532#L2783-1 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret83, continueInDirection_~dir, continueInDirection_~tmp~15;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~15;~currentHeading~0 := continueInDirection_~dir; 77441#L2443-3 assume !(1 == ~currentHeading~0); 77442#L2453-9 assume !(0 == ~currentFloorID~0); 77084#L2453-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 83447#L2459-11 havoc __utac_acc__Specification3_spec__2_#t~ret13, __utac_acc__Specification3_spec__2_#t~ret14, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 83444#L246-1 assume !(-1 == ~expectedDirection~0); 83438#L258-1 assume !(1 == ~expectedDirection~0); 83435#L259-1 havoc timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_~tmp~20, timeShift_~tmp___0~11, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~20;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_#t~ret3, __utac_acc__Specification3_spec__1_#t~ret4, __utac_acc__Specification3_spec__1_#t~ret5, __utac_acc__Specification3_spec__1_#t~ret6, __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_#t~ret12, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 83433#L1794-12 __utac_acc__Specification3_spec__1_#t~ret1 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~15;havoc getCurrentHeading_~retValue_acc~15;getCurrentHeading_~retValue_acc~15 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~15; 80843#L1846-6 __utac_acc__Specification3_spec__1_#t~ret2 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret2;havoc __utac_acc__Specification3_spec__1_#t~ret2; 80416#L115-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 79962#L177-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~14;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~14; 73393#L1811-33 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~14 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~14; 71109#L1832-33 __utac_acc__Specification3_spec__1_#t~ret8 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret8;havoc __utac_acc__Specification3_spec__1_#t~ret8; 71110#L181-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 72436#L221-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_#t~ret90, stopRequestedAtCurrentFloor_#t~ret91, stopRequestedAtCurrentFloor_#t~ret92, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~18, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~18;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret163, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 85846#L849-130 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 85837#L876-130 isExecutiveFloorCalling_#t~ret163 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret163;havoc isExecutiveFloorCalling_#t~ret163;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 85835#L3147-6 stopRequestedAtCurrentFloor_#t~ret89 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~18 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 85830#L2531-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~18;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 85827#L1794-13 stopRequestedAtCurrentFloor_#t~ret90 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret90;havoc stopRequestedAtCurrentFloor_#t~ret90; 85825#L2535-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 85817#L2548-2 timeShift_#t~ret105 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret105;havoc timeShift_#t~ret105; 85814#L2684-2 assume !(0 != timeShift_~tmp___9~3); 85815#L2775-6 assume !(1 == ~doorState~0); 88030#L2775-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~14, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~6;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~14;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~6;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret163, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 88022#L849-133 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 88019#L876-133 isExecutiveFloorCalling_#t~ret163 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret163;havoc isExecutiveFloorCalling_#t~ret163;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 88017#L3147-7 stopRequestedInDirection_#t~ret80 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~6 := stopRequestedInDirection_#t~ret80;havoc stopRequestedInDirection_#t~ret80; 87971#L2386-4 assume 0 != stopRequestedInDirection_~tmp___0~6;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 87966#L1794-16 stopRequestedInDirection_#t~ret81 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~14 := stopRequestedInDirection_#t~ret81;havoc stopRequestedInDirection_#t~ret81;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~6 := (if stopRequestedInDirection_~tmp~14 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~21 := (if stopRequestedInDirection_~__cil_tmp8~6 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 87965#L2399-4 timeShift_#t~ret112 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 87964#L2783-2 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret83, continueInDirection_~dir, continueInDirection_~tmp~15;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~15;~currentHeading~0 := continueInDirection_~dir; 77456#L2443-6 assume !(1 == ~currentHeading~0); 77457#L2453-18 assume !(0 == ~currentFloorID~0); 76348#L2453-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 82461#L2459-17 havoc __utac_acc__Specification3_spec__2_#t~ret13, __utac_acc__Specification3_spec__2_#t~ret14, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 82459#L246-2 assume !(-1 == ~expectedDirection~0); 82456#L258-2 assume !(1 == ~expectedDirection~0); 82454#L259-2 havoc bobCall_#t~ret165, bobCall_~tmp~22;havoc bobCall_~tmp~22;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~9;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~9; 82450#L1473-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~9 := 4;getOrigin_#res := getOrigin_~retValue_acc~9; 82447#L1498-1 bobCall_#t~ret165 := getOrigin_#res;bobCall_~tmp~22 := bobCall_#t~ret165;havoc bobCall_#t~ret165;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~22;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 82446#L1120-1 assume 0 == initPersonOnFloor_~floor; 82413#L1121-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 82408#L1228-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 80991#L912-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 80986#L924-5 havoc cleanup_#t~ret171, cleanup_#t~ret172, cleanup_~i~3, cleanup_~tmp~28, cleanup_~tmp___0~13, cleanup_~__cil_tmp4~3;havoc cleanup_~i~3;havoc cleanup_~tmp~28;havoc cleanup_~tmp___0~13;havoc cleanup_~__cil_tmp4~3;havoc timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_~tmp~20, timeShift_~tmp___0~11, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~20;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_#t~ret3, __utac_acc__Specification3_spec__1_#t~ret4, __utac_acc__Specification3_spec__1_#t~ret5, __utac_acc__Specification3_spec__1_#t~ret6, __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_#t~ret12, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 80984#L1794-18 __utac_acc__Specification3_spec__1_#t~ret1 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~15;havoc getCurrentHeading_~retValue_acc~15;getCurrentHeading_~retValue_acc~15 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~15; 80981#L1846-9 __utac_acc__Specification3_spec__1_#t~ret2 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret2;havoc __utac_acc__Specification3_spec__1_#t~ret2; 80419#L115-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 79966#L177-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~14;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~14; 73361#L1811-47 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~14 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~14; 71014#L1832-47 __utac_acc__Specification3_spec__1_#t~ret8 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret8;havoc __utac_acc__Specification3_spec__1_#t~ret8; 71015#L181-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 72447#L221-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_#t~ret90, stopRequestedAtCurrentFloor_#t~ret91, stopRequestedAtCurrentFloor_#t~ret92, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~18, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~18;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret163, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 77909#L849-195 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 75887#L876-195 isExecutiveFloorCalling_#t~ret163 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret163;havoc isExecutiveFloorCalling_#t~ret163;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 77504#L3147-9 stopRequestedAtCurrentFloor_#t~ret89 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~18 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 71500#L2531-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~18;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 71502#L1794-19 stopRequestedAtCurrentFloor_#t~ret90 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret90;havoc stopRequestedAtCurrentFloor_#t~ret90; 71312#L2535-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 71313#L2548-3 timeShift_#t~ret105 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret105;havoc timeShift_#t~ret105; 71941#L2684-3 assume !(0 != timeShift_~tmp___9~3); 72771#L2775-9 assume !(1 == ~doorState~0); 78643#L2775-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~14, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~6;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~14;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~6;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret163, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 77917#L849-198 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 76795#L876-198 isExecutiveFloorCalling_#t~ret163 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret163;havoc isExecutiveFloorCalling_#t~ret163;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 77520#L3147-10 stopRequestedInDirection_#t~ret80 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~6 := stopRequestedInDirection_#t~ret80;havoc stopRequestedInDirection_#t~ret80; 75812#L2386-6 assume 0 != stopRequestedInDirection_~tmp___0~6;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 75813#L1794-22 stopRequestedInDirection_#t~ret81 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~14 := stopRequestedInDirection_#t~ret81;havoc stopRequestedInDirection_#t~ret81;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~6 := (if stopRequestedInDirection_~tmp~14 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~21 := (if stopRequestedInDirection_~__cil_tmp8~6 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 72001#L2399-6 timeShift_#t~ret112 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 73862#L2783-3 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret83, continueInDirection_~dir, continueInDirection_~tmp~15;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~15;~currentHeading~0 := continueInDirection_~dir; 77407#L2443-9 assume !(1 == ~currentHeading~0); 77408#L2453-27 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 76218#L2453-29 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 92039#L2459-23 havoc __utac_acc__Specification3_spec__2_#t~ret13, __utac_acc__Specification3_spec__2_#t~ret14, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 92031#L246-3 assume !(-1 == ~expectedDirection~0); 92025#L258-3 assume !(1 == ~expectedDirection~0); 92019#L259-3 cleanup_~i~3 := 0; 92018#L3304-2 [2018-12-09 11:34:14,056 INFO L796 eck$LassoCheckResult]: Loop: 92018#L3304-2 assume !false; 92017#L3305 cleanup_~__cil_tmp4~3 := ~cleanupTimeShifts~0 - 1; 92016#L3308 assume cleanup_~i~3 < cleanup_~__cil_tmp4~3;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~11;havoc isBlocked_~retValue_acc~11;isBlocked_~retValue_acc~11 := 0;isBlocked_#res := isBlocked_~retValue_acc~11; 82095#L1621 cleanup_#t~ret171 := isBlocked_#res;cleanup_~tmp___0~13 := cleanup_#t~ret171;havoc cleanup_#t~ret171; 82094#L3312 assume 1 != cleanup_~tmp___0~13; 82093#L3312-1 havoc isIdle_#res;havoc isIdle_#t~ret64, isIdle_~retValue_acc~18, isIdle_~tmp~11;havoc isIdle_~retValue_acc~18;havoc isIdle_~tmp~11;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret59, anyStopRequested_#t~ret60, anyStopRequested_#t~ret61, anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_~retValue_acc~17, anyStopRequested_~tmp~10, anyStopRequested_~tmp___0~4, anyStopRequested_~tmp___1~3, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~1;havoc anyStopRequested_~retValue_acc~17;havoc anyStopRequested_~tmp~10;havoc anyStopRequested_~tmp___0~4;havoc anyStopRequested_~tmp___1~3;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~1;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 82090#L849-260 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 82087#L876-260 anyStopRequested_#t~ret59 := isFloorCalling_#res;anyStopRequested_~tmp___3~1 := anyStopRequested_#t~ret59;havoc anyStopRequested_#t~ret59; 82053#L1902 assume 0 != anyStopRequested_~tmp___3~1;anyStopRequested_~retValue_acc~17 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~17; 82052#L1966 isIdle_#t~ret64 := anyStopRequested_#res;isIdle_~tmp~11 := isIdle_#t~ret64;havoc isIdle_#t~ret64;isIdle_~retValue_acc~18 := (if 0 == isIdle_~tmp~11 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~18; 82047#L1979 cleanup_#t~ret172 := isIdle_#res;cleanup_~tmp~28 := cleanup_#t~ret172;havoc cleanup_#t~ret172; 82045#L3324 assume !(0 != cleanup_~tmp~28);havoc timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_~tmp~20, timeShift_~tmp___0~11, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~20;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_#t~ret3, __utac_acc__Specification3_spec__1_#t~ret4, __utac_acc__Specification3_spec__1_#t~ret5, __utac_acc__Specification3_spec__1_#t~ret6, __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_#t~ret12, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 82044#L1794-24 __utac_acc__Specification3_spec__1_#t~ret1 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~15;havoc getCurrentHeading_~retValue_acc~15;getCurrentHeading_~retValue_acc~15 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~15; 82043#L1846-12 __utac_acc__Specification3_spec__1_#t~ret2 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret2;havoc __utac_acc__Specification3_spec__1_#t~ret2; 82042#L115-4 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 82041#L116-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~14;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~14; 82037#L1811-56 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~14 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~14; 82033#L1832-56 __utac_acc__Specification3_spec__1_#t~ret3 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~0 := __utac_acc__Specification3_spec__1_#t~ret3;havoc __utac_acc__Specification3_spec__1_#t~ret3; 82029#L120-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0;~expectedDirection~0 := 1; 82021#L221-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_#t~ret90, stopRequestedAtCurrentFloor_#t~ret91, stopRequestedAtCurrentFloor_#t~ret92, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~18, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~18;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret163, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 82019#L849-265 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 82015#L876-265 isExecutiveFloorCalling_#t~ret163 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret163;havoc isExecutiveFloorCalling_#t~ret163;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 82010#L3147-12 stopRequestedAtCurrentFloor_#t~ret89 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~18 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 82007#L2531-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~18;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 82003#L1794-25 stopRequestedAtCurrentFloor_#t~ret90 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret90;havoc stopRequestedAtCurrentFloor_#t~ret90; 81998#L2535-4 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 81996#L2548-4 timeShift_#t~ret105 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret105;havoc timeShift_#t~ret105; 81994#L2684-4 assume !(0 != timeShift_~tmp___9~3); 81993#L2775-12 assume 1 == ~doorState~0;~doorState~0 := 0; 81990#L2775-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~14, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~6;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~14;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~6;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret163, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 81987#L849-268 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 81939#L876-268 isExecutiveFloorCalling_#t~ret163 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret163;havoc isExecutiveFloorCalling_#t~ret163;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 81935#L3147-13 stopRequestedInDirection_#t~ret80 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~6 := stopRequestedInDirection_#t~ret80;havoc stopRequestedInDirection_#t~ret80; 81933#L2386-8 assume 0 != stopRequestedInDirection_~tmp___0~6;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 80687#L1794-28 stopRequestedInDirection_#t~ret81 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~14 := stopRequestedInDirection_#t~ret81;havoc stopRequestedInDirection_#t~ret81;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~6 := (if stopRequestedInDirection_~tmp~14 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~21 := (if stopRequestedInDirection_~__cil_tmp8~6 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 80681#L2399-8 timeShift_#t~ret112 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 80678#L2783-4 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret83, continueInDirection_~dir, continueInDirection_~tmp~15;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~15;~currentHeading~0 := continueInDirection_~dir; 80421#L2443-12 assume 1 == ~currentHeading~0;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~7;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~7;isTopFloor_~retValue_acc~7 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~7; 80210#L1423-39 continueInDirection_#t~ret83 := isTopFloor_#res;continueInDirection_~tmp~15 := continueInDirection_#t~ret83;havoc continueInDirection_#t~ret83; 76156#L2447-36 assume !(0 != continueInDirection_~tmp~15); 76158#L2453-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 92033#L2459-29 havoc __utac_acc__Specification3_spec__2_#t~ret13, __utac_acc__Specification3_spec__2_#t~ret14, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 92028#L246-4 assume !(-1 == ~expectedDirection~0); 92022#L258-4 assume !(1 == ~expectedDirection~0); 92020#L259-4 cleanup_~i~3 := 1 + cleanup_~i~3; 92018#L3304-2 [2018-12-09 11:34:14,064 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-12-09 11:34:14,064 INFO L82 PathProgramCache]: Analyzing trace with hash 437044170, now seen corresponding path program 2 times [2018-12-09 11:34:14,064 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-09 11:34:14,064 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-09 11:34:14,064 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-09 11:34:14,065 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-12-09 11:34:14,065 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-09 11:34:14,075 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-09 11:34:14,111 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-09 11:34:14,111 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-09 11:34:14,111 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-12-09 11:34:14,112 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-12-09 11:34:14,112 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-12-09 11:34:14,112 INFO L82 PathProgramCache]: Analyzing trace with hash 404475209, now seen corresponding path program 1 times [2018-12-09 11:34:14,112 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-09 11:34:14,112 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-09 11:34:14,112 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-09 11:34:14,113 INFO L101 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2018-12-09 11:34:14,113 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-09 11:34:14,117 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-09 11:34:14,130 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-09 11:34:14,130 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-09 11:34:14,130 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-12-09 11:34:14,131 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-12-09 11:34:14,131 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-12-09 11:34:14,131 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-12-09 11:34:14,131 INFO L87 Difference]: Start difference. First operand 25071 states and 47165 transitions. cyclomatic complexity: 22095 Second operand 3 states. [2018-12-09 11:34:14,372 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-12-09 11:34:14,372 INFO L93 Difference]: Finished difference Result 40868 states and 76885 transitions. [2018-12-09 11:34:14,372 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-12-09 11:34:14,373 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 40868 states and 76885 transitions. [2018-12-09 11:34:14,473 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 9034 [2018-12-09 11:34:14,554 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 40868 states to 40868 states and 76885 transitions. [2018-12-09 11:34:14,555 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 40868 [2018-12-09 11:34:14,577 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 40868 [2018-12-09 11:34:14,577 INFO L73 IsDeterministic]: Start isDeterministic. Operand 40868 states and 76885 transitions. [2018-12-09 11:34:14,600 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-12-09 11:34:14,600 INFO L705 BuchiCegarLoop]: Abstraction has 40868 states and 76885 transitions. [2018-12-09 11:34:14,623 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 40868 states and 76885 transitions. [2018-12-09 11:34:14,889 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 40868 to 40559. [2018-12-09 11:34:14,889 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 40559 states. [2018-12-09 11:34:14,942 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 40559 states to 40559 states and 76333 transitions. [2018-12-09 11:34:14,942 INFO L728 BuchiCegarLoop]: Abstraction has 40559 states and 76333 transitions. [2018-12-09 11:34:14,942 INFO L608 BuchiCegarLoop]: Abstraction has 40559 states and 76333 transitions. [2018-12-09 11:34:14,942 INFO L442 BuchiCegarLoop]: ======== Iteration 4============ [2018-12-09 11:34:14,942 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 40559 states and 76333 transitions. [2018-12-09 11:34:15,038 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 8884 [2018-12-09 11:34:15,038 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-12-09 11:34:15,038 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-12-09 11:34:15,044 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-09 11:34:15,044 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-09 11:34:15,045 INFO L794 eck$LassoCheckResult]: Stem: 139898#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0;call #t~string33.base, #t~string33.offset := #Ultimate.alloc(30);call #t~string34.base, #t~string34.offset := #Ultimate.alloc(9);call #t~string35.base, #t~string35.offset := #Ultimate.alloc(21);call #t~string36.base, #t~string36.offset := #Ultimate.alloc(30);call #t~string37.base, #t~string37.offset := #Ultimate.alloc(9);call #t~string38.base, #t~string38.offset := #Ultimate.alloc(21);call #t~string42.base, #t~string42.offset := #Ultimate.alloc(30);call #t~string43.base, #t~string43.offset := #Ultimate.alloc(9);call #t~string44.base, #t~string44.offset := #Ultimate.alloc(25);call #t~string45.base, #t~string45.offset := #Ultimate.alloc(30);call #t~string46.base, #t~string46.offset := #Ultimate.alloc(9);call #t~string47.base, #t~string47.offset := #Ultimate.alloc(25);~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string116.base, #t~string116.offset := #Ultimate.alloc(10);call #t~string118.base, #t~string118.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string118.base, #t~string118.offset, 1);call write~init~int(95, #t~string118.base, 1 + #t~string118.offset, 1);call write~init~int(93, #t~string118.base, 2 + #t~string118.offset, 1);call write~init~int(0, #t~string118.base, 3 + #t~string118.offset, 1);call #t~string120.base, #t~string120.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string120.base, #t~string120.offset, 1);call write~init~int(93, #t~string120.base, 1 + #t~string120.offset, 1);call write~init~int(32, #t~string120.base, 2 + #t~string120.offset, 1);call write~init~int(0, #t~string120.base, 3 + #t~string120.offset, 1);call #t~string122.base, #t~string122.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string122.base, #t~string122.offset, 1);call write~init~int(97, #t~string122.base, 1 + #t~string122.offset, 1);call write~init~int(116, #t~string122.base, 2 + #t~string122.offset, 1);call write~init~int(32, #t~string122.base, 3 + #t~string122.offset, 1);call write~init~int(0, #t~string122.base, 4 + #t~string122.offset, 1);call #t~string124.base, #t~string124.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string124.base, #t~string124.offset, 1);call write~init~int(105, #t~string124.base, 1 + #t~string124.offset, 1);call write~init~int(0, #t~string124.base, 2 + #t~string124.offset, 1);call #t~string126.base, #t~string126.offset := #Ultimate.alloc(10);call #t~string128.base, #t~string128.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string128.base, #t~string128.offset, 1);call write~init~int(112, #t~string128.base, 1 + #t~string128.offset, 1);call write~init~int(0, #t~string128.base, 2 + #t~string128.offset, 1);call #t~string130.base, #t~string130.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string130.base, #t~string130.offset, 1);call write~init~int(111, #t~string130.base, 1 + #t~string130.offset, 1);call write~init~int(119, #t~string130.base, 2 + #t~string130.offset, 1);call write~init~int(110, #t~string130.base, 3 + #t~string130.offset, 1);call write~init~int(0, #t~string130.base, 4 + #t~string130.offset, 1);call #t~string132.base, #t~string132.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string132.base, #t~string132.offset, 1);call write~init~int(73, #t~string132.base, 1 + #t~string132.offset, 1);call write~init~int(76, #t~string132.base, 2 + #t~string132.offset, 1);call write~init~int(95, #t~string132.base, 3 + #t~string132.offset, 1);call write~init~int(112, #t~string132.base, 4 + #t~string132.offset, 1);call write~init~int(58, #t~string132.base, 5 + #t~string132.offset, 1);call write~init~int(0, #t~string132.base, 6 + #t~string132.offset, 1);call #t~string134.base, #t~string134.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string134.base, #t~string134.offset, 1);call write~init~int(37, #t~string134.base, 1 + #t~string134.offset, 1);call write~init~int(105, #t~string134.base, 2 + #t~string134.offset, 1);call write~init~int(0, #t~string134.base, 3 + #t~string134.offset, 1);call #t~string136.base, #t~string136.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string136.base, #t~string136.offset, 1);call write~init~int(37, #t~string136.base, 1 + #t~string136.offset, 1);call write~init~int(105, #t~string136.base, 2 + #t~string136.offset, 1);call write~init~int(0, #t~string136.base, 3 + #t~string136.offset, 1);call #t~string138.base, #t~string138.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string138.base, #t~string138.offset, 1);call write~init~int(37, #t~string138.base, 1 + #t~string138.offset, 1);call write~init~int(105, #t~string138.base, 2 + #t~string138.offset, 1);call write~init~int(0, #t~string138.base, 3 + #t~string138.offset, 1);call #t~string140.base, #t~string140.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string140.base, #t~string140.offset, 1);call write~init~int(37, #t~string140.base, 1 + #t~string140.offset, 1);call write~init~int(105, #t~string140.base, 2 + #t~string140.offset, 1);call write~init~int(0, #t~string140.base, 3 + #t~string140.offset, 1);call #t~string142.base, #t~string142.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string142.base, #t~string142.offset, 1);call write~init~int(37, #t~string142.base, 1 + #t~string142.offset, 1);call write~init~int(105, #t~string142.base, 2 + #t~string142.offset, 1);call write~init~int(0, #t~string142.base, 3 + #t~string142.offset, 1);call #t~string144.base, #t~string144.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string144.base, #t~string144.offset, 1);call write~init~int(70, #t~string144.base, 1 + #t~string144.offset, 1);call write~init~int(95, #t~string144.base, 2 + #t~string144.offset, 1);call write~init~int(112, #t~string144.base, 3 + #t~string144.offset, 1);call write~init~int(58, #t~string144.base, 4 + #t~string144.offset, 1);call write~init~int(0, #t~string144.base, 5 + #t~string144.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string147.base, #t~string147.offset, 1);call write~init~int(37, #t~string147.base, 1 + #t~string147.offset, 1);call write~init~int(105, #t~string147.base, 2 + #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 3 + #t~string147.offset, 1);call #t~string150.base, #t~string150.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string150.base, #t~string150.offset, 1);call write~init~int(37, #t~string150.base, 1 + #t~string150.offset, 1);call write~init~int(105, #t~string150.base, 2 + #t~string150.offset, 1);call write~init~int(0, #t~string150.base, 3 + #t~string150.offset, 1);call #t~string153.base, #t~string153.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string153.base, #t~string153.offset, 1);call write~init~int(37, #t~string153.base, 1 + #t~string153.offset, 1);call write~init~int(105, #t~string153.base, 2 + #t~string153.offset, 1);call write~init~int(0, #t~string153.base, 3 + #t~string153.offset, 1);call #t~string156.base, #t~string156.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string156.base, #t~string156.offset, 1);call write~init~int(37, #t~string156.base, 1 + #t~string156.offset, 1);call write~init~int(105, #t~string156.base, 2 + #t~string156.offset, 1);call write~init~int(0, #t~string156.base, 3 + #t~string156.offset, 1);call #t~string159.base, #t~string159.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string159.base, #t~string159.offset, 1);call write~init~int(37, #t~string159.base, 1 + #t~string159.offset, 1);call write~init~int(105, #t~string159.base, 2 + #t~string159.offset, 1);call write~init~int(0, #t~string159.base, 3 + #t~string159.offset, 1);call #t~string161.base, #t~string161.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string161.base, #t~string161.offset, 1);call write~init~int(0, #t~string161.base, 1 + #t~string161.offset, 1); 139899#L-1 havoc main_#res;havoc main_#t~ret177, main_~retValue_acc~31, main_~tmp~30;havoc main_~retValue_acc~31;havoc main_~tmp~30; 138151#L73 havoc valid_product_#res;havoc valid_product_~retValue_acc~1;havoc valid_product_~retValue_acc~1;valid_product_~retValue_acc~1 := 1;valid_product_#res := valid_product_~retValue_acc~1; 137794#L81 main_#t~ret177 := valid_product_#res;main_~tmp~30 := main_#t~ret177;havoc main_#t~ret177; 137795#L3495 assume 0 != main_~tmp~30; 140213#L3472 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 140214#L842 havoc bobCall_#t~ret165, bobCall_~tmp~22;havoc bobCall_~tmp~22;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~9;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~9; 137725#L1473 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~9 := 4;getOrigin_#res := getOrigin_~retValue_acc~9; 136985#L1498 bobCall_#t~ret165 := getOrigin_#res;bobCall_~tmp~22 := bobCall_#t~ret165;havoc bobCall_#t~ret165;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~22;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 137761#L1120 assume 0 == initPersonOnFloor_~floor; 137521#L1121 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 136903#L1228-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 143932#L912 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 138684#L924-2 havoc timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_~tmp~20, timeShift_~tmp___0~11, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~20;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_#t~ret3, __utac_acc__Specification3_spec__1_#t~ret4, __utac_acc__Specification3_spec__1_#t~ret5, __utac_acc__Specification3_spec__1_#t~ret6, __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_#t~ret12, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 138686#L1794 __utac_acc__Specification3_spec__1_#t~ret1 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~15;havoc getCurrentHeading_~retValue_acc~15;getCurrentHeading_~retValue_acc~15 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~15; 141320#L1846 __utac_acc__Specification3_spec__1_#t~ret2 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret2;havoc __utac_acc__Specification3_spec__1_#t~ret2; 139554#L115 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 139556#L177 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~14;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~14; 138335#L1811-5 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~14 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~14; 136809#L1832-5 __utac_acc__Specification3_spec__1_#t~ret8 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret8;havoc __utac_acc__Specification3_spec__1_#t~ret8; 136810#L181 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 138396#L221 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_#t~ret90, stopRequestedAtCurrentFloor_#t~ret91, stopRequestedAtCurrentFloor_#t~ret92, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~18, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~18;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret163, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 147138#L849 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 147134#L876 isExecutiveFloorCalling_#t~ret163 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret163;havoc isExecutiveFloorCalling_#t~ret163;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 147133#L3147 stopRequestedAtCurrentFloor_#t~ret89 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~18 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 147093#L2531 assume 0 != stopRequestedAtCurrentFloor_~tmp~18;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 147085#L1794-1 stopRequestedAtCurrentFloor_#t~ret90 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret90;havoc stopRequestedAtCurrentFloor_#t~ret90; 147075#L2535 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 147072#L2548 timeShift_#t~ret105 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret105;havoc timeShift_#t~ret105; 147068#L2684 assume !(0 != timeShift_~tmp___9~3); 147067#L2775 assume !(1 == ~doorState~0); 147057#L2775-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~14, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~6;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~14;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~6;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret163, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 146615#L849-3 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 146606#L876-3 isExecutiveFloorCalling_#t~ret163 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret163;havoc isExecutiveFloorCalling_#t~ret163;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 146604#L3147-1 stopRequestedInDirection_#t~ret80 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~6 := stopRequestedInDirection_#t~ret80;havoc stopRequestedInDirection_#t~ret80; 146466#L2386 assume 0 != stopRequestedInDirection_~tmp___0~6;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 146459#L1794-4 stopRequestedInDirection_#t~ret81 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~14 := stopRequestedInDirection_#t~ret81;havoc stopRequestedInDirection_#t~ret81;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~6 := (if stopRequestedInDirection_~tmp~14 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~21 := (if stopRequestedInDirection_~__cil_tmp8~6 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 146456#L2399 timeShift_#t~ret112 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 146453#L2783 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret83, continueInDirection_~dir, continueInDirection_~tmp~15;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~15;~currentHeading~0 := continueInDirection_~dir; 143418#L2443 assume !(1 == ~currentHeading~0); 143419#L2453 assume !(0 == ~currentFloorID~0); 144322#L2453-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 144313#L2459-5 havoc __utac_acc__Specification3_spec__2_#t~ret13, __utac_acc__Specification3_spec__2_#t~ret14, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 153349#L246 assume !(-1 == ~expectedDirection~0); 153347#L258 assume !(1 == ~expectedDirection~0); 146448#L259 havoc timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_~tmp~20, timeShift_~tmp___0~11, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~20;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_#t~ret3, __utac_acc__Specification3_spec__1_#t~ret4, __utac_acc__Specification3_spec__1_#t~ret5, __utac_acc__Specification3_spec__1_#t~ret6, __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_#t~ret12, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 146444#L1794-6 __utac_acc__Specification3_spec__1_#t~ret1 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~15;havoc getCurrentHeading_~retValue_acc~15;getCurrentHeading_~retValue_acc~15 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~15; 146440#L1846-3 __utac_acc__Specification3_spec__1_#t~ret2 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret2;havoc __utac_acc__Specification3_spec__1_#t~ret2; 146436#L115-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 145962#L177-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~14;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~14; 138301#L1811-19 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~14 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~14; 137116#L1832-19 __utac_acc__Specification3_spec__1_#t~ret8 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret8;havoc __utac_acc__Specification3_spec__1_#t~ret8; 137117#L181-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 138381#L221-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_#t~ret90, stopRequestedAtCurrentFloor_#t~ret91, stopRequestedAtCurrentFloor_#t~ret92, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~18, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~18;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret163, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 150725#L849-65 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 150709#L876-65 isExecutiveFloorCalling_#t~ret163 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret163;havoc isExecutiveFloorCalling_#t~ret163;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 150697#L3147-3 stopRequestedAtCurrentFloor_#t~ret89 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~18 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 150689#L2531-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~18;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 150683#L1794-7 stopRequestedAtCurrentFloor_#t~ret90 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret90;havoc stopRequestedAtCurrentFloor_#t~ret90; 150670#L2535-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 150667#L2548-1 timeShift_#t~ret105 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret105;havoc timeShift_#t~ret105; 150664#L2684-1 assume !(0 != timeShift_~tmp___9~3); 150663#L2775-3 assume !(1 == ~doorState~0); 150653#L2775-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~14, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~6;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~14;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~6;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret163, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 150058#L849-68 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 150052#L876-68 isExecutiveFloorCalling_#t~ret163 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret163;havoc isExecutiveFloorCalling_#t~ret163;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 150046#L3147-4 stopRequestedInDirection_#t~ret80 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~6 := stopRequestedInDirection_#t~ret80;havoc stopRequestedInDirection_#t~ret80; 150043#L2386-2 assume 0 != stopRequestedInDirection_~tmp___0~6;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 149897#L1794-10 stopRequestedInDirection_#t~ret81 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~14 := stopRequestedInDirection_#t~ret81;havoc stopRequestedInDirection_#t~ret81;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~6 := (if stopRequestedInDirection_~tmp~14 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~21 := (if stopRequestedInDirection_~__cil_tmp8~6 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 149890#L2399-2 timeShift_#t~ret112 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 149886#L2783-1 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret83, continueInDirection_~dir, continueInDirection_~tmp~15;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~15;~currentHeading~0 := continueInDirection_~dir; 149884#L2443-3 assume !(1 == ~currentHeading~0); 144317#L2453-9 assume !(0 == ~currentFloorID~0); 144319#L2453-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 150746#L2459-11 havoc __utac_acc__Specification3_spec__2_#t~ret13, __utac_acc__Specification3_spec__2_#t~ret14, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 150743#L246-1 assume !(-1 == ~expectedDirection~0); 150740#L258-1 assume !(1 == ~expectedDirection~0); 146447#L259-1 havoc timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_~tmp~20, timeShift_~tmp___0~11, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~20;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_#t~ret3, __utac_acc__Specification3_spec__1_#t~ret4, __utac_acc__Specification3_spec__1_#t~ret5, __utac_acc__Specification3_spec__1_#t~ret6, __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_#t~ret12, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 146443#L1794-12 __utac_acc__Specification3_spec__1_#t~ret1 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~15;havoc getCurrentHeading_~retValue_acc~15;getCurrentHeading_~retValue_acc~15 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~15; 146439#L1846-6 __utac_acc__Specification3_spec__1_#t~ret2 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret2;havoc __utac_acc__Specification3_spec__1_#t~ret2; 146434#L115-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 145960#L177-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~14;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~14; 139345#L1811-33 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~14 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~14; 137051#L1832-33 __utac_acc__Specification3_spec__1_#t~ret8 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret8;havoc __utac_acc__Specification3_spec__1_#t~ret8; 137052#L181-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 138376#L221-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_#t~ret90, stopRequestedAtCurrentFloor_#t~ret91, stopRequestedAtCurrentFloor_#t~ret92, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~18, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~18;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret163, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 149266#L849-130 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 149257#L876-130 isExecutiveFloorCalling_#t~ret163 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret163;havoc isExecutiveFloorCalling_#t~ret163;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 149255#L3147-6 stopRequestedAtCurrentFloor_#t~ret89 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~18 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 149250#L2531-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~18;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 149247#L1794-13 stopRequestedAtCurrentFloor_#t~ret90 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret90;havoc stopRequestedAtCurrentFloor_#t~ret90; 149245#L2535-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 149242#L2548-2 timeShift_#t~ret105 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret105;havoc timeShift_#t~ret105; 149240#L2684-2 assume !(0 != timeShift_~tmp___9~3); 149239#L2775-6 assume !(1 == ~doorState~0); 149234#L2775-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~14, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~6;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~14;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~6;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret163, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 149189#L849-133 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 149181#L876-133 isExecutiveFloorCalling_#t~ret163 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret163;havoc isExecutiveFloorCalling_#t~ret163;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 149179#L3147-7 stopRequestedInDirection_#t~ret80 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~6 := stopRequestedInDirection_#t~ret80;havoc stopRequestedInDirection_#t~ret80; 149174#L2386-4 assume 0 != stopRequestedInDirection_~tmp___0~6;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 149038#L1794-16 stopRequestedInDirection_#t~ret81 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~14 := stopRequestedInDirection_#t~ret81;havoc stopRequestedInDirection_#t~ret81;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~6 := (if stopRequestedInDirection_~tmp~14 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~21 := (if stopRequestedInDirection_~__cil_tmp8~6 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 149032#L2399-4 timeShift_#t~ret112 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 149028#L2783-2 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret83, continueInDirection_~dir, continueInDirection_~tmp~15;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~15;~currentHeading~0 := continueInDirection_~dir; 149026#L2443-6 assume !(1 == ~currentHeading~0); 144270#L2453-18 assume !(0 == ~currentFloorID~0); 144272#L2453-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 163430#L2459-17 havoc __utac_acc__Specification3_spec__2_#t~ret13, __utac_acc__Specification3_spec__2_#t~ret14, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 163425#L246-2 assume !(-1 == ~expectedDirection~0); 138182#L258-2 assume !(1 == ~expectedDirection~0); 137858#L259-2 havoc bobCall_#t~ret165, bobCall_~tmp~22;havoc bobCall_~tmp~22;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~9;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~9; 137726#L1473-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~9 := 4;getOrigin_#res := getOrigin_~retValue_acc~9; 136993#L1498-1 bobCall_#t~ret165 := getOrigin_#res;bobCall_~tmp~22 := bobCall_#t~ret165;havoc bobCall_#t~ret165;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~22;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 137763#L1120-1 assume 0 == initPersonOnFloor_~floor; 137528#L1121-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 136908#L1228-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 146177#L912-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 146450#L924-5 havoc cleanup_#t~ret171, cleanup_#t~ret172, cleanup_~i~3, cleanup_~tmp~28, cleanup_~tmp___0~13, cleanup_~__cil_tmp4~3;havoc cleanup_~i~3;havoc cleanup_~tmp~28;havoc cleanup_~tmp___0~13;havoc cleanup_~__cil_tmp4~3;havoc timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_~tmp~20, timeShift_~tmp___0~11, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~20;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_#t~ret3, __utac_acc__Specification3_spec__1_#t~ret4, __utac_acc__Specification3_spec__1_#t~ret5, __utac_acc__Specification3_spec__1_#t~ret6, __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_#t~ret12, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 146446#L1794-18 __utac_acc__Specification3_spec__1_#t~ret1 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~15;havoc getCurrentHeading_~retValue_acc~15;getCurrentHeading_~retValue_acc~15 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~15; 146442#L1846-9 __utac_acc__Specification3_spec__1_#t~ret2 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret2;havoc __utac_acc__Specification3_spec__1_#t~ret2; 146438#L115-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 145964#L177-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~14;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~14; 139311#L1811-47 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~14 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~14; 136956#L1832-47 __utac_acc__Specification3_spec__1_#t~ret8 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret8;havoc __utac_acc__Specification3_spec__1_#t~ret8; 136957#L181-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 138387#L221-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_#t~ret90, stopRequestedAtCurrentFloor_#t~ret91, stopRequestedAtCurrentFloor_#t~ret92, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~18, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~18;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret163, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 148133#L849-195 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 148129#L876-195 isExecutiveFloorCalling_#t~ret163 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret163;havoc isExecutiveFloorCalling_#t~ret163;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 148124#L3147-9 stopRequestedAtCurrentFloor_#t~ret89 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~18 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 148121#L2531-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~18;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 148117#L1794-19 stopRequestedAtCurrentFloor_#t~ret90 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret90;havoc stopRequestedAtCurrentFloor_#t~ret90; 148112#L2535-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 148110#L2548-3 timeShift_#t~ret105 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret105;havoc timeShift_#t~ret105; 148108#L2684-3 assume !(0 != timeShift_~tmp___9~3); 148107#L2775-9 assume !(1 == ~doorState~0); 148106#L2775-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~14, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~6;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~14;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~6;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret163, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 148104#L849-198 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 148100#L876-198 isExecutiveFloorCalling_#t~ret163 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret163;havoc isExecutiveFloorCalling_#t~ret163;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 148099#L3147-10 stopRequestedInDirection_#t~ret80 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~6 := stopRequestedInDirection_#t~ret80;havoc stopRequestedInDirection_#t~ret80; 148097#L2386-6 assume 0 != stopRequestedInDirection_~tmp___0~6;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 148005#L1794-22 stopRequestedInDirection_#t~ret81 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~14 := stopRequestedInDirection_#t~ret81;havoc stopRequestedInDirection_#t~ret81;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~6 := (if stopRequestedInDirection_~tmp~14 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~21 := (if stopRequestedInDirection_~__cil_tmp8~6 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 148003#L2399-6 timeShift_#t~ret112 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 147999#L2783-3 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret83, continueInDirection_~dir, continueInDirection_~tmp~15;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~15;~currentHeading~0 := continueInDirection_~dir; 148000#L2443-9 assume !(1 == ~currentHeading~0); 144263#L2453-27 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 142167#L2453-29 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 155816#L2459-23 havoc __utac_acc__Specification3_spec__2_#t~ret13, __utac_acc__Specification3_spec__2_#t~ret14, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 155813#L246-3 assume !(-1 == ~expectedDirection~0); 155807#L258-3 assume !(1 == ~expectedDirection~0); 155801#L259-3 cleanup_~i~3 := 0; 155800#L3304-2 [2018-12-09 11:34:15,046 INFO L796 eck$LassoCheckResult]: Loop: 155800#L3304-2 assume !false; 155799#L3305 cleanup_~__cil_tmp4~3 := ~cleanupTimeShifts~0 - 1; 155793#L3308 assume cleanup_~i~3 < cleanup_~__cil_tmp4~3;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~11;havoc isBlocked_~retValue_acc~11;isBlocked_~retValue_acc~11 := 0;isBlocked_#res := isBlocked_~retValue_acc~11; 155791#L1621 cleanup_#t~ret171 := isBlocked_#res;cleanup_~tmp___0~13 := cleanup_#t~ret171;havoc cleanup_#t~ret171; 155790#L3312 assume 1 != cleanup_~tmp___0~13; 155789#L3312-1 havoc isIdle_#res;havoc isIdle_#t~ret64, isIdle_~retValue_acc~18, isIdle_~tmp~11;havoc isIdle_~retValue_acc~18;havoc isIdle_~tmp~11;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret59, anyStopRequested_#t~ret60, anyStopRequested_#t~ret61, anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_~retValue_acc~17, anyStopRequested_~tmp~10, anyStopRequested_~tmp___0~4, anyStopRequested_~tmp___1~3, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~1;havoc anyStopRequested_~retValue_acc~17;havoc anyStopRequested_~tmp~10;havoc anyStopRequested_~tmp___0~4;havoc anyStopRequested_~tmp___1~3;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~1;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 155786#L849-260 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 155783#L876-260 anyStopRequested_#t~ret59 := isFloorCalling_#res;anyStopRequested_~tmp___3~1 := anyStopRequested_#t~ret59;havoc anyStopRequested_#t~ret59; 155749#L1902 assume 0 != anyStopRequested_~tmp___3~1;anyStopRequested_~retValue_acc~17 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~17; 155748#L1966 isIdle_#t~ret64 := anyStopRequested_#res;isIdle_~tmp~11 := isIdle_#t~ret64;havoc isIdle_#t~ret64;isIdle_~retValue_acc~18 := (if 0 == isIdle_~tmp~11 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~18; 155747#L1979 cleanup_#t~ret172 := isIdle_#res;cleanup_~tmp~28 := cleanup_#t~ret172;havoc cleanup_#t~ret172; 155746#L3324 assume !(0 != cleanup_~tmp~28);havoc timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_~tmp~20, timeShift_~tmp___0~11, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~20;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_#t~ret3, __utac_acc__Specification3_spec__1_#t~ret4, __utac_acc__Specification3_spec__1_#t~ret5, __utac_acc__Specification3_spec__1_#t~ret6, __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_#t~ret12, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 155745#L1794-24 __utac_acc__Specification3_spec__1_#t~ret1 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~15;havoc getCurrentHeading_~retValue_acc~15;getCurrentHeading_~retValue_acc~15 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~15; 155740#L1846-12 __utac_acc__Specification3_spec__1_#t~ret2 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret2;havoc __utac_acc__Specification3_spec__1_#t~ret2; 155738#L115-4 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 155737#L116-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0); 140691#L126-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 1); 144532#L137-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 2); 144533#L148-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 3); 142562#L159-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 4); 142563#L221-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_#t~ret90, stopRequestedAtCurrentFloor_#t~ret91, stopRequestedAtCurrentFloor_#t~ret92, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~18, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~18;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret163, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 157617#L849-265 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 157613#L876-265 isExecutiveFloorCalling_#t~ret163 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret163;havoc isExecutiveFloorCalling_#t~ret163;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 157612#L3147-12 stopRequestedAtCurrentFloor_#t~ret89 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~18 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 157610#L2531-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~18;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 157611#L1794-25 stopRequestedAtCurrentFloor_#t~ret90 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret90;havoc stopRequestedAtCurrentFloor_#t~ret90; 157584#L2535-4 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 157582#L2548-4 timeShift_#t~ret105 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret105;havoc timeShift_#t~ret105; 157580#L2684-4 assume !(0 != timeShift_~tmp___9~3); 157579#L2775-12 assume 1 == ~doorState~0;~doorState~0 := 0; 157578#L2775-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~14, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~6;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~14;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~6;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret163, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 157576#L849-268 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 157572#L876-268 isExecutiveFloorCalling_#t~ret163 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret163;havoc isExecutiveFloorCalling_#t~ret163;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 157571#L3147-13 stopRequestedInDirection_#t~ret80 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~6 := stopRequestedInDirection_#t~ret80;havoc stopRequestedInDirection_#t~ret80; 157570#L2386-8 assume 0 != stopRequestedInDirection_~tmp___0~6;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 157404#L1794-28 stopRequestedInDirection_#t~ret81 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~14 := stopRequestedInDirection_#t~ret81;havoc stopRequestedInDirection_#t~ret81;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~6 := (if stopRequestedInDirection_~tmp~14 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~21 := (if stopRequestedInDirection_~__cil_tmp8~6 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 157403#L2399-8 timeShift_#t~ret112 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 157401#L2783-4 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret83, continueInDirection_~dir, continueInDirection_~tmp~15;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~15;~currentHeading~0 := continueInDirection_~dir; 157400#L2443-12 assume 1 == ~currentHeading~0;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~7;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~7;isTopFloor_~retValue_acc~7 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~7; 157394#L1423-39 continueInDirection_#t~ret83 := isTopFloor_#res;continueInDirection_~tmp~15 := continueInDirection_#t~ret83;havoc continueInDirection_#t~ret83; 157392#L2447-36 assume !(0 != continueInDirection_~tmp~15); 144225#L2453-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 155815#L2459-29 havoc __utac_acc__Specification3_spec__2_#t~ret13, __utac_acc__Specification3_spec__2_#t~ret14, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 155810#L246-4 assume !(-1 == ~expectedDirection~0); 155804#L258-4 assume !(1 == ~expectedDirection~0); 155802#L259-4 cleanup_~i~3 := 1 + cleanup_~i~3; 155800#L3304-2 [2018-12-09 11:34:15,051 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-12-09 11:34:15,051 INFO L82 PathProgramCache]: Analyzing trace with hash 437044170, now seen corresponding path program 3 times [2018-12-09 11:34:15,051 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-09 11:34:15,051 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-09 11:34:15,052 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-09 11:34:15,052 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-12-09 11:34:15,052 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-09 11:34:15,068 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-09 11:34:15,187 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-09 11:34:15,188 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-09 11:34:15,188 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-12-09 11:34:15,188 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-12-09 11:34:15,188 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-12-09 11:34:15,188 INFO L82 PathProgramCache]: Analyzing trace with hash 671394460, now seen corresponding path program 1 times [2018-12-09 11:34:15,189 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-09 11:34:15,189 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-09 11:34:15,189 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-09 11:34:15,189 INFO L101 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2018-12-09 11:34:15,190 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-09 11:34:15,195 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-09 11:34:15,338 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-09 11:34:15,338 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-09 11:34:15,338 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [15] imperfect sequences [] total 15 [2018-12-09 11:34:15,338 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-12-09 11:34:15,339 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 15 interpolants. [2018-12-09 11:34:15,339 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=29, Invalid=181, Unknown=0, NotChecked=0, Total=210 [2018-12-09 11:34:15,339 INFO L87 Difference]: Start difference. First operand 40559 states and 76333 transitions. cyclomatic complexity: 35775 Second operand 15 states. [2018-12-09 11:34:38,106 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-12-09 11:34:38,107 INFO L93 Difference]: Finished difference Result 86560 states and 157887 transitions. [2018-12-09 11:34:38,108 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 91 states. [2018-12-09 11:34:38,108 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 86560 states and 157887 transitions. [2018-12-09 11:34:38,341 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 19792 [2018-12-09 11:34:38,510 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 86560 states to 86560 states and 157887 transitions. [2018-12-09 11:34:38,510 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 86560 [2018-12-09 11:34:38,557 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 86560 [2018-12-09 11:34:38,557 INFO L73 IsDeterministic]: Start isDeterministic. Operand 86560 states and 157887 transitions. [2018-12-09 11:34:38,600 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-12-09 11:34:38,600 INFO L705 BuchiCegarLoop]: Abstraction has 86560 states and 157887 transitions. [2018-12-09 11:34:38,637 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 86560 states and 157887 transitions. [2018-12-09 11:34:39,174 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 86560 to 61077. [2018-12-09 11:34:39,174 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 61077 states. [2018-12-09 11:34:39,397 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 61077 states to 61077 states and 112496 transitions. [2018-12-09 11:34:39,397 INFO L728 BuchiCegarLoop]: Abstraction has 61077 states and 112496 transitions. [2018-12-09 11:34:39,397 INFO L608 BuchiCegarLoop]: Abstraction has 61077 states and 112496 transitions. [2018-12-09 11:34:39,397 INFO L442 BuchiCegarLoop]: ======== Iteration 5============ [2018-12-09 11:34:39,397 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 61077 states and 112496 transitions. [2018-12-09 11:34:39,495 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 13724 [2018-12-09 11:34:39,495 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-12-09 11:34:39,495 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-12-09 11:34:39,501 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-09 11:34:39,501 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-09 11:34:39,501 INFO L794 eck$LassoCheckResult]: Stem: 267316#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0;call #t~string33.base, #t~string33.offset := #Ultimate.alloc(30);call #t~string34.base, #t~string34.offset := #Ultimate.alloc(9);call #t~string35.base, #t~string35.offset := #Ultimate.alloc(21);call #t~string36.base, #t~string36.offset := #Ultimate.alloc(30);call #t~string37.base, #t~string37.offset := #Ultimate.alloc(9);call #t~string38.base, #t~string38.offset := #Ultimate.alloc(21);call #t~string42.base, #t~string42.offset := #Ultimate.alloc(30);call #t~string43.base, #t~string43.offset := #Ultimate.alloc(9);call #t~string44.base, #t~string44.offset := #Ultimate.alloc(25);call #t~string45.base, #t~string45.offset := #Ultimate.alloc(30);call #t~string46.base, #t~string46.offset := #Ultimate.alloc(9);call #t~string47.base, #t~string47.offset := #Ultimate.alloc(25);~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string116.base, #t~string116.offset := #Ultimate.alloc(10);call #t~string118.base, #t~string118.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string118.base, #t~string118.offset, 1);call write~init~int(95, #t~string118.base, 1 + #t~string118.offset, 1);call write~init~int(93, #t~string118.base, 2 + #t~string118.offset, 1);call write~init~int(0, #t~string118.base, 3 + #t~string118.offset, 1);call #t~string120.base, #t~string120.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string120.base, #t~string120.offset, 1);call write~init~int(93, #t~string120.base, 1 + #t~string120.offset, 1);call write~init~int(32, #t~string120.base, 2 + #t~string120.offset, 1);call write~init~int(0, #t~string120.base, 3 + #t~string120.offset, 1);call #t~string122.base, #t~string122.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string122.base, #t~string122.offset, 1);call write~init~int(97, #t~string122.base, 1 + #t~string122.offset, 1);call write~init~int(116, #t~string122.base, 2 + #t~string122.offset, 1);call write~init~int(32, #t~string122.base, 3 + #t~string122.offset, 1);call write~init~int(0, #t~string122.base, 4 + #t~string122.offset, 1);call #t~string124.base, #t~string124.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string124.base, #t~string124.offset, 1);call write~init~int(105, #t~string124.base, 1 + #t~string124.offset, 1);call write~init~int(0, #t~string124.base, 2 + #t~string124.offset, 1);call #t~string126.base, #t~string126.offset := #Ultimate.alloc(10);call #t~string128.base, #t~string128.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string128.base, #t~string128.offset, 1);call write~init~int(112, #t~string128.base, 1 + #t~string128.offset, 1);call write~init~int(0, #t~string128.base, 2 + #t~string128.offset, 1);call #t~string130.base, #t~string130.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string130.base, #t~string130.offset, 1);call write~init~int(111, #t~string130.base, 1 + #t~string130.offset, 1);call write~init~int(119, #t~string130.base, 2 + #t~string130.offset, 1);call write~init~int(110, #t~string130.base, 3 + #t~string130.offset, 1);call write~init~int(0, #t~string130.base, 4 + #t~string130.offset, 1);call #t~string132.base, #t~string132.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string132.base, #t~string132.offset, 1);call write~init~int(73, #t~string132.base, 1 + #t~string132.offset, 1);call write~init~int(76, #t~string132.base, 2 + #t~string132.offset, 1);call write~init~int(95, #t~string132.base, 3 + #t~string132.offset, 1);call write~init~int(112, #t~string132.base, 4 + #t~string132.offset, 1);call write~init~int(58, #t~string132.base, 5 + #t~string132.offset, 1);call write~init~int(0, #t~string132.base, 6 + #t~string132.offset, 1);call #t~string134.base, #t~string134.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string134.base, #t~string134.offset, 1);call write~init~int(37, #t~string134.base, 1 + #t~string134.offset, 1);call write~init~int(105, #t~string134.base, 2 + #t~string134.offset, 1);call write~init~int(0, #t~string134.base, 3 + #t~string134.offset, 1);call #t~string136.base, #t~string136.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string136.base, #t~string136.offset, 1);call write~init~int(37, #t~string136.base, 1 + #t~string136.offset, 1);call write~init~int(105, #t~string136.base, 2 + #t~string136.offset, 1);call write~init~int(0, #t~string136.base, 3 + #t~string136.offset, 1);call #t~string138.base, #t~string138.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string138.base, #t~string138.offset, 1);call write~init~int(37, #t~string138.base, 1 + #t~string138.offset, 1);call write~init~int(105, #t~string138.base, 2 + #t~string138.offset, 1);call write~init~int(0, #t~string138.base, 3 + #t~string138.offset, 1);call #t~string140.base, #t~string140.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string140.base, #t~string140.offset, 1);call write~init~int(37, #t~string140.base, 1 + #t~string140.offset, 1);call write~init~int(105, #t~string140.base, 2 + #t~string140.offset, 1);call write~init~int(0, #t~string140.base, 3 + #t~string140.offset, 1);call #t~string142.base, #t~string142.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string142.base, #t~string142.offset, 1);call write~init~int(37, #t~string142.base, 1 + #t~string142.offset, 1);call write~init~int(105, #t~string142.base, 2 + #t~string142.offset, 1);call write~init~int(0, #t~string142.base, 3 + #t~string142.offset, 1);call #t~string144.base, #t~string144.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string144.base, #t~string144.offset, 1);call write~init~int(70, #t~string144.base, 1 + #t~string144.offset, 1);call write~init~int(95, #t~string144.base, 2 + #t~string144.offset, 1);call write~init~int(112, #t~string144.base, 3 + #t~string144.offset, 1);call write~init~int(58, #t~string144.base, 4 + #t~string144.offset, 1);call write~init~int(0, #t~string144.base, 5 + #t~string144.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string147.base, #t~string147.offset, 1);call write~init~int(37, #t~string147.base, 1 + #t~string147.offset, 1);call write~init~int(105, #t~string147.base, 2 + #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 3 + #t~string147.offset, 1);call #t~string150.base, #t~string150.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string150.base, #t~string150.offset, 1);call write~init~int(37, #t~string150.base, 1 + #t~string150.offset, 1);call write~init~int(105, #t~string150.base, 2 + #t~string150.offset, 1);call write~init~int(0, #t~string150.base, 3 + #t~string150.offset, 1);call #t~string153.base, #t~string153.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string153.base, #t~string153.offset, 1);call write~init~int(37, #t~string153.base, 1 + #t~string153.offset, 1);call write~init~int(105, #t~string153.base, 2 + #t~string153.offset, 1);call write~init~int(0, #t~string153.base, 3 + #t~string153.offset, 1);call #t~string156.base, #t~string156.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string156.base, #t~string156.offset, 1);call write~init~int(37, #t~string156.base, 1 + #t~string156.offset, 1);call write~init~int(105, #t~string156.base, 2 + #t~string156.offset, 1);call write~init~int(0, #t~string156.base, 3 + #t~string156.offset, 1);call #t~string159.base, #t~string159.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string159.base, #t~string159.offset, 1);call write~init~int(37, #t~string159.base, 1 + #t~string159.offset, 1);call write~init~int(105, #t~string159.base, 2 + #t~string159.offset, 1);call write~init~int(0, #t~string159.base, 3 + #t~string159.offset, 1);call #t~string161.base, #t~string161.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string161.base, #t~string161.offset, 1);call write~init~int(0, #t~string161.base, 1 + #t~string161.offset, 1); 267317#L-1 havoc main_#res;havoc main_#t~ret177, main_~retValue_acc~31, main_~tmp~30;havoc main_~retValue_acc~31;havoc main_~tmp~30; 265563#L73 havoc valid_product_#res;havoc valid_product_~retValue_acc~1;havoc valid_product_~retValue_acc~1;valid_product_~retValue_acc~1 := 1;valid_product_#res := valid_product_~retValue_acc~1; 265173#L81 main_#t~ret177 := valid_product_#res;main_~tmp~30 := main_#t~ret177;havoc main_#t~ret177; 265174#L3495 assume 0 != main_~tmp~30; 267635#L3472 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 267636#L842 havoc bobCall_#t~ret165, bobCall_~tmp~22;havoc bobCall_~tmp~22;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~9;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~9; 265103#L1473 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~9 := 4;getOrigin_#res := getOrigin_~retValue_acc~9; 264304#L1498 bobCall_#t~ret165 := getOrigin_#res;bobCall_~tmp~22 := bobCall_#t~ret165;havoc bobCall_#t~ret165;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~22;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 265140#L1120 assume 0 == initPersonOnFloor_~floor; 264888#L1121 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 264220#L1228-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 271781#L912 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 266109#L924-2 havoc timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_~tmp~20, timeShift_~tmp___0~11, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~20;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_#t~ret3, __utac_acc__Specification3_spec__1_#t~ret4, __utac_acc__Specification3_spec__1_#t~ret5, __utac_acc__Specification3_spec__1_#t~ret6, __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_#t~ret12, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 266111#L1794 __utac_acc__Specification3_spec__1_#t~ret1 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~15;havoc getCurrentHeading_~retValue_acc~15;getCurrentHeading_~retValue_acc~15 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~15; 268980#L1846 __utac_acc__Specification3_spec__1_#t~ret2 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret2;havoc __utac_acc__Specification3_spec__1_#t~ret2; 266985#L115 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 266987#L177 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~14;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~14; 265759#L1811-5 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~14 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~14; 264137#L1832-5 __utac_acc__Specification3_spec__1_#t~ret8 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret8;havoc __utac_acc__Specification3_spec__1_#t~ret8; 264138#L181 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 265820#L221 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_#t~ret90, stopRequestedAtCurrentFloor_#t~ret91, stopRequestedAtCurrentFloor_#t~ret92, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~18, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~18;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret163, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 275784#L849 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 275780#L876 isExecutiveFloorCalling_#t~ret163 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret163;havoc isExecutiveFloorCalling_#t~ret163;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 275779#L3147 stopRequestedAtCurrentFloor_#t~ret89 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~18 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 275739#L2531 assume 0 != stopRequestedAtCurrentFloor_~tmp~18;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 275731#L1794-1 stopRequestedAtCurrentFloor_#t~ret90 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret90;havoc stopRequestedAtCurrentFloor_#t~ret90; 275721#L2535 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 275718#L2548 timeShift_#t~ret105 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret105;havoc timeShift_#t~ret105; 275714#L2684 assume !(0 != timeShift_~tmp___9~3); 275713#L2775 assume !(1 == ~doorState~0); 275703#L2775-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~14, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~6;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~14;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~6;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret163, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 275261#L849-3 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 275252#L876-3 isExecutiveFloorCalling_#t~ret163 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret163;havoc isExecutiveFloorCalling_#t~ret163;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 275250#L3147-1 stopRequestedInDirection_#t~ret80 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~6 := stopRequestedInDirection_#t~ret80;havoc stopRequestedInDirection_#t~ret80; 275112#L2386 assume 0 != stopRequestedInDirection_~tmp___0~6;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 275105#L1794-4 stopRequestedInDirection_#t~ret81 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~14 := stopRequestedInDirection_#t~ret81;havoc stopRequestedInDirection_#t~ret81;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~6 := (if stopRequestedInDirection_~tmp~14 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~21 := (if stopRequestedInDirection_~__cil_tmp8~6 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 275102#L2399 timeShift_#t~ret112 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 275099#L2783 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret83, continueInDirection_~dir, continueInDirection_~tmp~15;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~15;~currentHeading~0 := continueInDirection_~dir; 271209#L2443 assume !(1 == ~currentHeading~0); 271210#L2453 assume !(0 == ~currentFloorID~0); 272333#L2453-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 279789#L2459-5 havoc __utac_acc__Specification3_spec__2_#t~ret13, __utac_acc__Specification3_spec__2_#t~ret14, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 279779#L246 assume !(-1 == ~expectedDirection~0); 279771#L258 assume !(1 == ~expectedDirection~0); 275095#L259 havoc timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_~tmp~20, timeShift_~tmp___0~11, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~20;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_#t~ret3, __utac_acc__Specification3_spec__1_#t~ret4, __utac_acc__Specification3_spec__1_#t~ret5, __utac_acc__Specification3_spec__1_#t~ret6, __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_#t~ret12, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 275091#L1794-6 __utac_acc__Specification3_spec__1_#t~ret1 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~15;havoc getCurrentHeading_~retValue_acc~15;getCurrentHeading_~retValue_acc~15 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~15; 275087#L1846-3 __utac_acc__Specification3_spec__1_#t~ret2 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret2;havoc __utac_acc__Specification3_spec__1_#t~ret2; 275080#L115-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 274187#L177-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~14;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~14; 265725#L1811-19 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~14 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~14; 264469#L1832-19 __utac_acc__Specification3_spec__1_#t~ret8 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret8;havoc __utac_acc__Specification3_spec__1_#t~ret8; 264470#L181-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 265805#L221-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_#t~ret90, stopRequestedAtCurrentFloor_#t~ret91, stopRequestedAtCurrentFloor_#t~ret92, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~18, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~18;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret163, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 279368#L849-65 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 279352#L876-65 isExecutiveFloorCalling_#t~ret163 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret163;havoc isExecutiveFloorCalling_#t~ret163;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 279340#L3147-3 stopRequestedAtCurrentFloor_#t~ret89 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~18 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 279332#L2531-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~18;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 279326#L1794-7 stopRequestedAtCurrentFloor_#t~ret90 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret90;havoc stopRequestedAtCurrentFloor_#t~ret90; 279313#L2535-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 279310#L2548-1 timeShift_#t~ret105 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret105;havoc timeShift_#t~ret105; 279307#L2684-1 assume !(0 != timeShift_~tmp___9~3); 279306#L2775-3 assume !(1 == ~doorState~0); 279296#L2775-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~14, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~6;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~14;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~6;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret163, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 278701#L849-68 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 278695#L876-68 isExecutiveFloorCalling_#t~ret163 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret163;havoc isExecutiveFloorCalling_#t~ret163;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 278689#L3147-4 stopRequestedInDirection_#t~ret80 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~6 := stopRequestedInDirection_#t~ret80;havoc stopRequestedInDirection_#t~ret80; 278686#L2386-2 assume 0 != stopRequestedInDirection_~tmp___0~6;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 278540#L1794-10 stopRequestedInDirection_#t~ret81 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~14 := stopRequestedInDirection_#t~ret81;havoc stopRequestedInDirection_#t~ret81;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~6 := (if stopRequestedInDirection_~tmp~14 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~21 := (if stopRequestedInDirection_~__cil_tmp8~6 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 278533#L2399-2 timeShift_#t~ret112 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 278529#L2783-1 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret83, continueInDirection_~dir, continueInDirection_~tmp~15;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~15;~currentHeading~0 := continueInDirection_~dir; 278527#L2443-3 assume !(1 == ~currentHeading~0); 272181#L2453-9 assume !(0 == ~currentFloorID~0); 270791#L2453-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 272155#L2459-11 havoc __utac_acc__Specification3_spec__2_#t~ret13, __utac_acc__Specification3_spec__2_#t~ret14, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 285797#L246-1 assume !(-1 == ~expectedDirection~0); 285310#L258-1 assume !(1 == ~expectedDirection~0); 275094#L259-1 havoc timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_~tmp~20, timeShift_~tmp___0~11, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~20;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_#t~ret3, __utac_acc__Specification3_spec__1_#t~ret4, __utac_acc__Specification3_spec__1_#t~ret5, __utac_acc__Specification3_spec__1_#t~ret6, __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_#t~ret12, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 275090#L1794-12 __utac_acc__Specification3_spec__1_#t~ret1 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~15;havoc getCurrentHeading_~retValue_acc~15;getCurrentHeading_~retValue_acc~15 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~15; 275086#L1846-6 __utac_acc__Specification3_spec__1_#t~ret2 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret2;havoc __utac_acc__Specification3_spec__1_#t~ret2; 275078#L115-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 274184#L177-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~14;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~14; 266793#L1811-33 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~14 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~14; 264384#L1832-33 __utac_acc__Specification3_spec__1_#t~ret8 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret8;havoc __utac_acc__Specification3_spec__1_#t~ret8; 264385#L181-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 265800#L221-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_#t~ret90, stopRequestedAtCurrentFloor_#t~ret91, stopRequestedAtCurrentFloor_#t~ret92, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~18, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~18;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret163, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 277910#L849-130 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 277901#L876-130 isExecutiveFloorCalling_#t~ret163 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret163;havoc isExecutiveFloorCalling_#t~ret163;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 277899#L3147-6 stopRequestedAtCurrentFloor_#t~ret89 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~18 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 277894#L2531-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~18;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 277891#L1794-13 stopRequestedAtCurrentFloor_#t~ret90 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret90;havoc stopRequestedAtCurrentFloor_#t~ret90; 277889#L2535-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 277886#L2548-2 timeShift_#t~ret105 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret105;havoc timeShift_#t~ret105; 277884#L2684-2 assume !(0 != timeShift_~tmp___9~3); 277883#L2775-6 assume !(1 == ~doorState~0); 277878#L2775-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~14, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~6;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~14;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~6;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret163, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 277833#L849-133 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 277825#L876-133 isExecutiveFloorCalling_#t~ret163 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret163;havoc isExecutiveFloorCalling_#t~ret163;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 277823#L3147-7 stopRequestedInDirection_#t~ret80 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~6 := stopRequestedInDirection_#t~ret80;havoc stopRequestedInDirection_#t~ret80; 277818#L2386-4 assume 0 != stopRequestedInDirection_~tmp___0~6;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 277682#L1794-16 stopRequestedInDirection_#t~ret81 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~14 := stopRequestedInDirection_#t~ret81;havoc stopRequestedInDirection_#t~ret81;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~6 := (if stopRequestedInDirection_~tmp~14 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~21 := (if stopRequestedInDirection_~__cil_tmp8~6 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 277676#L2399-4 timeShift_#t~ret112 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 277672#L2783-2 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret83, continueInDirection_~dir, continueInDirection_~tmp~15;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~15;~currentHeading~0 := continueInDirection_~dir; 277670#L2443-6 assume !(1 == ~currentHeading~0); 272130#L2453-18 assume !(0 == ~currentFloorID~0); 272132#L2453-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 298987#L2459-17 havoc __utac_acc__Specification3_spec__2_#t~ret13, __utac_acc__Specification3_spec__2_#t~ret14, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 298985#L246-2 assume !(-1 == ~expectedDirection~0); 298981#L258-2 assume !(1 == ~expectedDirection~0); 298978#L259-2 havoc bobCall_#t~ret165, bobCall_~tmp~22;havoc bobCall_~tmp~22;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~9;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~9; 298971#L1473-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~9 := 4;getOrigin_#res := getOrigin_~retValue_acc~9; 298963#L1498-1 bobCall_#t~ret165 := getOrigin_#res;bobCall_~tmp~22 := bobCall_#t~ret165;havoc bobCall_#t~ret165;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~22;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 298960#L1120-1 assume 0 == initPersonOnFloor_~floor; 298913#L1121-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 295740#L1228-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 285362#L912-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 275097#L924-5 havoc cleanup_#t~ret171, cleanup_#t~ret172, cleanup_~i~3, cleanup_~tmp~28, cleanup_~tmp___0~13, cleanup_~__cil_tmp4~3;havoc cleanup_~i~3;havoc cleanup_~tmp~28;havoc cleanup_~tmp___0~13;havoc cleanup_~__cil_tmp4~3;havoc timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_~tmp~20, timeShift_~tmp___0~11, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~20;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_#t~ret3, __utac_acc__Specification3_spec__1_#t~ret4, __utac_acc__Specification3_spec__1_#t~ret5, __utac_acc__Specification3_spec__1_#t~ret6, __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_#t~ret12, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 275093#L1794-18 __utac_acc__Specification3_spec__1_#t~ret1 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~15;havoc getCurrentHeading_~retValue_acc~15;getCurrentHeading_~retValue_acc~15 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~15; 275089#L1846-9 __utac_acc__Specification3_spec__1_#t~ret2 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret2;havoc __utac_acc__Specification3_spec__1_#t~ret2; 275084#L115-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 274200#L177-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~14;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~14; 266757#L1811-47 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~14 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~14; 264275#L1832-47 __utac_acc__Specification3_spec__1_#t~ret8 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret8;havoc __utac_acc__Specification3_spec__1_#t~ret8; 264276#L181-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 265811#L221-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_#t~ret90, stopRequestedAtCurrentFloor_#t~ret91, stopRequestedAtCurrentFloor_#t~ret92, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~18, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~18;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret163, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 276777#L849-195 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 276773#L876-195 isExecutiveFloorCalling_#t~ret163 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret163;havoc isExecutiveFloorCalling_#t~ret163;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 276768#L3147-9 stopRequestedAtCurrentFloor_#t~ret89 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~18 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 276765#L2531-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~18;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 276761#L1794-19 stopRequestedAtCurrentFloor_#t~ret90 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret90;havoc stopRequestedAtCurrentFloor_#t~ret90; 276756#L2535-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 276754#L2548-3 timeShift_#t~ret105 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret105;havoc timeShift_#t~ret105; 276752#L2684-3 assume !(0 != timeShift_~tmp___9~3); 276751#L2775-9 assume !(1 == ~doorState~0); 276750#L2775-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~14, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~6;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~14;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~6;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret163, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 276748#L849-198 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 276744#L876-198 isExecutiveFloorCalling_#t~ret163 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret163;havoc isExecutiveFloorCalling_#t~ret163;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 276743#L3147-10 stopRequestedInDirection_#t~ret80 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~6 := stopRequestedInDirection_#t~ret80;havoc stopRequestedInDirection_#t~ret80; 276741#L2386-6 assume 0 != stopRequestedInDirection_~tmp___0~6;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 276649#L1794-22 stopRequestedInDirection_#t~ret81 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~14 := stopRequestedInDirection_#t~ret81;havoc stopRequestedInDirection_#t~ret81;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~6 := (if stopRequestedInDirection_~tmp~14 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~21 := (if stopRequestedInDirection_~__cil_tmp8~6 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 276647#L2399-6 timeShift_#t~ret112 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 276643#L2783-3 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret83, continueInDirection_~dir, continueInDirection_~tmp~15;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~15;~currentHeading~0 := continueInDirection_~dir; 276644#L2443-9 assume !(1 == ~currentHeading~0); 272122#L2453-27 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 272123#L2453-29 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 310547#L2459-23 havoc __utac_acc__Specification3_spec__2_#t~ret13, __utac_acc__Specification3_spec__2_#t~ret14, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 310541#L246-3 assume !(-1 == ~expectedDirection~0); 310535#L258-3 assume !(1 == ~expectedDirection~0); 310532#L259-3 cleanup_~i~3 := 0; 310529#L3304-2 [2018-12-09 11:34:39,502 INFO L796 eck$LassoCheckResult]: Loop: 310529#L3304-2 assume !false; 307892#L3305 cleanup_~__cil_tmp4~3 := ~cleanupTimeShifts~0 - 1; 307879#L3308 assume cleanup_~i~3 < cleanup_~__cil_tmp4~3;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~11;havoc isBlocked_~retValue_acc~11;isBlocked_~retValue_acc~11 := 0;isBlocked_#res := isBlocked_~retValue_acc~11; 285759#L1621 cleanup_#t~ret171 := isBlocked_#res;cleanup_~tmp___0~13 := cleanup_#t~ret171;havoc cleanup_#t~ret171; 285758#L3312 assume 1 != cleanup_~tmp___0~13; 285757#L3312-1 havoc isIdle_#res;havoc isIdle_#t~ret64, isIdle_~retValue_acc~18, isIdle_~tmp~11;havoc isIdle_~retValue_acc~18;havoc isIdle_~tmp~11;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret59, anyStopRequested_#t~ret60, anyStopRequested_#t~ret61, anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_~retValue_acc~17, anyStopRequested_~tmp~10, anyStopRequested_~tmp___0~4, anyStopRequested_~tmp___1~3, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~1;havoc anyStopRequested_~retValue_acc~17;havoc anyStopRequested_~tmp~10;havoc anyStopRequested_~tmp___0~4;havoc anyStopRequested_~tmp___1~3;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~1;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 285738#L849-260 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 285731#L876-260 anyStopRequested_#t~ret59 := isFloorCalling_#res;anyStopRequested_~tmp___3~1 := anyStopRequested_#t~ret59;havoc anyStopRequested_#t~ret59; 285717#L1902 assume 0 != anyStopRequested_~tmp___3~1;anyStopRequested_~retValue_acc~17 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~17; 285716#L1966 isIdle_#t~ret64 := anyStopRequested_#res;isIdle_~tmp~11 := isIdle_#t~ret64;havoc isIdle_#t~ret64;isIdle_~retValue_acc~18 := (if 0 == isIdle_~tmp~11 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~18; 285714#L1979 cleanup_#t~ret172 := isIdle_#res;cleanup_~tmp~28 := cleanup_#t~ret172;havoc cleanup_#t~ret172; 285715#L3324 assume !(0 != cleanup_~tmp~28);havoc timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_~tmp~20, timeShift_~tmp___0~11, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~20;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_#t~ret3, __utac_acc__Specification3_spec__1_#t~ret4, __utac_acc__Specification3_spec__1_#t~ret5, __utac_acc__Specification3_spec__1_#t~ret6, __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_#t~ret12, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 300869#L1794-24 __utac_acc__Specification3_spec__1_#t~ret1 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~15;havoc getCurrentHeading_~retValue_acc~15;getCurrentHeading_~retValue_acc~15 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~15; 300868#L1846-12 __utac_acc__Specification3_spec__1_#t~ret2 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret2;havoc __utac_acc__Specification3_spec__1_#t~ret2; 300867#L115-4 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 300866#L116-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~14;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~14; 266751#L1811-56 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~14 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~14; 264540#L1832-56 __utac_acc__Specification3_spec__1_#t~ret3 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~0 := __utac_acc__Specification3_spec__1_#t~ret3;havoc __utac_acc__Specification3_spec__1_#t~ret3; 268121#L120-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0;~expectedDirection~0 := 1; 268122#L221-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_#t~ret90, stopRequestedAtCurrentFloor_#t~ret91, stopRequestedAtCurrentFloor_#t~ret92, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~18, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~18;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret163, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 283425#L849-265 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 312778#L876-265 isExecutiveFloorCalling_#t~ret163 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret163;havoc isExecutiveFloorCalling_#t~ret163;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 312777#L3147-12 stopRequestedAtCurrentFloor_#t~ret89 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~18 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 312775#L2531-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~18;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 312776#L1794-25 stopRequestedAtCurrentFloor_#t~ret90 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret90;havoc stopRequestedAtCurrentFloor_#t~ret90; 312764#L2535-4 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 300809#L2548-4 timeShift_#t~ret105 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret105;havoc timeShift_#t~ret105; 300806#L2684-4 assume !(0 != timeShift_~tmp___9~3); 300807#L2775-12 assume 1 == ~doorState~0;~doorState~0 := 0; 300802#L2775-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~14, stopRequestedInDirection_~tmp___0~6, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~6;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~14;havoc stopRequestedInDirection_~tmp___0~6;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~6;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret163, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 300803#L849-268 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 313042#L876-268 isExecutiveFloorCalling_#t~ret163 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret163;havoc isExecutiveFloorCalling_#t~ret163;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 300413#L3147-13 stopRequestedInDirection_#t~ret80 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~6 := stopRequestedInDirection_#t~ret80;havoc stopRequestedInDirection_#t~ret80; 300414#L2386-8 assume 0 != stopRequestedInDirection_~tmp___0~6;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~12;havoc getCurrentFloorID_~retValue_acc~12;getCurrentFloorID_~retValue_acc~12 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~12; 300403#L1794-28 stopRequestedInDirection_#t~ret81 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~14 := stopRequestedInDirection_#t~ret81;havoc stopRequestedInDirection_#t~ret81;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~6 := (if stopRequestedInDirection_~tmp~14 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~21 := (if stopRequestedInDirection_~__cil_tmp8~6 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 300404#L2399-8 timeShift_#t~ret112 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 300395#L2783-4 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret83, continueInDirection_~dir, continueInDirection_~tmp~15;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~15;~currentHeading~0 := continueInDirection_~dir; 300397#L2443-12 assume 1 == ~currentHeading~0;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~7;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~7;isTopFloor_~retValue_acc~7 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~7; 313616#L1423-39 continueInDirection_#t~ret83 := isTopFloor_#res;continueInDirection_~tmp~15 := continueInDirection_#t~ret83;havoc continueInDirection_#t~ret83; 313609#L2447-36 assume !(0 != continueInDirection_~tmp~15); 313606#L2453-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 313600#L2459-29 havoc __utac_acc__Specification3_spec__2_#t~ret13, __utac_acc__Specification3_spec__2_#t~ret14, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 313599#L246-4 assume !(-1 == ~expectedDirection~0); 310548#L258-4 assume 1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~15;havoc getCurrentHeading_~retValue_acc~15;getCurrentHeading_~retValue_acc~15 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~15; 310539#L1846-14 __utac_acc__Specification3_spec__2_#t~ret14 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp~1 := __utac_acc__Specification3_spec__2_#t~ret14;havoc __utac_acc__Specification3_spec__2_#t~ret14; 310537#L263-8 assume !(0 == __utac_acc__Specification3_spec__2_~tmp~1); 310533#L259-4 cleanup_~i~3 := 1 + cleanup_~i~3; 310529#L3304-2 [2018-12-09 11:34:39,508 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-12-09 11:34:39,508 INFO L82 PathProgramCache]: Analyzing trace with hash 437044170, now seen corresponding path program 4 times [2018-12-09 11:34:39,509 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-09 11:34:39,509 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-09 11:34:39,509 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-09 11:34:39,509 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-12-09 11:34:39,509 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-09 11:34:39,519 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-09 11:34:39,553 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-09 11:34:39,553 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-09 11:34:39,553 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-12-09 11:34:39,554 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-12-09 11:34:39,554 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-12-09 11:34:39,554 INFO L82 PathProgramCache]: Analyzing trace with hash -2140336114, now seen corresponding path program 1 times [2018-12-09 11:34:39,554 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-09 11:34:39,554 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-09 11:34:39,555 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-09 11:34:39,555 INFO L101 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2018-12-09 11:34:39,555 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-09 11:34:39,561 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2018-12-09 11:34:39,568 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2018-12-09 11:34:40,071 WARN L180 SmtUtils]: Spent 471.00 ms on a formula simplification. DAG size of input: 210 DAG size of output: 188 [2018-12-09 11:34:40,581 WARN L180 SmtUtils]: Spent 490.00 ms on a formula simplification. DAG size of input: 174 DAG size of output: 144 [2018-12-09 11:34:40,588 INFO L216 LassoAnalysis]: Preferences: [2018-12-09 11:34:40,589 INFO L124 ssoRankerPreferences]: Compute integeral hull: false [2018-12-09 11:34:40,589 INFO L125 ssoRankerPreferences]: Enable LassoPartitioneer: true [2018-12-09 11:34:40,589 INFO L126 ssoRankerPreferences]: Term annotations enabled: false [2018-12-09 11:34:40,589 INFO L127 ssoRankerPreferences]: Use exernal solver: true [2018-12-09 11:34:40,589 INFO L128 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 11:34:40,589 INFO L129 ssoRankerPreferences]: Dump SMT script to file: false [2018-12-09 11:34:40,589 INFO L130 ssoRankerPreferences]: Path of dumped script: [2018-12-09 11:34:40,589 INFO L131 ssoRankerPreferences]: Filename of dumped script: elevator_spec3_product31_false-unreach-call_true-termination.cil.c_Iteration5_Loop [2018-12-09 11:34:40,590 INFO L132 ssoRankerPreferences]: MapElimAlgo: Frank [2018-12-09 11:34:40,590 INFO L282 LassoAnalysis]: Starting lasso preprocessing... [2018-12-09 11:34:40,608 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:40,612 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:40,613 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:40,614 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:40,615 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:40,616 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:40,630 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:40,631 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:40,639 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:40,643 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:40,644 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:40,647 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:40,650 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:40,651 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:40,652 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:40,655 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:40,656 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:40,658 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:40,659 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:40,660 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:40,661 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:40,663 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:40,664 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:40,665 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:40,666 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:40,667 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:40,668 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:40,669 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:40,670 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:40,671 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:40,672 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:40,674 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:40,675 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:40,678 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:40,683 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:40,684 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:40,687 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:40,689 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:40,689 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:40,691 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:40,692 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:40,692 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:40,696 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:40,697 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:40,697 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:40,698 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:40,699 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:40,700 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:40,702 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:40,703 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:40,704 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:40,705 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:40,706 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:40,707 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:40,709 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:40,710 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:40,731 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:40,733 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:40,734 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:40,735 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:40,740 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:40,741 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:40,745 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:40,753 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:40,754 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:40,755 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:40,756 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:40,757 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:40,758 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:40,759 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:40,762 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:40,763 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:40,767 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:40,768 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:40,770 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:40,771 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:40,772 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:40,773 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:40,774 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:40,775 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:40,776 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:40,779 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:40,780 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:40,781 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:40,787 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:41,169 INFO L300 LassoAnalysis]: Preprocessing complete. [2018-12-09 11:34:41,169 INFO L412 LassoAnalysis]: Checking for nontermination... No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_c86073a4-3492-4269-9a37-fba1051f5e9e/bin-2019/uautomizer/z3 Starting monitored process 2 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 2 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 11:34:41,174 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-09 11:34:41,174 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-09 11:34:41,179 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-09 11:34:41,179 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___6~3=0} Honda state: {ULTIMATE.start_timeShift_~tmp___6~3=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_c86073a4-3492-4269-9a37-fba1051f5e9e/bin-2019/uautomizer/z3 Starting monitored process 3 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 3 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 11:34:41,195 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-09 11:34:41,195 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-09 11:34:41,197 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-09 11:34:41,197 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_cleanup_#t~ret172=0} Honda state: {ULTIMATE.start_cleanup_#t~ret172=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_c86073a4-3492-4269-9a37-fba1051f5e9e/bin-2019/uautomizer/z3 Starting monitored process 4 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 4 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 11:34:41,211 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-09 11:34:41,212 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-09 11:34:41,214 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-09 11:34:41,214 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___5~3=0} Honda state: {ULTIMATE.start_timeShift_~tmp___5~3=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_c86073a4-3492-4269-9a37-fba1051f5e9e/bin-2019/uautomizer/z3 Starting monitored process 5 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 5 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 11:34:41,229 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-09 11:34:41,229 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-09 11:34:41,232 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-09 11:34:41,232 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__1_#t~ret10=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__1_#t~ret10=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_c86073a4-3492-4269-9a37-fba1051f5e9e/bin-2019/uautomizer/z3 Starting monitored process 6 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 6 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 11:34:41,251 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-09 11:34:41,251 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-09 11:34:41,253 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-09 11:34:41,253 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_anyStopRequested_#t~ret60=0} Honda state: {ULTIMATE.start_anyStopRequested_#t~ret60=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_c86073a4-3492-4269-9a37-fba1051f5e9e/bin-2019/uautomizer/z3 Starting monitored process 7 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 7 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 11:34:41,268 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-09 11:34:41,268 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-09 11:34:41,278 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-09 11:34:41,278 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_anyStopRequested_~tmp___3~1=-8, ULTIMATE.start_isFloorCalling_#res=-8, ~calls_0~0=-8, ULTIMATE.start_isExecutiveFloorCalling_#res=-8, ULTIMATE.start_stopRequestedAtCurrentFloor_~tmp~18=-8, ULTIMATE.start_isExecutiveFloorCalling_~retValue_acc~28=-8, ULTIMATE.start_stopRequestedInDirection_~tmp___0~6=-8, ULTIMATE.start_isFloorCalling_~retValue_acc~5=-8} Honda state: {ULTIMATE.start_anyStopRequested_~tmp___3~1=-8, ULTIMATE.start_isFloorCalling_#res=-8, ~calls_0~0=-8, ULTIMATE.start_isExecutiveFloorCalling_#res=-8, ULTIMATE.start_stopRequestedAtCurrentFloor_~tmp~18=-8, ULTIMATE.start_isExecutiveFloorCalling_~retValue_acc~28=-8, ULTIMATE.start_stopRequestedInDirection_~tmp___0~6=-8, ULTIMATE.start_isFloorCalling_~retValue_acc~5=-8} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_c86073a4-3492-4269-9a37-fba1051f5e9e/bin-2019/uautomizer/z3 Starting monitored process 8 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 8 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 11:34:41,304 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-09 11:34:41,304 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-09 11:34:41,307 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-09 11:34:41,307 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret114=0} Honda state: {ULTIMATE.start_timeShift_#t~ret114=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_c86073a4-3492-4269-9a37-fba1051f5e9e/bin-2019/uautomizer/z3 Starting monitored process 9 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 9 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 11:34:41,322 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-09 11:34:41,322 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-09 11:34:41,327 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-09 11:34:41,328 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_continueInDirection_#in~dir=1, ULTIMATE.start_getCurrentHeading_~retValue_acc~15=1, ~currentHeading~0=1, ULTIMATE.start___utac_acc__Specification3_spec__2_~tmp~1=1, ULTIMATE.start_continueInDirection_~dir=1, ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___10~0=1, ULTIMATE.start_getCurrentHeading_#res=1} Honda state: {ULTIMATE.start_continueInDirection_#in~dir=1, ULTIMATE.start_getCurrentHeading_~retValue_acc~15=1, ~currentHeading~0=1, ULTIMATE.start___utac_acc__Specification3_spec__2_~tmp~1=1, ULTIMATE.start_continueInDirection_~dir=1, ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___10~0=1, ULTIMATE.start_getCurrentHeading_#res=1} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_c86073a4-3492-4269-9a37-fba1051f5e9e/bin-2019/uautomizer/z3 Starting monitored process 10 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 10 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 11:34:41,343 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-09 11:34:41,343 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-09 11:34:41,346 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-09 11:34:41,346 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_cleanup_~tmp___0~13=0, ULTIMATE.start_isBlocked_~retValue_acc~11=0, ULTIMATE.start_isBlocked_#res=0} Honda state: {ULTIMATE.start_cleanup_~tmp___0~13=0, ULTIMATE.start_isBlocked_~retValue_acc~11=0, ULTIMATE.start_isBlocked_#res=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_c86073a4-3492-4269-9a37-fba1051f5e9e/bin-2019/uautomizer/z3 Starting monitored process 11 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 11 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 11:34:41,361 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-09 11:34:41,361 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-09 11:34:41,364 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-09 11:34:41,364 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__1_#t~ret5=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__1_#t~ret5=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_c86073a4-3492-4269-9a37-fba1051f5e9e/bin-2019/uautomizer/z3 Starting monitored process 12 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 12 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 11:34:41,379 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-09 11:34:41,379 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-09 11:34:41,382 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-09 11:34:41,382 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_anyStopRequested_#res=1, ULTIMATE.start_isIdle_~tmp~11=1, ULTIMATE.start_anyStopRequested_~retValue_acc~17=1} Honda state: {ULTIMATE.start_anyStopRequested_#res=1, ULTIMATE.start_isIdle_~tmp~11=1, ULTIMATE.start_anyStopRequested_~retValue_acc~17=1} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_c86073a4-3492-4269-9a37-fba1051f5e9e/bin-2019/uautomizer/z3 Starting monitored process 13 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 13 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 11:34:41,397 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-09 11:34:41,397 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-09 11:34:41,400 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-09 11:34:41,400 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_#in~respectFloorCalls=1, ULTIMATE.start_stopRequestedInDirection_~respectFloorCalls=1} Honda state: {ULTIMATE.start_stopRequestedInDirection_#in~respectFloorCalls=1, ULTIMATE.start_stopRequestedInDirection_~respectFloorCalls=1} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_c86073a4-3492-4269-9a37-fba1051f5e9e/bin-2019/uautomizer/z3 Starting monitored process 14 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 14 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 11:34:41,415 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-09 11:34:41,415 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-09 11:34:41,417 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-09 11:34:41,417 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {~expectedDirection~0=1} Honda state: {~expectedDirection~0=1} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_c86073a4-3492-4269-9a37-fba1051f5e9e/bin-2019/uautomizer/z3 Starting monitored process 15 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 15 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 11:34:41,433 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-09 11:34:41,433 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-09 11:34:41,435 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-09 11:34:41,435 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___6~0=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___6~0=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_c86073a4-3492-4269-9a37-fba1051f5e9e/bin-2019/uautomizer/z3 Starting monitored process 16 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 16 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 11:34:41,450 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-09 11:34:41,450 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-09 11:34:41,452 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-09 11:34:41,453 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_~__cil_tmp8~6=1, ULTIMATE.start_stopRequestedInDirection_~__cil_tmp7~5=1} Honda state: {ULTIMATE.start_stopRequestedInDirection_~__cil_tmp8~6=1, ULTIMATE.start_stopRequestedInDirection_~__cil_tmp7~5=1} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_c86073a4-3492-4269-9a37-fba1051f5e9e/bin-2019/uautomizer/z3 Starting monitored process 17 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 17 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 11:34:41,468 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-09 11:34:41,468 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-09 11:34:41,474 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-09 11:34:41,474 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__2_~tmp___0~1=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__2_~tmp___0~1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_c86073a4-3492-4269-9a37-fba1051f5e9e/bin-2019/uautomizer/z3 Starting monitored process 18 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 18 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 11:34:41,489 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-09 11:34:41,489 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-09 11:34:41,491 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-09 11:34:41,492 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___0~0=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___0~0=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_c86073a4-3492-4269-9a37-fba1051f5e9e/bin-2019/uautomizer/z3 Starting monitored process 19 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 19 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 11:34:41,507 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-09 11:34:41,507 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-09 11:34:41,509 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-09 11:34:41,509 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__1_#t~ret11=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__1_#t~ret11=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_c86073a4-3492-4269-9a37-fba1051f5e9e/bin-2019/uautomizer/z3 Starting monitored process 20 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 20 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 11:34:41,523 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-09 11:34:41,523 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-09 11:34:41,525 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-09 11:34:41,525 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__1_#t~ret4=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__1_#t~ret4=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_c86073a4-3492-4269-9a37-fba1051f5e9e/bin-2019/uautomizer/z3 Starting monitored process 21 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 21 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 11:34:41,540 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-09 11:34:41,540 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-09 11:34:41,542 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-09 11:34:41,542 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___1~6=0} Honda state: {ULTIMATE.start_timeShift_~tmp___1~6=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_c86073a4-3492-4269-9a37-fba1051f5e9e/bin-2019/uautomizer/z3 Starting monitored process 22 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 22 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 11:34:41,557 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-09 11:34:41,557 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-09 11:34:41,559 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-09 11:34:41,559 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_anyStopRequested_#t~ret59=0} Honda state: {ULTIMATE.start_anyStopRequested_#t~ret59=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_c86073a4-3492-4269-9a37-fba1051f5e9e/bin-2019/uautomizer/z3 Starting monitored process 23 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 23 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 11:34:42,238 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-09 11:34:42,239 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-09 11:34:42,241 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-09 11:34:42,241 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret111=0} Honda state: {ULTIMATE.start_timeShift_#t~ret111=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_c86073a4-3492-4269-9a37-fba1051f5e9e/bin-2019/uautomizer/z3 Starting monitored process 24 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 24 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 11:34:42,265 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-09 11:34:42,265 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-09 11:34:42,267 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-09 11:34:42,267 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_isExecutiveFloorCalling_#t~ret163=0} Honda state: {ULTIMATE.start_isExecutiveFloorCalling_#t~ret163=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_c86073a4-3492-4269-9a37-fba1051f5e9e/bin-2019/uautomizer/z3 Starting monitored process 25 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 25 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 11:34:42,282 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-09 11:34:42,282 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-09 11:34:42,284 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-09 11:34:42,285 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_cleanup_#t~ret171=0} Honda state: {ULTIMATE.start_cleanup_#t~ret171=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_c86073a4-3492-4269-9a37-fba1051f5e9e/bin-2019/uautomizer/z3 Starting monitored process 26 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 26 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 11:34:42,308 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-09 11:34:42,308 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-09 11:34:42,310 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-09 11:34:42,310 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret109=0} Honda state: {ULTIMATE.start_timeShift_#t~ret109=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_c86073a4-3492-4269-9a37-fba1051f5e9e/bin-2019/uautomizer/z3 Starting monitored process 27 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 27 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 11:34:42,324 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-09 11:34:42,324 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-09 11:34:42,326 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-09 11:34:42,327 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___3~4=0} Honda state: {ULTIMATE.start_timeShift_~tmp___3~4=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_c86073a4-3492-4269-9a37-fba1051f5e9e/bin-2019/uautomizer/z3 Starting monitored process 28 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 28 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 11:34:42,341 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-09 11:34:42,342 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-09 11:34:42,343 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-09 11:34:42,344 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_anyStopRequested_#t~ret61=0} Honda state: {ULTIMATE.start_anyStopRequested_#t~ret61=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_c86073a4-3492-4269-9a37-fba1051f5e9e/bin-2019/uautomizer/z3 Starting monitored process 29 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 29 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 11:34:42,358 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-09 11:34:42,359 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-09 11:34:42,361 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-09 11:34:42,361 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedAtCurrentFloor_#t~ret89=0} Honda state: {ULTIMATE.start_stopRequestedAtCurrentFloor_#t~ret89=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_c86073a4-3492-4269-9a37-fba1051f5e9e/bin-2019/uautomizer/z3 Starting monitored process 30 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 30 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 11:34:42,376 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-09 11:34:42,376 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-09 11:34:42,378 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-09 11:34:42,378 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__1_#t~ret7=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__1_#t~ret7=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_c86073a4-3492-4269-9a37-fba1051f5e9e/bin-2019/uautomizer/z3 Starting monitored process 31 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 31 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 11:34:42,392 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-09 11:34:42,392 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-09 11:34:42,394 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-09 11:34:42,394 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___0~11=0} Honda state: {ULTIMATE.start_timeShift_~tmp___0~11=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_c86073a4-3492-4269-9a37-fba1051f5e9e/bin-2019/uautomizer/z3 Starting monitored process 32 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 32 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 11:34:42,409 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-09 11:34:42,409 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-09 11:34:42,412 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-09 11:34:42,412 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_buttonForFloorIsPressed_~floorID=0} Honda state: {ULTIMATE.start_buttonForFloorIsPressed_~floorID=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_c86073a4-3492-4269-9a37-fba1051f5e9e/bin-2019/uautomizer/z3 Starting monitored process 33 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 33 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 11:34:42,426 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-09 11:34:42,426 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-09 11:34:42,428 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-09 11:34:42,428 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___1~0=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___1~0=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_c86073a4-3492-4269-9a37-fba1051f5e9e/bin-2019/uautomizer/z3 Starting monitored process 34 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 34 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 11:34:42,443 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-09 11:34:42,443 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-09 11:34:42,446 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-09 11:34:42,446 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_~respectInLiftCalls=1, ULTIMATE.start_stopRequestedInDirection_#in~respectInLiftCalls=1} Honda state: {ULTIMATE.start_stopRequestedInDirection_~respectInLiftCalls=1, ULTIMATE.start_stopRequestedInDirection_#in~respectInLiftCalls=1} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_c86073a4-3492-4269-9a37-fba1051f5e9e/bin-2019/uautomizer/z3 Starting monitored process 35 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 35 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 11:34:42,461 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-09 11:34:42,461 INFO L163 nArgumentSynthesizer]: Using integer mode. No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_c86073a4-3492-4269-9a37-fba1051f5e9e/bin-2019/uautomizer/z3 Starting monitored process 36 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 36 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 11:34:42,477 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 3 Nilpotent components: true [2018-12-09 11:34:42,477 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-09 11:34:42,931 INFO L452 LassoAnalysis]: Proving nontermination failed: No geometric nontermination argument exists. [2018-12-09 11:34:42,932 INFO L216 LassoAnalysis]: Preferences: [2018-12-09 11:34:42,932 INFO L124 ssoRankerPreferences]: Compute integeral hull: false [2018-12-09 11:34:42,932 INFO L125 ssoRankerPreferences]: Enable LassoPartitioneer: true [2018-12-09 11:34:42,933 INFO L126 ssoRankerPreferences]: Term annotations enabled: false [2018-12-09 11:34:42,933 INFO L127 ssoRankerPreferences]: Use exernal solver: false [2018-12-09 11:34:42,933 INFO L128 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 11:34:42,933 INFO L129 ssoRankerPreferences]: Dump SMT script to file: false [2018-12-09 11:34:42,933 INFO L130 ssoRankerPreferences]: Path of dumped script: [2018-12-09 11:34:42,933 INFO L131 ssoRankerPreferences]: Filename of dumped script: elevator_spec3_product31_false-unreach-call_true-termination.cil.c_Iteration5_Loop [2018-12-09 11:34:42,933 INFO L132 ssoRankerPreferences]: MapElimAlgo: Frank [2018-12-09 11:34:42,933 INFO L282 LassoAnalysis]: Starting lasso preprocessing... [2018-12-09 11:34:42,935 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:42,937 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:42,938 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:42,939 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:42,951 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:42,952 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:42,956 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:42,957 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:42,959 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:42,962 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:42,974 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:42,979 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:42,980 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:42,982 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:42,983 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:42,984 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:42,985 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:42,988 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:42,989 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:42,990 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:42,992 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:42,992 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:42,993 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:42,994 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:42,995 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:43,000 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:43,001 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:43,001 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:43,002 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:43,003 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:43,005 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:43,006 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:43,015 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:43,016 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:43,020 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:43,021 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:43,022 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:43,022 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:43,023 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:43,024 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:43,028 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:43,029 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:43,029 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:43,030 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:43,034 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:43,035 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:43,038 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:43,039 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:43,040 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:43,041 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:43,042 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:43,046 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:43,047 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:43,048 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:43,053 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:43,054 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:43,057 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:43,058 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:43,059 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:43,060 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:43,061 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:43,062 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:43,076 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:43,082 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:43,083 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:43,084 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:43,085 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:43,086 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:43,089 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:43,093 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:43,094 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:43,095 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:43,096 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:43,098 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:43,099 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:43,108 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:43,109 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:43,111 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:43,112 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:43,113 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:43,114 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:43,115 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:43,116 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:43,117 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:43,120 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 11:34:43,495 INFO L300 LassoAnalysis]: Preprocessing complete. [2018-12-09 11:34:43,498 INFO L497 LassoAnalysis]: Using template 'affine'. [2018-12-09 11:34:43,499 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-09 11:34:43,500 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-09 11:34:43,500 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-09 11:34:43,501 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-09 11:34:43,501 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-09 11:34:43,501 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-09 11:34:43,502 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-09 11:34:43,502 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-09 11:34:43,503 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-09 11:34:43,503 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-09 11:34:43,504 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-09 11:34:43,504 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-09 11:34:43,504 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-09 11:34:43,504 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-09 11:34:43,504 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-09 11:34:43,504 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-09 11:34:43,504 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-09 11:34:43,505 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-09 11:34:43,505 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-09 11:34:43,505 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-09 11:34:43,505 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-09 11:34:43,505 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-09 11:34:43,505 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-09 11:34:43,505 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-09 11:34:43,505 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-09 11:34:43,505 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-09 11:34:43,506 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-09 11:34:43,506 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-09 11:34:43,506 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-09 11:34:43,506 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-09 11:34:43,506 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-09 11:34:43,506 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-09 11:34:43,507 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-09 11:34:43,507 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-09 11:34:43,507 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-09 11:34:43,507 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-09 11:34:43,507 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-09 11:34:43,507 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-09 11:34:43,508 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-09 11:34:43,508 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-09 11:34:43,508 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-09 11:34:43,508 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-09 11:34:43,508 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-09 11:34:43,508 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-09 11:34:43,508 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-09 11:34:43,508 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-09 11:34:43,509 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-09 11:34:43,509 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-09 11:34:43,509 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-09 11:34:43,509 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-09 11:34:43,509 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-09 11:34:43,509 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-09 11:34:43,509 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-09 11:34:43,510 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-09 11:34:43,510 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-09 11:34:43,510 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-09 11:34:43,510 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-09 11:34:43,511 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-09 11:34:43,511 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-09 11:34:43,511 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-09 11:34:43,511 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-09 11:34:43,511 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-09 11:34:43,511 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-09 11:34:43,511 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-09 11:34:43,512 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-09 11:34:43,512 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-09 11:34:43,512 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-09 11:34:43,512 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-09 11:34:43,512 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-09 11:34:43,512 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-09 11:34:43,512 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-09 11:34:43,512 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-09 11:34:43,513 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-09 11:34:43,513 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-09 11:34:43,513 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-09 11:34:43,513 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-09 11:34:43,513 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-09 11:34:43,513 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-09 11:34:43,513 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-09 11:34:43,513 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-09 11:34:43,514 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-09 11:34:43,515 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-09 11:34:43,515 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-09 11:34:43,515 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-09 11:34:43,515 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-09 11:34:43,515 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-09 11:34:43,515 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-09 11:34:43,516 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-09 11:34:43,516 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-09 11:34:43,518 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-09 11:34:43,518 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-09 11:34:43,519 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-09 11:34:43,519 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-09 11:34:43,519 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-09 11:34:43,519 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-09 11:34:43,519 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-09 11:34:43,519 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-09 11:34:43,519 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-09 11:34:43,520 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-09 11:34:43,521 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-09 11:34:43,521 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-09 11:34:43,521 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-09 11:34:43,521 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-09 11:34:43,521 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-09 11:34:43,521 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-09 11:34:43,521 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-09 11:34:43,521 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-09 11:34:43,522 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-09 11:34:43,522 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-09 11:34:43,522 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-09 11:34:43,522 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-09 11:34:43,522 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-09 11:34:43,522 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-09 11:34:43,522 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-09 11:34:43,522 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-09 11:34:43,523 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-09 11:34:43,523 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-09 11:34:43,523 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-09 11:34:43,523 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-09 11:34:43,523 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-09 11:34:43,523 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-09 11:34:43,523 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-09 11:34:43,523 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-09 11:34:43,524 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-09 11:34:43,524 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-09 11:34:43,524 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-09 11:34:43,524 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-09 11:34:43,525 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-09 11:34:43,525 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-09 11:34:43,525 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-09 11:34:43,525 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-09 11:34:43,525 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-09 11:34:43,525 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-09 11:34:43,525 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-09 11:34:43,526 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-09 11:34:43,526 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-09 11:34:43,526 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-09 11:34:43,526 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-09 11:34:43,526 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-09 11:34:43,526 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-09 11:34:43,526 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-09 11:34:43,526 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-09 11:34:43,526 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-09 11:34:43,527 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-09 11:34:43,527 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-09 11:34:43,527 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-09 11:34:43,527 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-09 11:34:43,527 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-09 11:34:43,527 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-09 11:34:43,528 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-09 11:34:43,528 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-09 11:34:43,528 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-09 11:34:43,529 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-09 11:34:43,529 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-09 11:34:43,529 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-09 11:34:43,529 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-09 11:34:43,530 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-09 11:34:43,530 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-09 11:34:43,530 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-09 11:34:43,530 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-09 11:34:43,530 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-09 11:34:43,530 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-09 11:34:43,531 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-09 11:34:43,531 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-09 11:34:43,531 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-09 11:34:43,531 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-09 11:34:43,531 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-09 11:34:43,531 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-09 11:34:43,531 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-09 11:34:43,531 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-09 11:34:43,532 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-09 11:34:43,532 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-09 11:34:43,532 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-09 11:34:43,532 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-09 11:34:43,532 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-09 11:34:43,532 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-09 11:34:43,532 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-09 11:34:43,532 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-09 11:34:43,532 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-09 11:34:43,533 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-09 11:34:43,533 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-09 11:34:43,533 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-09 11:34:43,533 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-09 11:34:43,533 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-09 11:34:43,533 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-09 11:34:43,533 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-09 11:34:43,534 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-09 11:34:43,534 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-09 11:34:43,534 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-09 11:34:43,534 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-09 11:34:43,534 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-09 11:34:43,535 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-09 11:34:43,535 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-09 11:34:43,535 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-09 11:34:43,535 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-09 11:34:43,535 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-09 11:34:43,535 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-09 11:34:43,535 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-09 11:34:43,535 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-09 11:34:43,536 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-09 11:34:43,536 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-09 11:34:43,536 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-09 11:34:43,536 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-09 11:34:43,536 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-09 11:34:43,536 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-09 11:34:43,536 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-09 11:34:43,536 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-09 11:34:43,537 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-09 11:34:43,537 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-09 11:34:43,537 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-09 11:34:43,537 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-09 11:34:43,537 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-09 11:34:43,537 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-09 11:34:43,537 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-09 11:34:43,537 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-09 11:34:43,538 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-09 11:34:43,538 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-09 11:34:43,538 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-09 11:34:43,538 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-09 11:34:43,538 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-09 11:34:43,538 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-09 11:34:43,538 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-09 11:34:43,539 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-09 11:34:43,539 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-09 11:34:43,540 INFO L421 nArgumentSynthesizer]: Found a termination argument, trying to simplify. [2018-12-09 11:34:43,542 INFO L443 ModelExtractionUtils]: Simplification made 4 calls to the SMT solver. [2018-12-09 11:34:43,543 INFO L444 ModelExtractionUtils]: 1 out of 5 variables were initially zero. Simplification set additionally 1 variables to zero. [2018-12-09 11:34:43,544 INFO L437 nArgumentSynthesizer]: Simplifying supporting invariants... [2018-12-09 11:34:43,544 INFO L440 nArgumentSynthesizer]: Removed 0 redundant supporting invariants from a total of 0. [2018-12-09 11:34:43,544 INFO L518 LassoAnalysis]: Proved termination. [2018-12-09 11:34:43,544 INFO L520 LassoAnalysis]: Termination argument consisting of: Ranking function f(~cleanupTimeShifts~0, ULTIMATE.start_cleanup_~i~3) = 1*~cleanupTimeShifts~0 - 1*ULTIMATE.start_cleanup_~i~3 Supporting invariants [] [2018-12-09 11:34:43,545 INFO L297 tatePredicateManager]: 0 out of 0 supporting invariants were superfluous and have been removed [2018-12-09 11:34:43,561 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-12-09 11:34:43,683 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-09 11:34:43,692 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-12-09 11:34:43,731 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-09 11:34:43,733 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-12-09 11:34:43,757 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-09 11:34:43,760 INFO L152 lantAutomatonBouncer]: Defining deterministic Buchi interpolant automaton with honda bouncer for stem and without honda bouncer for loop.1 stem predicates 3 loop predicates [2018-12-09 11:34:43,760 INFO L72 iDifferenceNCSBLazy3]: Start buchiDifferenceNCSBLazy3. First operand 61077 states and 112496 transitions. cyclomatic complexity: 51420 Second operand 5 states. [2018-12-09 11:34:44,273 INFO L76 iDifferenceNCSBLazy3]: Finished buchiDifferenceNCSBLazy3. First operand 61077 states and 112496 transitions. cyclomatic complexity: 51420. Second operand 5 states. Result 74801 states and 137718 transitions. Complement of second has 8 states. [2018-12-09 11:34:44,273 INFO L142 InterpolantAutomaton]: Switched to read-only mode: Buchi interpolant automaton has 5 states 1 stem states 3 non-accepting loop states 1 accepting loop states [2018-12-09 11:34:44,273 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2018-12-09 11:34:44,284 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 17368 transitions. [2018-12-09 11:34:44,285 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 5 states and 17368 transitions. Stem has 149 letters. Loop has 47 letters. [2018-12-09 11:34:44,286 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2018-12-09 11:34:44,286 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 5 states and 17368 transitions. Stem has 196 letters. Loop has 47 letters. [2018-12-09 11:34:44,287 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2018-12-09 11:34:44,287 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 5 states and 17368 transitions. Stem has 149 letters. Loop has 94 letters. [2018-12-09 11:34:44,288 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2018-12-09 11:34:44,288 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 74801 states and 137718 transitions. [2018-12-09 11:34:44,479 INFO L131 ngComponentsAnalysis]: Automaton has 0 accepting balls. 0 [2018-12-09 11:34:44,479 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 74801 states to 0 states and 0 transitions. [2018-12-09 11:34:44,480 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 0 [2018-12-09 11:34:44,480 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 0 [2018-12-09 11:34:44,480 INFO L73 IsDeterministic]: Start isDeterministic. Operand 0 states and 0 transitions. [2018-12-09 11:34:44,480 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-12-09 11:34:44,480 INFO L705 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2018-12-09 11:34:44,480 INFO L728 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2018-12-09 11:34:44,480 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-12-09 11:34:44,480 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-12-09 11:34:44,480 INFO L87 Difference]: Start difference. First operand 0 states and 0 transitions. Second operand 4 states. [2018-12-09 11:34:44,480 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-12-09 11:34:44,480 INFO L93 Difference]: Finished difference Result 0 states and 0 transitions. [2018-12-09 11:34:44,480 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2018-12-09 11:34:44,480 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 0 states and 0 transitions. [2018-12-09 11:34:44,480 INFO L131 ngComponentsAnalysis]: Automaton has 0 accepting balls. 0 [2018-12-09 11:34:44,481 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 0 states to 0 states and 0 transitions. [2018-12-09 11:34:44,481 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 0 [2018-12-09 11:34:44,481 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 0 [2018-12-09 11:34:44,481 INFO L73 IsDeterministic]: Start isDeterministic. Operand 0 states and 0 transitions. [2018-12-09 11:34:44,481 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-12-09 11:34:44,481 INFO L705 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2018-12-09 11:34:44,481 INFO L728 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2018-12-09 11:34:44,481 INFO L608 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2018-12-09 11:34:44,481 INFO L442 BuchiCegarLoop]: ======== Iteration 6============ [2018-12-09 11:34:44,481 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 0 states and 0 transitions. [2018-12-09 11:34:44,481 INFO L131 ngComponentsAnalysis]: Automaton has 0 accepting balls. 0 [2018-12-09 11:34:44,481 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is true [2018-12-09 11:34:44,485 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer CFG 09.12 11:34:44 BoogieIcfgContainer [2018-12-09 11:34:44,486 INFO L132 PluginConnector]: ------------------------ END BuchiAutomizer---------------------------- [2018-12-09 11:34:44,486 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2018-12-09 11:34:44,486 INFO L271 PluginConnector]: Initializing Witness Printer... [2018-12-09 11:34:44,486 INFO L276 PluginConnector]: Witness Printer initialized [2018-12-09 11:34:44,486 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 09.12 11:34:11" (3/4) ... [2018-12-09 11:34:44,489 INFO L147 WitnessPrinter]: No result that supports witness generation found [2018-12-09 11:34:44,489 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2018-12-09 11:34:44,490 INFO L168 Benchmark]: Toolchain (without parser) took 41600.36 ms. Allocated memory was 1.0 GB in the beginning and 4.2 GB in the end (delta: 3.2 GB). Free memory was 951.7 MB in the beginning and 2.1 GB in the end (delta: -1.2 GB). Peak memory consumption was 2.0 GB. Max. memory is 11.5 GB. [2018-12-09 11:34:44,490 INFO L168 Benchmark]: CDTParser took 0.11 ms. Allocated memory is still 1.0 GB. Free memory is still 979.6 MB. There was no memory consumed. Max. memory is 11.5 GB. [2018-12-09 11:34:44,490 INFO L168 Benchmark]: CACSL2BoogieTranslator took 475.53 ms. Allocated memory was 1.0 GB in the beginning and 1.1 GB in the end (delta: 119.0 MB). Free memory was 951.7 MB in the beginning and 1.1 GB in the end (delta: -115.7 MB). Peak memory consumption was 43.1 MB. Max. memory is 11.5 GB. [2018-12-09 11:34:44,491 INFO L168 Benchmark]: Boogie Procedure Inliner took 238.00 ms. Allocated memory is still 1.1 GB. Free memory was 1.1 GB in the beginning and 965.5 MB in the end (delta: 101.9 MB). Peak memory consumption was 101.9 MB. Max. memory is 11.5 GB. [2018-12-09 11:34:44,491 INFO L168 Benchmark]: Boogie Preprocessor took 268.68 ms. Allocated memory is still 1.1 GB. Free memory was 965.5 MB in the beginning and 883.8 MB in the end (delta: 81.6 MB). Peak memory consumption was 81.6 MB. Max. memory is 11.5 GB. [2018-12-09 11:34:44,491 INFO L168 Benchmark]: RCFGBuilder took 7398.14 ms. Allocated memory was 1.1 GB in the beginning and 1.6 GB in the end (delta: 501.7 MB). Free memory was 883.8 MB in the beginning and 1.4 GB in the end (delta: -519.9 MB). Peak memory consumption was 663.6 MB. Max. memory is 11.5 GB. [2018-12-09 11:34:44,491 INFO L168 Benchmark]: BuchiAutomizer took 33214.29 ms. Allocated memory was 1.6 GB in the beginning and 4.2 GB in the end (delta: 2.6 GB). Free memory was 1.4 GB in the beginning and 2.1 GB in the end (delta: -737.2 MB). Peak memory consumption was 1.8 GB. Max. memory is 11.5 GB. [2018-12-09 11:34:44,492 INFO L168 Benchmark]: Witness Printer took 3.21 ms. Allocated memory is still 4.2 GB. Free memory is still 2.1 GB. There was no memory consumed. Max. memory is 11.5 GB. [2018-12-09 11:34:44,493 INFO L336 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.11 ms. Allocated memory is still 1.0 GB. Free memory is still 979.6 MB. There was no memory consumed. Max. memory is 11.5 GB. * CACSL2BoogieTranslator took 475.53 ms. Allocated memory was 1.0 GB in the beginning and 1.1 GB in the end (delta: 119.0 MB). Free memory was 951.7 MB in the beginning and 1.1 GB in the end (delta: -115.7 MB). Peak memory consumption was 43.1 MB. Max. memory is 11.5 GB. * Boogie Procedure Inliner took 238.00 ms. Allocated memory is still 1.1 GB. Free memory was 1.1 GB in the beginning and 965.5 MB in the end (delta: 101.9 MB). Peak memory consumption was 101.9 MB. Max. memory is 11.5 GB. * Boogie Preprocessor took 268.68 ms. Allocated memory is still 1.1 GB. Free memory was 965.5 MB in the beginning and 883.8 MB in the end (delta: 81.6 MB). Peak memory consumption was 81.6 MB. Max. memory is 11.5 GB. * RCFGBuilder took 7398.14 ms. Allocated memory was 1.1 GB in the beginning and 1.6 GB in the end (delta: 501.7 MB). Free memory was 883.8 MB in the beginning and 1.4 GB in the end (delta: -519.9 MB). Peak memory consumption was 663.6 MB. Max. memory is 11.5 GB. * BuchiAutomizer took 33214.29 ms. Allocated memory was 1.6 GB in the beginning and 4.2 GB in the end (delta: 2.6 GB). Free memory was 1.4 GB in the beginning and 2.1 GB in the end (delta: -737.2 MB). Peak memory consumption was 1.8 GB. Max. memory is 11.5 GB. * Witness Printer took 3.21 ms. Allocated memory is still 4.2 GB. Free memory is still 2.1 GB. There was no memory consumed. Max. memory is 11.5 GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: Constructed decomposition of program Your program was decomposed into 6 terminating modules (5 trivial, 1 deterministic, 0 nondeterministic). One deterministic module has affine ranking function cleanupTimeShifts + -1 * i and consists of 5 locations. 5 modules have a trivial ranking function, the largest among these consists of 15 locations. - StatisticsResult: Timing statistics BüchiAutomizer plugin needed 33.1s and 6 iterations. TraceHistogramMax:1. Analysis of lassos took 4.7s. Construction of modules took 16.6s. Büchi inclusion checks took 8.4s. Highest rank in rank-based complementation 3. Minimization of det autom 6. Minimization of nondet autom 0. Automata minimization 1.5s AutomataMinimizationTime, 4 MinimizatonAttempts, 26342 StatesRemovedByMinimization, 4 NontrivialMinimizations. Non-live state removal took 1.0s Buchi closure took 0.0s. Biggest automaton had 61077 states and ocurred in iteration 4. Nontrivial modules had stage [1, 0, 0, 0, 0]. InterpolantCoveringCapabilityFinite: 0/0 InterpolantCoveringCapabilityBuchi: 0/0 HoareTripleCheckerStatistics: 117642 SDtfs, 363923 SDslu, 342685 SDs, 0 SdLazy, 32704 SolverSat, 2852 SolverUnsat, 0 SolverUnknown, 0 SolverNotchecked, 16.6s Time LassoAnalysisResults: nont0 unkn0 SFLI0 SFLT0 conc0 concLT0 SILN0 SILU0 SILI4 SILT1 lasso0 LassoPreprocessingBenchmarks: Lassos: inital211 mio100 ax100 hnf100 lsp17 ukn100 mio100 lsp100 div100 bol100 ite100 ukn100 eq213 hnf87 smp100 dnf139 smp100 tf102 neg97 sie104 LassoTerminationAnalysisBenchmarks: ConstraintsSatisfiability: unsat Degree: 0 Time: 4ms VariablesStem: 0 VariablesLoop: 0 DisjunctsStem: 1 DisjunctsLoop: 1 SupportingInvariants: 0 MotzkinApplications: 2 LassoTerminationAnalysisBenchmarks: LassoNonterminationAnalysisSatFixpoint: 33 LassoNonterminationAnalysisSatUnbounded: 0 LassoNonterminationAnalysisUnsat: 1 LassoNonterminationAnalysisUnknown: 0 LassoNonterminationAnalysisTime: 1.2s - TerminationAnalysisResult: Termination proven Buchi Automizer proved that your program is terminating RESULT: Ultimate proved your program to be correct! Received shutdown request...