./Ultimate.py --spec ../../sv-benchmarks/c/properties/termination.prp --file ../../sv-benchmarks/c/product-lines/elevator_spec14_product11.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for termination Using default analysis Version cad46833 Calling Ultimate with: /usr/lib/jvm/java-8-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud-vcloud-master/worker/run_dir_fa805ef5-170e-4492-8306-00375ee37692/bin/uautomizer/data/config -Xmx12G -Xms1G -jar /tmp/vcloud-vcloud-master/worker/run_dir_fa805ef5-170e-4492-8306-00375ee37692/bin/uautomizer/plugins/org.eclipse.equinox.launcher_1.3.100.v20150511-1540.jar -data @noDefault -ultimatedata /tmp/vcloud-vcloud-master/worker/run_dir_fa805ef5-170e-4492-8306-00375ee37692/bin/uautomizer/data -tc /tmp/vcloud-vcloud-master/worker/run_dir_fa805ef5-170e-4492-8306-00375ee37692/bin/uautomizer/config/AutomizerTermination.xml -i ../../sv-benchmarks/c/product-lines/elevator_spec14_product11.cil.c -s /tmp/vcloud-vcloud-master/worker/run_dir_fa805ef5-170e-4492-8306-00375ee37692/bin/uautomizer/config/svcomp-Termination-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud-vcloud-master/worker/run_dir_fa805ef5-170e-4492-8306-00375ee37692/bin/uautomizer --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(F end) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 116090a272b57b465523f0b05812b6f6c1ef6b75 .................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................. Execution finished normally Writing output log to file Ultimate.log Result: TRUE --- Real Ultimate output --- This is Ultimate 0.1.24-cad4683 [2019-11-15 22:31:10,740 INFO L177 SettingsManager]: Resetting all preferences to default values... [2019-11-15 22:31:10,742 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2019-11-15 22:31:10,752 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2019-11-15 22:31:10,753 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2019-11-15 22:31:10,753 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2019-11-15 22:31:10,755 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2019-11-15 22:31:10,757 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2019-11-15 22:31:10,758 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2019-11-15 22:31:10,759 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2019-11-15 22:31:10,760 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2019-11-15 22:31:10,761 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2019-11-15 22:31:10,762 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2019-11-15 22:31:10,762 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2019-11-15 22:31:10,763 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2019-11-15 22:31:10,764 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2019-11-15 22:31:10,765 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2019-11-15 22:31:10,766 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2019-11-15 22:31:10,767 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2019-11-15 22:31:10,769 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2019-11-15 22:31:10,771 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2019-11-15 22:31:10,772 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2019-11-15 22:31:10,773 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2019-11-15 22:31:10,773 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2019-11-15 22:31:10,776 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2019-11-15 22:31:10,776 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2019-11-15 22:31:10,776 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2019-11-15 22:31:10,777 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2019-11-15 22:31:10,777 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2019-11-15 22:31:10,778 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2019-11-15 22:31:10,779 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2019-11-15 22:31:10,779 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2019-11-15 22:31:10,780 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2019-11-15 22:31:10,781 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2019-11-15 22:31:10,782 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2019-11-15 22:31:10,782 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2019-11-15 22:31:10,782 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2019-11-15 22:31:10,783 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2019-11-15 22:31:10,783 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2019-11-15 22:31:10,784 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2019-11-15 22:31:10,784 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2019-11-15 22:31:10,785 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud-vcloud-master/worker/run_dir_fa805ef5-170e-4492-8306-00375ee37692/bin/uautomizer/config/svcomp-Termination-32bit-Automizer_Default.epf [2019-11-15 22:31:10,799 INFO L113 SettingsManager]: Loading preferences was successful [2019-11-15 22:31:10,800 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2019-11-15 22:31:10,801 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2019-11-15 22:31:10,801 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2019-11-15 22:31:10,801 INFO L138 SettingsManager]: * Use SBE=true [2019-11-15 22:31:10,802 INFO L136 SettingsManager]: Preferences of BuchiAutomizer differ from their defaults: [2019-11-15 22:31:10,802 INFO L138 SettingsManager]: * NCSB implementation=INTSET_LAZY3 [2019-11-15 22:31:10,802 INFO L138 SettingsManager]: * Use old map elimination=false [2019-11-15 22:31:10,802 INFO L138 SettingsManager]: * Use external solver (rank synthesis)=false [2019-11-15 22:31:10,803 INFO L138 SettingsManager]: * Use only trivial implications for array writes=true [2019-11-15 22:31:10,803 INFO L138 SettingsManager]: * Rank analysis=LINEAR_WITH_GUESSES [2019-11-15 22:31:10,803 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2019-11-15 22:31:10,803 INFO L138 SettingsManager]: * sizeof long=4 [2019-11-15 22:31:10,804 INFO L138 SettingsManager]: * Check unreachability of error function in SV-COMP mode=false [2019-11-15 22:31:10,804 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2019-11-15 22:31:10,804 INFO L138 SettingsManager]: * sizeof POINTER=4 [2019-11-15 22:31:10,804 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2019-11-15 22:31:10,805 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=ASSUME [2019-11-15 22:31:10,805 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=ASSUME [2019-11-15 22:31:10,805 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=ASSUME [2019-11-15 22:31:10,805 INFO L138 SettingsManager]: * sizeof long double=12 [2019-11-15 22:31:10,806 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2019-11-15 22:31:10,806 INFO L138 SettingsManager]: * Assume nondeterminstic values are in range=false [2019-11-15 22:31:10,806 INFO L138 SettingsManager]: * Use constant arrays=true [2019-11-15 22:31:10,806 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=ASSUME [2019-11-15 22:31:10,806 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2019-11-15 22:31:10,807 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2019-11-15 22:31:10,807 INFO L138 SettingsManager]: * To the following directory=/home/matthias/ultimate/dump [2019-11-15 22:31:10,807 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2019-11-15 22:31:10,807 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2019-11-15 22:31:10,808 INFO L138 SettingsManager]: * Dump automata to the following directory=/home/matthias/ultimate/dump/auto [2019-11-15 22:31:10,809 INFO L136 SettingsManager]: Preferences of IcfgTransformer differ from their defaults: [2019-11-15 22:31:10,809 INFO L138 SettingsManager]: * TransformationType=MODULO_NEIGHBOR Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud-vcloud-master/worker/run_dir_fa805ef5-170e-4492-8306-00375ee37692/bin/uautomizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(F end) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 116090a272b57b465523f0b05812b6f6c1ef6b75 [2019-11-15 22:31:10,833 INFO L81 nceAwareModelManager]: Repository-Root is: /tmp [2019-11-15 22:31:10,843 INFO L258 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2019-11-15 22:31:10,845 INFO L214 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2019-11-15 22:31:10,847 INFO L271 PluginConnector]: Initializing CDTParser... [2019-11-15 22:31:10,847 INFO L275 PluginConnector]: CDTParser initialized [2019-11-15 22:31:10,848 INFO L428 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud-vcloud-master/worker/run_dir_fa805ef5-170e-4492-8306-00375ee37692/bin/uautomizer/../../sv-benchmarks/c/product-lines/elevator_spec14_product11.cil.c [2019-11-15 22:31:10,898 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud-vcloud-master/worker/run_dir_fa805ef5-170e-4492-8306-00375ee37692/bin/uautomizer/data/daa80b87c/e9a436020e5542e3b37b1d539b4a2c60/FLAGf242fbe92 [2019-11-15 22:31:11,460 INFO L306 CDTParser]: Found 1 translation units. [2019-11-15 22:31:11,461 INFO L160 CDTParser]: Scanning /tmp/vcloud-vcloud-master/worker/run_dir_fa805ef5-170e-4492-8306-00375ee37692/sv-benchmarks/c/product-lines/elevator_spec14_product11.cil.c [2019-11-15 22:31:11,481 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud-vcloud-master/worker/run_dir_fa805ef5-170e-4492-8306-00375ee37692/bin/uautomizer/data/daa80b87c/e9a436020e5542e3b37b1d539b4a2c60/FLAGf242fbe92 [2019-11-15 22:31:11,915 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud-vcloud-master/worker/run_dir_fa805ef5-170e-4492-8306-00375ee37692/bin/uautomizer/data/daa80b87c/e9a436020e5542e3b37b1d539b4a2c60 [2019-11-15 22:31:11,918 INFO L296 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2019-11-15 22:31:11,919 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2019-11-15 22:31:11,920 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2019-11-15 22:31:11,920 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2019-11-15 22:31:11,923 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2019-11-15 22:31:11,924 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 15.11 10:31:11" (1/1) ... [2019-11-15 22:31:11,927 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@639d099c and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.11 10:31:11, skipping insertion in model container [2019-11-15 22:31:11,927 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 15.11 10:31:11" (1/1) ... [2019-11-15 22:31:11,934 INFO L142 MainTranslator]: Starting translation in SV-COMP mode [2019-11-15 22:31:12,003 INFO L173 MainTranslator]: Built tables and reachable declarations [2019-11-15 22:31:12,608 INFO L206 PostProcessor]: Analyzing one entry point: main [2019-11-15 22:31:12,629 INFO L188 MainTranslator]: Completed pre-run [2019-11-15 22:31:12,753 INFO L206 PostProcessor]: Analyzing one entry point: main [2019-11-15 22:31:12,807 INFO L192 MainTranslator]: Completed translation [2019-11-15 22:31:12,808 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.11 10:31:12 WrapperNode [2019-11-15 22:31:12,808 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2019-11-15 22:31:12,808 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2019-11-15 22:31:12,809 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2019-11-15 22:31:12,809 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2019-11-15 22:31:12,816 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.11 10:31:12" (1/1) ... [2019-11-15 22:31:12,845 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.11 10:31:12" (1/1) ... [2019-11-15 22:31:13,092 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2019-11-15 22:31:13,092 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2019-11-15 22:31:13,093 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2019-11-15 22:31:13,093 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2019-11-15 22:31:13,102 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.11 10:31:12" (1/1) ... [2019-11-15 22:31:13,102 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.11 10:31:12" (1/1) ... [2019-11-15 22:31:13,141 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.11 10:31:12" (1/1) ... [2019-11-15 22:31:13,141 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.11 10:31:12" (1/1) ... [2019-11-15 22:31:13,265 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.11 10:31:12" (1/1) ... [2019-11-15 22:31:13,400 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.11 10:31:12" (1/1) ... [2019-11-15 22:31:13,436 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.11 10:31:12" (1/1) ... [2019-11-15 22:31:13,488 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2019-11-15 22:31:13,491 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2019-11-15 22:31:13,491 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2019-11-15 22:31:13,491 INFO L275 PluginConnector]: RCFGBuilder initialized [2019-11-15 22:31:13,492 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.11 10:31:12" (1/1) ... No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_fa805ef5-170e-4492-8306-00375ee37692/bin/uautomizer/z3 Starting monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-15 22:31:13,562 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2019-11-15 22:31:13,562 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2019-11-15 22:31:13,563 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2019-11-15 22:31:13,563 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2019-11-15 22:31:24,265 INFO L279 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2019-11-15 22:31:24,265 INFO L284 CfgBuilder]: Removed 1263 assume(true) statements. [2019-11-15 22:31:24,269 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 15.11 10:31:24 BoogieIcfgContainer [2019-11-15 22:31:24,269 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2019-11-15 22:31:24,270 INFO L113 PluginConnector]: ------------------------BuchiAutomizer---------------------------- [2019-11-15 22:31:24,270 INFO L271 PluginConnector]: Initializing BuchiAutomizer... [2019-11-15 22:31:24,273 INFO L275 PluginConnector]: BuchiAutomizer initialized [2019-11-15 22:31:24,274 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2019-11-15 22:31:24,274 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "CDTParser AST 15.11 10:31:11" (1/3) ... [2019-11-15 22:31:24,275 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@7d912 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 15.11 10:31:24, skipping insertion in model container [2019-11-15 22:31:24,275 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2019-11-15 22:31:24,275 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.11 10:31:12" (2/3) ... [2019-11-15 22:31:24,276 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@7d912 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 15.11 10:31:24, skipping insertion in model container [2019-11-15 22:31:24,276 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2019-11-15 22:31:24,276 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 15.11 10:31:24" (3/3) ... [2019-11-15 22:31:24,278 INFO L371 chiAutomizerObserver]: Analyzing ICFG elevator_spec14_product11.cil.c [2019-11-15 22:31:24,322 INFO L356 BuchiCegarLoop]: Interprodecural is true [2019-11-15 22:31:24,323 INFO L357 BuchiCegarLoop]: Hoare is false [2019-11-15 22:31:24,323 INFO L358 BuchiCegarLoop]: Compute interpolants for ForwardPredicates [2019-11-15 22:31:24,323 INFO L359 BuchiCegarLoop]: Backedges is STRAIGHT_LINE [2019-11-15 22:31:24,323 INFO L360 BuchiCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2019-11-15 22:31:24,323 INFO L361 BuchiCegarLoop]: Difference is false [2019-11-15 22:31:24,323 INFO L362 BuchiCegarLoop]: Minimize is MINIMIZE_SEVPA [2019-11-15 22:31:24,323 INFO L365 BuchiCegarLoop]: ======== Iteration 0==of CEGAR loop == BuchiCegarLoop======== [2019-11-15 22:31:24,406 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 5692 states. [2019-11-15 22:31:24,520 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1156 [2019-11-15 22:31:24,520 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2019-11-15 22:31:24,520 INFO L119 BuchiIsEmpty]: Starting construction of run [2019-11-15 22:31:24,538 INFO L849 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-15 22:31:24,539 INFO L850 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-15 22:31:24,539 INFO L424 BuchiCegarLoop]: ======== Iteration 1============ [2019-11-15 22:31:24,539 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 5692 states. [2019-11-15 22:31:24,601 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1156 [2019-11-15 22:31:24,601 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2019-11-15 22:31:24,601 INFO L119 BuchiIsEmpty]: Starting construction of run [2019-11-15 22:31:24,606 INFO L849 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-15 22:31:24,606 INFO L850 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-15 22:31:24,615 INFO L791 eck$LassoCheckResult]: Stem: 3154#ULTIMATE.startENTRYtrue #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;call #t~string43.base, #t~string43.offset := #Ultimate.allocOnStack(30);call #t~string44.base, #t~string44.offset := #Ultimate.allocOnStack(9);call #t~string45.base, #t~string45.offset := #Ultimate.allocOnStack(21);call #t~string46.base, #t~string46.offset := #Ultimate.allocOnStack(30);call #t~string47.base, #t~string47.offset := #Ultimate.allocOnStack(9);call #t~string48.base, #t~string48.offset := #Ultimate.allocOnStack(21);call #t~string52.base, #t~string52.offset := #Ultimate.allocOnStack(30);call #t~string53.base, #t~string53.offset := #Ultimate.allocOnStack(9);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(25);call #t~string55.base, #t~string55.offset := #Ultimate.allocOnStack(30);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(9);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(25);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string111.base, #t~string111.offset := #Ultimate.allocOnStack(10);call #t~string113.base, #t~string113.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string113.base, #t~string113.offset, 1);call write~init~int(95, #t~string113.base, 1 + #t~string113.offset, 1);call write~init~int(93, #t~string113.base, 2 + #t~string113.offset, 1);call write~init~int(0, #t~string113.base, 3 + #t~string113.offset, 1);call #t~string115.base, #t~string115.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string115.base, #t~string115.offset, 1);call write~init~int(93, #t~string115.base, 1 + #t~string115.offset, 1);call write~init~int(32, #t~string115.base, 2 + #t~string115.offset, 1);call write~init~int(0, #t~string115.base, 3 + #t~string115.offset, 1);call #t~string117.base, #t~string117.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string117.base, #t~string117.offset, 1);call write~init~int(97, #t~string117.base, 1 + #t~string117.offset, 1);call write~init~int(116, #t~string117.base, 2 + #t~string117.offset, 1);call write~init~int(32, #t~string117.base, 3 + #t~string117.offset, 1);call write~init~int(0, #t~string117.base, 4 + #t~string117.offset, 1);call #t~string119.base, #t~string119.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string119.base, #t~string119.offset, 1);call write~init~int(105, #t~string119.base, 1 + #t~string119.offset, 1);call write~init~int(0, #t~string119.base, 2 + #t~string119.offset, 1);call #t~string121.base, #t~string121.offset := #Ultimate.allocOnStack(10);call #t~string123.base, #t~string123.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string123.base, #t~string123.offset, 1);call write~init~int(112, #t~string123.base, 1 + #t~string123.offset, 1);call write~init~int(0, #t~string123.base, 2 + #t~string123.offset, 1);call #t~string125.base, #t~string125.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string125.base, #t~string125.offset, 1);call write~init~int(111, #t~string125.base, 1 + #t~string125.offset, 1);call write~init~int(119, #t~string125.base, 2 + #t~string125.offset, 1);call write~init~int(110, #t~string125.base, 3 + #t~string125.offset, 1);call write~init~int(0, #t~string125.base, 4 + #t~string125.offset, 1);call #t~string127.base, #t~string127.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string127.base, #t~string127.offset, 1);call write~init~int(73, #t~string127.base, 1 + #t~string127.offset, 1);call write~init~int(76, #t~string127.base, 2 + #t~string127.offset, 1);call write~init~int(95, #t~string127.base, 3 + #t~string127.offset, 1);call write~init~int(112, #t~string127.base, 4 + #t~string127.offset, 1);call write~init~int(58, #t~string127.base, 5 + #t~string127.offset, 1);call write~init~int(0, #t~string127.base, 6 + #t~string127.offset, 1);call #t~string129.base, #t~string129.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string129.base, #t~string129.offset, 1);call write~init~int(37, #t~string129.base, 1 + #t~string129.offset, 1);call write~init~int(105, #t~string129.base, 2 + #t~string129.offset, 1);call write~init~int(0, #t~string129.base, 3 + #t~string129.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string131.base, #t~string131.offset, 1);call write~init~int(37, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 2 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 3 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string133.base, #t~string133.offset, 1);call write~init~int(37, #t~string133.base, 1 + #t~string133.offset, 1);call write~init~int(105, #t~string133.base, 2 + #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 3 + #t~string133.offset, 1);call #t~string135.base, #t~string135.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string135.base, #t~string135.offset, 1);call write~init~int(37, #t~string135.base, 1 + #t~string135.offset, 1);call write~init~int(105, #t~string135.base, 2 + #t~string135.offset, 1);call write~init~int(0, #t~string135.base, 3 + #t~string135.offset, 1);call #t~string137.base, #t~string137.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string137.base, #t~string137.offset, 1);call write~init~int(37, #t~string137.base, 1 + #t~string137.offset, 1);call write~init~int(105, #t~string137.base, 2 + #t~string137.offset, 1);call write~init~int(0, #t~string137.base, 3 + #t~string137.offset, 1);call #t~string139.base, #t~string139.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string139.base, #t~string139.offset, 1);call write~init~int(70, #t~string139.base, 1 + #t~string139.offset, 1);call write~init~int(95, #t~string139.base, 2 + #t~string139.offset, 1);call write~init~int(112, #t~string139.base, 3 + #t~string139.offset, 1);call write~init~int(58, #t~string139.base, 4 + #t~string139.offset, 1);call write~init~int(0, #t~string139.base, 5 + #t~string139.offset, 1);call #t~string142.base, #t~string142.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string142.base, #t~string142.offset, 1);call write~init~int(37, #t~string142.base, 1 + #t~string142.offset, 1);call write~init~int(105, #t~string142.base, 2 + #t~string142.offset, 1);call write~init~int(0, #t~string142.base, 3 + #t~string142.offset, 1);call #t~string145.base, #t~string145.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string145.base, #t~string145.offset, 1);call write~init~int(37, #t~string145.base, 1 + #t~string145.offset, 1);call write~init~int(105, #t~string145.base, 2 + #t~string145.offset, 1);call write~init~int(0, #t~string145.base, 3 + #t~string145.offset, 1);call #t~string148.base, #t~string148.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string148.base, #t~string148.offset, 1);call write~init~int(37, #t~string148.base, 1 + #t~string148.offset, 1);call write~init~int(105, #t~string148.base, 2 + #t~string148.offset, 1);call write~init~int(0, #t~string148.base, 3 + #t~string148.offset, 1);call #t~string151.base, #t~string151.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string151.base, #t~string151.offset, 1);call write~init~int(37, #t~string151.base, 1 + #t~string151.offset, 1);call write~init~int(105, #t~string151.base, 2 + #t~string151.offset, 1);call write~init~int(0, #t~string151.base, 3 + #t~string151.offset, 1);call #t~string154.base, #t~string154.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string154.base, #t~string154.offset, 1);call write~init~int(37, #t~string154.base, 1 + #t~string154.offset, 1);call write~init~int(105, #t~string154.base, 2 + #t~string154.offset, 1);call write~init~int(0, #t~string154.base, 3 + #t~string154.offset, 1);call #t~string156.base, #t~string156.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string156.base, #t~string156.offset, 1);call write~init~int(0, #t~string156.base, 1 + #t~string156.offset, 1); 4375#L-1true havoc main_#res;havoc main_#t~ret24, main_~retValue_acc~6, main_~tmp~11;havoc main_~retValue_acc~6;havoc main_~tmp~11; 258#L64true havoc valid_product_#res;havoc valid_product_~retValue_acc~1;havoc valid_product_~retValue_acc~1;valid_product_~retValue_acc~1 := 1;valid_product_#res := valid_product_~retValue_acc~1; 1047#L72true main_#t~ret24 := valid_product_#res;main_~tmp~11 := main_#t~ret24;havoc main_#t~ret24; 300#L682true assume 0 != main_~tmp~11; 1712#L658true havoc bigMacCall_#t~ret17, bigMacCall_~tmp~8;havoc bigMacCall_~tmp~8;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 2207#L231true assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 753#L256true bigMacCall_#t~ret17 := getOrigin_#res;bigMacCall_~tmp~8 := bigMacCall_#t~ret17;havoc bigMacCall_#t~ret17;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~8;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 4909#L1421true assume 0 == initPersonOnFloor_~floor; 4844#L1422true assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 3786#L1529-1true callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 204#L1213true assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 735#L1225-2true havoc timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_~tmp~24, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_#t~ret87, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret158, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~10;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~10; 4199#L1150true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~10 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~10; 3752#L1177true isExecutiveFloorCalling_#t~ret158 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret158;havoc isExecutiveFloorCalling_#t~ret158;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 1873#L3232true stopRequestedAtCurrentFloor_#t~ret84 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 421#L2617true assume 0 != stopRequestedAtCurrentFloor_~tmp~22;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 5330#L1948true stopRequestedAtCurrentFloor_#t~ret85 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret85;havoc stopRequestedAtCurrentFloor_#t~ret85; 152#L2621true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 770#L2634true timeShift_#t~ret100 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret100;havoc timeShift_#t~ret100; 3566#L2769true assume !(0 != timeShift_~tmp___9~2); 1732#L2860true assume 1 == ~doorState~0;~doorState~0 := 0; 1735#L2860-2true stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret158, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~10;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~10; 4206#L1150-3true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~10 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~10; 3764#L1177-3true isExecutiveFloorCalling_#t~ret158 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret158;havoc isExecutiveFloorCalling_#t~ret158;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 1877#L3232-1true stopRequestedInDirection_#t~ret78 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78; 3633#L2500true assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 5327#L1948-1true stopRequestedInDirection_#t~ret79 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~19 := stopRequestedInDirection_#t~ret79;havoc stopRequestedInDirection_#t~ret79;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~19 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 1398#L2513true timeShift_#t~ret107 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret107;havoc timeShift_#t~ret107; 1238#L2868true assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret81, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 4326#L2557true assume !(1 == ~currentHeading~0); 4858#L2567true assume !(0 == ~currentFloorID~0); 4863#L2567-2true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 3483#L2573-5true havoc __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_#t~ret10, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret158, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~10;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~10; 4142#L1150-25true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~10 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~10; 3891#L1177-25true isExecutiveFloorCalling_#t~ret158 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret158;havoc isExecutiveFloorCalling_#t~ret158;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 384#L3232-3true __utac_acc__Specification14_spec__1_#t~ret7 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret7;havoc __utac_acc__Specification14_spec__1_#t~ret7; 1924#L320true assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 1927#L320-1true havoc timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_~tmp~24, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_#t~ret87, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret158, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~10;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~10; 4105#L1150-26true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~10 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~10; 3892#L1177-26true isExecutiveFloorCalling_#t~ret158 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret158;havoc isExecutiveFloorCalling_#t~ret158;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 394#L3232-4true stopRequestedAtCurrentFloor_#t~ret84 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 426#L2617-1true assume 0 != stopRequestedAtCurrentFloor_~tmp~22;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 5313#L1948-4true stopRequestedAtCurrentFloor_#t~ret85 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret85;havoc stopRequestedAtCurrentFloor_#t~ret85; 154#L2621-1true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 752#L2634-1true timeShift_#t~ret100 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret100;havoc timeShift_#t~ret100; 3568#L2769-1true assume !(0 != timeShift_~tmp___9~2); 1706#L2860-3true assume !(1 == ~doorState~0); 1709#L2860-5true stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret158, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~10;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~10; 4111#L1150-29true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~10 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~10; 3874#L1177-29true isExecutiveFloorCalling_#t~ret158 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret158;havoc isExecutiveFloorCalling_#t~ret158;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 395#L3232-5true stopRequestedInDirection_#t~ret78 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78; 3634#L2500-2true assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 5311#L1948-5true stopRequestedInDirection_#t~ret79 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~19 := stopRequestedInDirection_#t~ret79;havoc stopRequestedInDirection_#t~ret79;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~19 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 1400#L2513-2true timeShift_#t~ret107 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret107;havoc timeShift_#t~ret107; 1235#L2868-1true assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret81, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 4335#L2557-3true assume !(1 == ~currentHeading~0); 5082#L2567-9true assume !(0 == ~currentFloorID~0); 5091#L2567-11true assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 3462#L2573-11true havoc __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_#t~ret10, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret158, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~10;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~10; 5461#L1150-51true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~10 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~10; 3645#L1177-51true isExecutiveFloorCalling_#t~ret158 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret158;havoc isExecutiveFloorCalling_#t~ret158;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 376#L3232-7true __utac_acc__Specification14_spec__1_#t~ret7 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret7;havoc __utac_acc__Specification14_spec__1_#t~ret7; 1910#L320-2true assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 1911#L320-3true havoc timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_~tmp~24, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_#t~ret87, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret158, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~10;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~10; 5464#L1150-52true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~10 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~10; 3646#L1177-52true isExecutiveFloorCalling_#t~ret158 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret158;havoc isExecutiveFloorCalling_#t~ret158;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 372#L3232-8true stopRequestedAtCurrentFloor_#t~ret84 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 423#L2617-2true assume 0 != stopRequestedAtCurrentFloor_~tmp~22;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 5290#L1948-8true stopRequestedAtCurrentFloor_#t~ret85 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret85;havoc stopRequestedAtCurrentFloor_#t~ret85; 153#L2621-2true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 758#L2634-2true timeShift_#t~ret100 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret100;havoc timeShift_#t~ret100; 3567#L2769-2true assume !(0 != timeShift_~tmp___9~2); 1717#L2860-6true assume !(1 == ~doorState~0); 1690#L2860-8true stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret158, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~10;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~10; 5433#L1150-55true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~10 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~10; 3635#L1177-55true isExecutiveFloorCalling_#t~ret158 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret158;havoc isExecutiveFloorCalling_#t~ret158;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 375#L3232-9true stopRequestedInDirection_#t~ret78 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78; 3641#L2500-4true assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 5289#L1948-9true stopRequestedInDirection_#t~ret79 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~19 := stopRequestedInDirection_#t~ret79;havoc stopRequestedInDirection_#t~ret79;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~19 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 1383#L2513-4true timeShift_#t~ret107 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret107;havoc timeShift_#t~ret107; 1241#L2868-2true assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret81, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 4308#L2557-6true assume !(1 == ~currentHeading~0); 5079#L2567-18true assume !(0 == ~currentFloorID~0); 5042#L2567-20true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 3448#L2573-17true havoc __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_#t~ret10, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret158, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~10;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~10; 5681#L1150-77true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~10 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~10; 3606#L1177-77true isExecutiveFloorCalling_#t~ret158 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret158;havoc isExecutiveFloorCalling_#t~ret158;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 379#L3232-11true __utac_acc__Specification14_spec__1_#t~ret7 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret7;havoc __utac_acc__Specification14_spec__1_#t~ret7; 1913#L320-4true assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 1917#L320-5true havoc bobCall_#t~ret12, bobCall_~tmp~3;havoc bobCall_~tmp~3;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 2204#L231-1true assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 750#L256-1true bobCall_#t~ret12 := getOrigin_#res;bobCall_~tmp~3 := bobCall_#t~ret12;havoc bobCall_#t~ret12;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~3;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 4914#L1421-1true assume 0 == initPersonOnFloor_~floor; 4849#L1422-2true assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 3790#L1529-3true callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 207#L1213-2true assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 727#L1225-5true havoc cleanup_#t~ret18, cleanup_#t~ret19, cleanup_~i~2, cleanup_~tmp~9, cleanup_~tmp___0~3, cleanup_~__cil_tmp4~0;havoc cleanup_~i~2;havoc cleanup_~tmp~9;havoc cleanup_~tmp___0~3;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_~tmp~24, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_#t~ret87, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret158, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~10;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~10; 5688#L1150-78true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~10 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~10; 3607#L1177-78true isExecutiveFloorCalling_#t~ret158 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret158;havoc isExecutiveFloorCalling_#t~ret158;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 361#L3232-12true stopRequestedAtCurrentFloor_#t~ret84 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 428#L2617-3true assume 0 != stopRequestedAtCurrentFloor_~tmp~22;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 5306#L1948-12true stopRequestedAtCurrentFloor_#t~ret85 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret85;havoc stopRequestedAtCurrentFloor_#t~ret85; 155#L2621-3true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 754#L2634-3true timeShift_#t~ret100 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret100;havoc timeShift_#t~ret100; 3563#L2769-3true assume !(0 != timeShift_~tmp___9~2); 1685#L2860-9true assume !(1 == ~doorState~0); 1699#L2860-11true stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret158, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~10;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~10; 5650#L1150-81true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~10 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~10; 3600#L1177-81true isExecutiveFloorCalling_#t~ret158 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret158;havoc isExecutiveFloorCalling_#t~ret158;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 363#L3232-13true stopRequestedInDirection_#t~ret78 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78; 3621#L2500-6true assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 5303#L1948-13true stopRequestedInDirection_#t~ret79 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~19 := stopRequestedInDirection_#t~ret79;havoc stopRequestedInDirection_#t~ret79;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~19 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 1385#L2513-6true timeShift_#t~ret107 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret107;havoc timeShift_#t~ret107; 1244#L2868-3true assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret81, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 4283#L2557-9true assume !(1 == ~currentHeading~0); 5036#L2567-27true assume !(0 == ~currentFloorID~0); 5039#L2567-29true assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 3425#L2573-23true havoc __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_#t~ret10, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret158, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~10;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~10; 5562#L1150-103true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~10 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~10; 3719#L1177-103true isExecutiveFloorCalling_#t~ret158 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret158;havoc isExecutiveFloorCalling_#t~ret158;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 369#L3232-15true __utac_acc__Specification14_spec__1_#t~ret7 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret7;havoc __utac_acc__Specification14_spec__1_#t~ret7; 1918#L320-6true assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 1899#L320-7true cleanup_~i~2 := 0; 1225#L490-2true [2019-11-15 22:31:24,617 INFO L793 eck$LassoCheckResult]: Loop: 1225#L490-2true assume !false; 2403#L491true cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 2062#L494true assume cleanup_~i~2 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 3522#L1799true cleanup_#t~ret18 := isBlocked_#res;cleanup_~tmp___0~3 := cleanup_#t~ret18;havoc cleanup_#t~ret18; 1964#L498true assume 1 != cleanup_~tmp___0~3; 1966#L498-1true havoc isIdle_#res;havoc isIdle_#t~ret66, isIdle_~retValue_acc~20, isIdle_~tmp~17;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~17;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret61, anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_#t~ret64, anyStopRequested_#t~ret65, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~16, anyStopRequested_~tmp___0~5, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~2, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~16;havoc anyStopRequested_~tmp___0~5;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~2;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~10;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~10; 5566#L1150-104true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~10 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~10; 3720#L1177-104true anyStopRequested_#t~ret61 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret61;havoc anyStopRequested_#t~ret61; 4006#L2056true assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 5511#L2120true isIdle_#t~ret66 := anyStopRequested_#res;isIdle_~tmp~17 := isIdle_#t~ret66;havoc isIdle_#t~ret66;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~17 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 3476#L2133true cleanup_#t~ret19 := isIdle_#res;cleanup_~tmp~9 := cleanup_#t~ret19;havoc cleanup_#t~ret19; 43#L510true assume !(0 != cleanup_~tmp~9);havoc timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_~tmp~24, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_#t~ret87, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret158, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~10;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~10; 5550#L1150-109true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~10 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~10; 3709#L1177-109true isExecutiveFloorCalling_#t~ret158 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret158;havoc isExecutiveFloorCalling_#t~ret158;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 366#L3232-16true stopRequestedAtCurrentFloor_#t~ret84 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 431#L2617-4true assume 0 != stopRequestedAtCurrentFloor_~tmp~22;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 5282#L1948-16true stopRequestedAtCurrentFloor_#t~ret85 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret85;havoc stopRequestedAtCurrentFloor_#t~ret85; 148#L2621-4true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 759#L2634-4true timeShift_#t~ret100 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret100;havoc timeShift_#t~ret100; 3564#L2769-4true assume !(0 != timeShift_~tmp___9~2); 1705#L2860-12true assume 1 == ~doorState~0;~doorState~0 := 0; 1586#L2860-14true stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret158, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~10;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~10; 5529#L1150-112true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~10 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~10; 3693#L1177-112true isExecutiveFloorCalling_#t~ret158 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret158;havoc isExecutiveFloorCalling_#t~ret158;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 367#L3232-17true stopRequestedInDirection_#t~ret78 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78; 3628#L2500-8true assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 5279#L1948-17true stopRequestedInDirection_#t~ret79 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~19 := stopRequestedInDirection_#t~ret79;havoc stopRequestedInDirection_#t~ret79;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~19 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 1372#L2513-8true timeShift_#t~ret107 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret107;havoc timeShift_#t~ret107; 1247#L2868-4true assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret81, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 4292#L2557-12true assume !(1 == ~currentHeading~0); 4983#L2567-36true assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 4997#L2567-38true assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 3408#L2573-29true havoc __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_#t~ret10, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret158, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~10;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~10; 5153#L1150-134true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~10 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~10; 3554#L1177-134true isExecutiveFloorCalling_#t~ret158 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret158;havoc isExecutiveFloorCalling_#t~ret158;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 350#L3232-19true __utac_acc__Specification14_spec__1_#t~ret7 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret7;havoc __utac_acc__Specification14_spec__1_#t~ret7; 1903#L320-8true assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 1906#L320-9true cleanup_~i~2 := 1 + cleanup_~i~2; 1225#L490-2true [2019-11-15 22:31:24,623 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-15 22:31:24,623 INFO L82 PathProgramCache]: Analyzing trace with hash 131575023, now seen corresponding path program 1 times [2019-11-15 22:31:24,631 INFO L157 tionRefinementEngine]: Executing refinement strategy CAMEL [2019-11-15 22:31:24,631 INFO L342 tionRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1666545203] [2019-11-15 22:31:24,631 INFO L116 rtionOrderModulation]: Craig_NestedInterpolation forces the order to NOT_INCREMENTALLY [2019-11-15 22:31:24,632 INFO L116 rtionOrderModulation]: Craig_NestedInterpolation forces the order to NOT_INCREMENTALLY [2019-11-15 22:31:24,632 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-11-15 22:31:24,845 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-15 22:31:25,037 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-11-15 22:31:25,038 INFO L342 tionRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1666545203] [2019-11-15 22:31:25,038 INFO L223 tionRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-11-15 22:31:25,039 INFO L236 tionRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2019-11-15 22:31:25,039 INFO L342 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [103814624] [2019-11-15 22:31:25,044 INFO L796 eck$LassoCheckResult]: stem already infeasible [2019-11-15 22:31:25,044 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-15 22:31:25,044 INFO L82 PathProgramCache]: Analyzing trace with hash -1744464430, now seen corresponding path program 1 times [2019-11-15 22:31:25,045 INFO L157 tionRefinementEngine]: Executing refinement strategy CAMEL [2019-11-15 22:31:25,045 INFO L342 tionRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2023169816] [2019-11-15 22:31:25,045 INFO L116 rtionOrderModulation]: Craig_NestedInterpolation forces the order to NOT_INCREMENTALLY [2019-11-15 22:31:25,045 INFO L116 rtionOrderModulation]: Craig_NestedInterpolation forces the order to NOT_INCREMENTALLY [2019-11-15 22:31:25,046 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-11-15 22:31:25,063 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-15 22:31:25,135 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-11-15 22:31:25,135 INFO L342 tionRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2023169816] [2019-11-15 22:31:25,135 INFO L223 tionRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-11-15 22:31:25,135 INFO L236 tionRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2019-11-15 22:31:25,136 INFO L342 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [416433534] [2019-11-15 22:31:25,137 INFO L808 eck$LassoCheckResult]: loop already infeasible [2019-11-15 22:31:25,138 INFO L137 tionRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-11-15 22:31:25,152 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2019-11-15 22:31:25,153 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2019-11-15 22:31:25,155 INFO L87 Difference]: Start difference. First operand 5692 states. Second operand 7 states. [2019-11-15 22:31:35,422 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-11-15 22:31:35,422 INFO L93 Difference]: Finished difference Result 48615 states and 91519 transitions. [2019-11-15 22:31:35,422 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2019-11-15 22:31:35,423 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 48615 states and 91519 transitions. [2019-11-15 22:31:35,774 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 10601 [2019-11-15 22:31:36,110 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 48615 states to 48543 states and 91435 transitions. [2019-11-15 22:31:36,111 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 48543 [2019-11-15 22:31:36,171 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 48543 [2019-11-15 22:31:36,172 INFO L73 IsDeterministic]: Start isDeterministic. Operand 48543 states and 91435 transitions. [2019-11-15 22:31:36,249 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2019-11-15 22:31:36,249 INFO L688 BuchiCegarLoop]: Abstraction has 48543 states and 91435 transitions. [2019-11-15 22:31:36,297 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 48543 states and 91435 transitions. [2019-11-15 22:31:36,753 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 48543 to 16469. [2019-11-15 22:31:36,754 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 16469 states. [2019-11-15 22:31:36,797 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 16469 states to 16469 states and 31000 transitions. [2019-11-15 22:31:36,798 INFO L711 BuchiCegarLoop]: Abstraction has 16469 states and 31000 transitions. [2019-11-15 22:31:36,798 INFO L591 BuchiCegarLoop]: Abstraction has 16469 states and 31000 transitions. [2019-11-15 22:31:36,798 INFO L424 BuchiCegarLoop]: ======== Iteration 2============ [2019-11-15 22:31:36,798 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 16469 states and 31000 transitions. [2019-11-15 22:31:36,859 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 3369 [2019-11-15 22:31:36,860 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2019-11-15 22:31:36,860 INFO L119 BuchiIsEmpty]: Starting construction of run [2019-11-15 22:31:36,874 INFO L849 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-15 22:31:36,876 INFO L850 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-15 22:31:36,877 INFO L791 eck$LassoCheckResult]: Stem: 58538#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;call #t~string43.base, #t~string43.offset := #Ultimate.allocOnStack(30);call #t~string44.base, #t~string44.offset := #Ultimate.allocOnStack(9);call #t~string45.base, #t~string45.offset := #Ultimate.allocOnStack(21);call #t~string46.base, #t~string46.offset := #Ultimate.allocOnStack(30);call #t~string47.base, #t~string47.offset := #Ultimate.allocOnStack(9);call #t~string48.base, #t~string48.offset := #Ultimate.allocOnStack(21);call #t~string52.base, #t~string52.offset := #Ultimate.allocOnStack(30);call #t~string53.base, #t~string53.offset := #Ultimate.allocOnStack(9);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(25);call #t~string55.base, #t~string55.offset := #Ultimate.allocOnStack(30);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(9);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(25);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string111.base, #t~string111.offset := #Ultimate.allocOnStack(10);call #t~string113.base, #t~string113.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string113.base, #t~string113.offset, 1);call write~init~int(95, #t~string113.base, 1 + #t~string113.offset, 1);call write~init~int(93, #t~string113.base, 2 + #t~string113.offset, 1);call write~init~int(0, #t~string113.base, 3 + #t~string113.offset, 1);call #t~string115.base, #t~string115.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string115.base, #t~string115.offset, 1);call write~init~int(93, #t~string115.base, 1 + #t~string115.offset, 1);call write~init~int(32, #t~string115.base, 2 + #t~string115.offset, 1);call write~init~int(0, #t~string115.base, 3 + #t~string115.offset, 1);call #t~string117.base, #t~string117.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string117.base, #t~string117.offset, 1);call write~init~int(97, #t~string117.base, 1 + #t~string117.offset, 1);call write~init~int(116, #t~string117.base, 2 + #t~string117.offset, 1);call write~init~int(32, #t~string117.base, 3 + #t~string117.offset, 1);call write~init~int(0, #t~string117.base, 4 + #t~string117.offset, 1);call #t~string119.base, #t~string119.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string119.base, #t~string119.offset, 1);call write~init~int(105, #t~string119.base, 1 + #t~string119.offset, 1);call write~init~int(0, #t~string119.base, 2 + #t~string119.offset, 1);call #t~string121.base, #t~string121.offset := #Ultimate.allocOnStack(10);call #t~string123.base, #t~string123.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string123.base, #t~string123.offset, 1);call write~init~int(112, #t~string123.base, 1 + #t~string123.offset, 1);call write~init~int(0, #t~string123.base, 2 + #t~string123.offset, 1);call #t~string125.base, #t~string125.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string125.base, #t~string125.offset, 1);call write~init~int(111, #t~string125.base, 1 + #t~string125.offset, 1);call write~init~int(119, #t~string125.base, 2 + #t~string125.offset, 1);call write~init~int(110, #t~string125.base, 3 + #t~string125.offset, 1);call write~init~int(0, #t~string125.base, 4 + #t~string125.offset, 1);call #t~string127.base, #t~string127.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string127.base, #t~string127.offset, 1);call write~init~int(73, #t~string127.base, 1 + #t~string127.offset, 1);call write~init~int(76, #t~string127.base, 2 + #t~string127.offset, 1);call write~init~int(95, #t~string127.base, 3 + #t~string127.offset, 1);call write~init~int(112, #t~string127.base, 4 + #t~string127.offset, 1);call write~init~int(58, #t~string127.base, 5 + #t~string127.offset, 1);call write~init~int(0, #t~string127.base, 6 + #t~string127.offset, 1);call #t~string129.base, #t~string129.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string129.base, #t~string129.offset, 1);call write~init~int(37, #t~string129.base, 1 + #t~string129.offset, 1);call write~init~int(105, #t~string129.base, 2 + #t~string129.offset, 1);call write~init~int(0, #t~string129.base, 3 + #t~string129.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string131.base, #t~string131.offset, 1);call write~init~int(37, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 2 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 3 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string133.base, #t~string133.offset, 1);call write~init~int(37, #t~string133.base, 1 + #t~string133.offset, 1);call write~init~int(105, #t~string133.base, 2 + #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 3 + #t~string133.offset, 1);call #t~string135.base, #t~string135.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string135.base, #t~string135.offset, 1);call write~init~int(37, #t~string135.base, 1 + #t~string135.offset, 1);call write~init~int(105, #t~string135.base, 2 + #t~string135.offset, 1);call write~init~int(0, #t~string135.base, 3 + #t~string135.offset, 1);call #t~string137.base, #t~string137.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string137.base, #t~string137.offset, 1);call write~init~int(37, #t~string137.base, 1 + #t~string137.offset, 1);call write~init~int(105, #t~string137.base, 2 + #t~string137.offset, 1);call write~init~int(0, #t~string137.base, 3 + #t~string137.offset, 1);call #t~string139.base, #t~string139.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string139.base, #t~string139.offset, 1);call write~init~int(70, #t~string139.base, 1 + #t~string139.offset, 1);call write~init~int(95, #t~string139.base, 2 + #t~string139.offset, 1);call write~init~int(112, #t~string139.base, 3 + #t~string139.offset, 1);call write~init~int(58, #t~string139.base, 4 + #t~string139.offset, 1);call write~init~int(0, #t~string139.base, 5 + #t~string139.offset, 1);call #t~string142.base, #t~string142.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string142.base, #t~string142.offset, 1);call write~init~int(37, #t~string142.base, 1 + #t~string142.offset, 1);call write~init~int(105, #t~string142.base, 2 + #t~string142.offset, 1);call write~init~int(0, #t~string142.base, 3 + #t~string142.offset, 1);call #t~string145.base, #t~string145.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string145.base, #t~string145.offset, 1);call write~init~int(37, #t~string145.base, 1 + #t~string145.offset, 1);call write~init~int(105, #t~string145.base, 2 + #t~string145.offset, 1);call write~init~int(0, #t~string145.base, 3 + #t~string145.offset, 1);call #t~string148.base, #t~string148.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string148.base, #t~string148.offset, 1);call write~init~int(37, #t~string148.base, 1 + #t~string148.offset, 1);call write~init~int(105, #t~string148.base, 2 + #t~string148.offset, 1);call write~init~int(0, #t~string148.base, 3 + #t~string148.offset, 1);call #t~string151.base, #t~string151.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string151.base, #t~string151.offset, 1);call write~init~int(37, #t~string151.base, 1 + #t~string151.offset, 1);call write~init~int(105, #t~string151.base, 2 + #t~string151.offset, 1);call write~init~int(0, #t~string151.base, 3 + #t~string151.offset, 1);call #t~string154.base, #t~string154.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string154.base, #t~string154.offset, 1);call write~init~int(37, #t~string154.base, 1 + #t~string154.offset, 1);call write~init~int(105, #t~string154.base, 2 + #t~string154.offset, 1);call write~init~int(0, #t~string154.base, 3 + #t~string154.offset, 1);call #t~string156.base, #t~string156.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string156.base, #t~string156.offset, 1);call write~init~int(0, #t~string156.base, 1 + #t~string156.offset, 1); 58539#L-1 havoc main_#res;havoc main_#t~ret24, main_~retValue_acc~6, main_~tmp~11;havoc main_~retValue_acc~6;havoc main_~tmp~11; 54948#L64 havoc valid_product_#res;havoc valid_product_~retValue_acc~1;havoc valid_product_~retValue_acc~1;valid_product_~retValue_acc~1 := 1;valid_product_#res := valid_product_~retValue_acc~1; 54949#L72 main_#t~ret24 := valid_product_#res;main_~tmp~11 := main_#t~ret24;havoc main_#t~ret24; 55001#L682 assume 0 != main_~tmp~11; 55002#L658 havoc bigMacCall_#t~ret17, bigMacCall_~tmp~8;havoc bigMacCall_~tmp~8;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 57007#L231 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 54645#L256 bigMacCall_#t~ret17 := getOrigin_#res;bigMacCall_~tmp~8 := bigMacCall_#t~ret17;havoc bigMacCall_#t~ret17;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~8;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 55744#L1421 assume 0 == initPersonOnFloor_~floor; 59860#L1422 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 54473#L1529-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 54859#L1213 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 54622#L1225-2 havoc timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_~tmp~24, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_#t~ret87, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret158, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~10;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~10; 55727#L1150 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~10 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~10; 59155#L1177 isExecutiveFloorCalling_#t~ret158 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret158;havoc isExecutiveFloorCalling_#t~ret158;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 57194#L3232 stopRequestedAtCurrentFloor_#t~ret84 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 55187#L2617 assume 0 != stopRequestedAtCurrentFloor_~tmp~22;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 55188#L1948 stopRequestedAtCurrentFloor_#t~ret85 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret85;havoc stopRequestedAtCurrentFloor_#t~ret85; 54748#L2621 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 54750#L2634 timeShift_#t~ret100 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret100;havoc timeShift_#t~ret100; 61217#L2769 assume !(0 != timeShift_~tmp___9~2); 61218#L2860 assume 1 == ~doorState~0;~doorState~0 := 0; 70367#L2860-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret158, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~10;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~10; 70366#L1150-3 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~10 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~10; 70365#L1177-3 isExecutiveFloorCalling_#t~ret158 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret158;havoc isExecutiveFloorCalling_#t~ret158;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 70364#L3232-1 stopRequestedInDirection_#t~ret78 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78; 70362#L2500 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 70363#L1948-1 stopRequestedInDirection_#t~ret79 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~19 := stopRequestedInDirection_#t~ret79;havoc stopRequestedInDirection_#t~ret79;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~19 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 70371#L2513 timeShift_#t~ret107 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret107;havoc timeShift_#t~ret107; 70369#L2868 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret81, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 70368#L2557 assume !(1 == ~currentHeading~0); 59871#L2567 assume !(0 == ~currentFloorID~0); 59872#L2567-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 54774#L2573-5 havoc __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_#t~ret10, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret158, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~10;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~10; 58896#L1150-25 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~10 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~10; 59209#L1177-25 isExecutiveFloorCalling_#t~ret158 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret158;havoc isExecutiveFloorCalling_#t~ret158;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 55131#L3232-3 __utac_acc__Specification14_spec__1_#t~ret7 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret7;havoc __utac_acc__Specification14_spec__1_#t~ret7; 55132#L320 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 54745#L320-1 havoc timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_~tmp~24, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_#t~ret87, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret158, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~10;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~10; 57244#L1150-26 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~10 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~10; 59210#L1177-26 isExecutiveFloorCalling_#t~ret158 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret158;havoc isExecutiveFloorCalling_#t~ret158;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 55146#L3232-4 stopRequestedAtCurrentFloor_#t~ret84 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 55147#L2617-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~22;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 60449#L1948-4 stopRequestedAtCurrentFloor_#t~ret85 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret85;havoc stopRequestedAtCurrentFloor_#t~ret85; 60447#L2621-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 54754#L2634-1 timeShift_#t~ret100 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret100;havoc timeShift_#t~ret100; 66012#L2769-1 assume !(0 != timeShift_~tmp___9~2); 66013#L2860-3 assume !(1 == ~doorState~0); 70508#L2860-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret158, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~10;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~10; 70507#L1150-29 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~10 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~10; 70506#L1177-29 isExecutiveFloorCalling_#t~ret158 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret158;havoc isExecutiveFloorCalling_#t~ret158;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 70505#L3232-5 stopRequestedInDirection_#t~ret78 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78; 70503#L2500-2 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 60219#L1948-5 stopRequestedInDirection_#t~ret79 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~19 := stopRequestedInDirection_#t~ret79;havoc stopRequestedInDirection_#t~ret79;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~19 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 56653#L2513-2 timeShift_#t~ret107 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret107;havoc timeShift_#t~ret107; 56387#L2868-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret81, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 56389#L2557-3 assume !(1 == ~currentHeading~0); 59551#L2567-9 assume !(0 == ~currentFloorID~0); 60049#L2567-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 54533#L2573-11 havoc __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_#t~ret10, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret158, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~10;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~10; 58872#L1150-51 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~10 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~10; 59069#L1177-51 isExecutiveFloorCalling_#t~ret158 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret158;havoc isExecutiveFloorCalling_#t~ret158;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 55119#L3232-7 __utac_acc__Specification14_spec__1_#t~ret7 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret7;havoc __utac_acc__Specification14_spec__1_#t~ret7; 55120#L320-2 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 64081#L320-3 havoc timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_~tmp~24, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_#t~ret87, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret158, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~10;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~10; 62244#L1150-52 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~10 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~10; 60485#L1177-52 isExecutiveFloorCalling_#t~ret158 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret158;havoc isExecutiveFloorCalling_#t~ret158;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 62237#L3232-8 stopRequestedAtCurrentFloor_#t~ret84 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 60530#L2617-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~22;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 60523#L1948-8 stopRequestedAtCurrentFloor_#t~ret85 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret85;havoc stopRequestedAtCurrentFloor_#t~ret85; 60518#L2621-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 54752#L2634-2 timeShift_#t~ret100 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret100;havoc timeShift_#t~ret100; 69177#L2769-2 assume !(0 != timeShift_~tmp___9~2); 69178#L2860-6 assume !(1 == ~doorState~0); 70461#L2860-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret158, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~10;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~10; 70460#L1150-55 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~10 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~10; 70459#L1177-55 isExecutiveFloorCalling_#t~ret158 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret158;havoc isExecutiveFloorCalling_#t~ret158;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 70458#L3232-9 stopRequestedInDirection_#t~ret78 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78; 59065#L2500-4 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 59067#L1948-9 stopRequestedInDirection_#t~ret79 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~19 := stopRequestedInDirection_#t~ret79;havoc stopRequestedInDirection_#t~ret79;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~19 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 70457#L2513-4 timeShift_#t~ret107 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret107;havoc timeShift_#t~ret107; 70455#L2868-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret81, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 70456#L2557-6 assume !(1 == ~currentHeading~0); 60046#L2567-18 assume !(0 == ~currentFloorID~0); 60010#L2567-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 54538#L2573-17 havoc __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_#t~ret10, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret158, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~10;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~10; 58861#L1150-77 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~10 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~10; 59029#L1177-77 isExecutiveFloorCalling_#t~ret158 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret158;havoc isExecutiveFloorCalling_#t~ret158;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 55123#L3232-11 __utac_acc__Specification14_spec__1_#t~ret7 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret7;havoc __utac_acc__Specification14_spec__1_#t~ret7; 55124#L320-4 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 54731#L320-5 havoc bobCall_#t~ret12, bobCall_~tmp~3;havoc bobCall_~tmp~3;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 57236#L231-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 54639#L256-1 bobCall_#t~ret12 := getOrigin_#res;bobCall_~tmp~3 := bobCall_#t~ret12;havoc bobCall_#t~ret12;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~3;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 55739#L1421-1 assume 0 == initPersonOnFloor_~floor; 59864#L1422-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 54488#L1529-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 54864#L1213-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 54584#L1225-5 havoc cleanup_#t~ret18, cleanup_#t~ret19, cleanup_~i~2, cleanup_~tmp~9, cleanup_~tmp___0~3, cleanup_~__cil_tmp4~0;havoc cleanup_~i~2;havoc cleanup_~tmp~9;havoc cleanup_~tmp___0~3;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_~tmp~24, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_#t~ret87, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret158, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~10;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~10; 55720#L1150-78 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~10 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~10; 59030#L1177-78 isExecutiveFloorCalling_#t~ret158 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret158;havoc isExecutiveFloorCalling_#t~ret158;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 55095#L3232-12 stopRequestedAtCurrentFloor_#t~ret84 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 55096#L2617-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~22;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 55204#L1948-12 stopRequestedAtCurrentFloor_#t~ret85 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret85;havoc stopRequestedAtCurrentFloor_#t~ret85; 62885#L2621-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 54756#L2634-3 timeShift_#t~ret100 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret100;havoc timeShift_#t~ret100; 68011#L2769-3 assume !(0 != timeShift_~tmp___9~2); 68012#L2860-9 assume !(1 == ~doorState~0); 70566#L2860-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret158, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~10;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~10; 70565#L1150-81 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~10 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~10; 70564#L1177-81 isExecutiveFloorCalling_#t~ret158 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret158;havoc isExecutiveFloorCalling_#t~ret158;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 70563#L3232-13 stopRequestedInDirection_#t~ret78 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78; 70562#L2500-6 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 60212#L1948-13 stopRequestedInDirection_#t~ret79 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~19 := stopRequestedInDirection_#t~ret79;havoc stopRequestedInDirection_#t~ret79;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~19 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 56632#L2513-6 timeShift_#t~ret107 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret107;havoc timeShift_#t~ret107; 56410#L2868-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret81, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 56412#L2557-9 assume !(1 == ~currentHeading~0); 59485#L2567-27 assume !(0 == ~currentFloorID~0); 60006#L2567-29 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 54499#L2573-23 havoc __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_#t~ret10, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret158, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~10;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~10; 58840#L1150-103 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~10 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~10; 59130#L1177-103 isExecutiveFloorCalling_#t~ret158 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret158;havoc isExecutiveFloorCalling_#t~ret158;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 55109#L3232-15 __utac_acc__Specification14_spec__1_#t~ret7 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret7;havoc __utac_acc__Specification14_spec__1_#t~ret7; 55110#L320-6 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 54737#L320-7 cleanup_~i~2 := 0; 56363#L490-2 [2019-11-15 22:31:36,879 INFO L793 eck$LassoCheckResult]: Loop: 56363#L490-2 assume !false; 56364#L491 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 57380#L494 assume cleanup_~i~2 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 57381#L1799 cleanup_#t~ret18 := isBlocked_#res;cleanup_~tmp___0~3 := cleanup_#t~ret18;havoc cleanup_#t~ret18; 57279#L498 assume 1 != cleanup_~tmp___0~3; 57280#L498-1 havoc isIdle_#res;havoc isIdle_#t~ret66, isIdle_~retValue_acc~20, isIdle_~tmp~17;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~17;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret61, anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_#t~ret64, anyStopRequested_#t~ret65, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~16, anyStopRequested_~tmp___0~5, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~2, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~16;havoc anyStopRequested_~tmp___0~5;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~2;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~10;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~10; 57282#L1150-104 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~10 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~10; 59131#L1177-104 anyStopRequested_#t~ret61 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret61;havoc anyStopRequested_#t~ret61; 59132#L2056 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 54714#L2120 isIdle_#t~ret66 := anyStopRequested_#res;isIdle_~tmp~17 := isIdle_#t~ret66;havoc isIdle_#t~ret66;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~17 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 58889#L2133 cleanup_#t~ret19 := isIdle_#res;cleanup_~tmp~9 := cleanup_#t~ret19;havoc cleanup_#t~ret19; 54466#L510 assume !(0 != cleanup_~tmp~9);havoc timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_~tmp~24, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_#t~ret87, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret158, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~10;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~10; 54467#L1150-109 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~10 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~10; 59124#L1177-109 isExecutiveFloorCalling_#t~ret158 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret158;havoc isExecutiveFloorCalling_#t~ret158;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 55103#L3232-16 stopRequestedAtCurrentFloor_#t~ret84 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 55104#L2617-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~22;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 60526#L1948-16 stopRequestedAtCurrentFloor_#t~ret85 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret85;havoc stopRequestedAtCurrentFloor_#t~ret85; 60519#L2621-4 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 54742#L2634-4 timeShift_#t~ret100 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret100;havoc timeShift_#t~ret100; 67635#L2769-4 assume !(0 != timeShift_~tmp___9~2); 67636#L2860-12 assume 1 == ~doorState~0;~doorState~0 := 0; 70745#L2860-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret158, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~10;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~10; 70744#L1150-112 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~10 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~10; 70743#L1177-112 isExecutiveFloorCalling_#t~ret158 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret158;havoc isExecutiveFloorCalling_#t~ret158;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 70742#L3232-17 stopRequestedInDirection_#t~ret78 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78; 59047#L2500-8 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 59048#L1948-17 stopRequestedInDirection_#t~ret79 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~19 := stopRequestedInDirection_#t~ret79;havoc stopRequestedInDirection_#t~ret79;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~19 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 70741#L2513-8 timeShift_#t~ret107 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret107;havoc timeShift_#t~ret107; 70702#L2868-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret81, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 70703#L2557-12 assume !(1 == ~currentHeading~0); 59963#L2567-36 assume !(0 == ~currentFloorID~0); 59964#L2567-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 54508#L2573-29 havoc __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_#t~ret10, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret158, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~10;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~10; 58825#L1150-134 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~10 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~10; 58983#L1177-134 isExecutiveFloorCalling_#t~ret158 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret158;havoc isExecutiveFloorCalling_#t~ret158;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 55080#L3232-19 __utac_acc__Specification14_spec__1_#t~ret7 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret7;havoc __utac_acc__Specification14_spec__1_#t~ret7; 55081#L320-8 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 54712#L320-9 cleanup_~i~2 := 1 + cleanup_~i~2; 56363#L490-2 [2019-11-15 22:31:36,879 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-15 22:31:36,880 INFO L82 PathProgramCache]: Analyzing trace with hash 131575023, now seen corresponding path program 2 times [2019-11-15 22:31:36,880 INFO L157 tionRefinementEngine]: Executing refinement strategy CAMEL [2019-11-15 22:31:36,880 INFO L342 tionRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1852936733] [2019-11-15 22:31:36,881 INFO L116 rtionOrderModulation]: Craig_NestedInterpolation forces the order to NOT_INCREMENTALLY [2019-11-15 22:31:36,882 INFO L116 rtionOrderModulation]: Craig_NestedInterpolation forces the order to NOT_INCREMENTALLY [2019-11-15 22:31:36,883 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-11-15 22:31:36,942 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-15 22:31:37,065 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-11-15 22:31:37,066 INFO L342 tionRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1852936733] [2019-11-15 22:31:37,067 INFO L223 tionRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-11-15 22:31:37,067 INFO L236 tionRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2019-11-15 22:31:37,067 INFO L342 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1930462958] [2019-11-15 22:31:37,070 INFO L796 eck$LassoCheckResult]: stem already infeasible [2019-11-15 22:31:37,070 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-15 22:31:37,070 INFO L82 PathProgramCache]: Analyzing trace with hash 1741156240, now seen corresponding path program 1 times [2019-11-15 22:31:37,071 INFO L157 tionRefinementEngine]: Executing refinement strategy CAMEL [2019-11-15 22:31:37,071 INFO L342 tionRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1713620290] [2019-11-15 22:31:37,071 INFO L116 rtionOrderModulation]: Craig_NestedInterpolation forces the order to NOT_INCREMENTALLY [2019-11-15 22:31:37,071 INFO L116 rtionOrderModulation]: Craig_NestedInterpolation forces the order to NOT_INCREMENTALLY [2019-11-15 22:31:37,072 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-11-15 22:31:37,106 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-15 22:31:37,132 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-11-15 22:31:37,133 INFO L342 tionRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1713620290] [2019-11-15 22:31:37,133 INFO L223 tionRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-11-15 22:31:37,133 INFO L236 tionRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2019-11-15 22:31:37,133 INFO L342 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1498902734] [2019-11-15 22:31:37,134 INFO L808 eck$LassoCheckResult]: loop already infeasible [2019-11-15 22:31:37,134 INFO L137 tionRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-11-15 22:31:37,134 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2019-11-15 22:31:37,134 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2019-11-15 22:31:37,135 INFO L87 Difference]: Start difference. First operand 16469 states and 31000 transitions. cyclomatic complexity: 14533 Second operand 3 states. [2019-11-15 22:31:37,696 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-11-15 22:31:37,697 INFO L93 Difference]: Finished difference Result 29574 states and 55626 transitions. [2019-11-15 22:31:37,697 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2019-11-15 22:31:37,698 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 29574 states and 55626 transitions. [2019-11-15 22:31:37,853 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 6710 [2019-11-15 22:31:37,950 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 29574 states to 29574 states and 55626 transitions. [2019-11-15 22:31:37,950 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 29574 [2019-11-15 22:31:37,974 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 29574 [2019-11-15 22:31:37,974 INFO L73 IsDeterministic]: Start isDeterministic. Operand 29574 states and 55626 transitions. [2019-11-15 22:31:37,999 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2019-11-15 22:31:37,999 INFO L688 BuchiCegarLoop]: Abstraction has 29574 states and 55626 transitions. [2019-11-15 22:31:38,022 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 29574 states and 55626 transitions. [2019-11-15 22:31:38,634 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 29574 to 29542. [2019-11-15 22:31:38,635 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 29542 states. [2019-11-15 22:31:38,706 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 29542 states to 29542 states and 55578 transitions. [2019-11-15 22:31:38,706 INFO L711 BuchiCegarLoop]: Abstraction has 29542 states and 55578 transitions. [2019-11-15 22:31:38,706 INFO L591 BuchiCegarLoop]: Abstraction has 29542 states and 55578 transitions. [2019-11-15 22:31:38,706 INFO L424 BuchiCegarLoop]: ======== Iteration 3============ [2019-11-15 22:31:38,707 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 29542 states and 55578 transitions. [2019-11-15 22:31:38,768 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 6702 [2019-11-15 22:31:38,768 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2019-11-15 22:31:38,768 INFO L119 BuchiIsEmpty]: Starting construction of run [2019-11-15 22:31:38,772 INFO L849 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-15 22:31:38,773 INFO L850 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-15 22:31:38,773 INFO L791 eck$LassoCheckResult]: Stem: 104568#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;call #t~string43.base, #t~string43.offset := #Ultimate.allocOnStack(30);call #t~string44.base, #t~string44.offset := #Ultimate.allocOnStack(9);call #t~string45.base, #t~string45.offset := #Ultimate.allocOnStack(21);call #t~string46.base, #t~string46.offset := #Ultimate.allocOnStack(30);call #t~string47.base, #t~string47.offset := #Ultimate.allocOnStack(9);call #t~string48.base, #t~string48.offset := #Ultimate.allocOnStack(21);call #t~string52.base, #t~string52.offset := #Ultimate.allocOnStack(30);call #t~string53.base, #t~string53.offset := #Ultimate.allocOnStack(9);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(25);call #t~string55.base, #t~string55.offset := #Ultimate.allocOnStack(30);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(9);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(25);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string111.base, #t~string111.offset := #Ultimate.allocOnStack(10);call #t~string113.base, #t~string113.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string113.base, #t~string113.offset, 1);call write~init~int(95, #t~string113.base, 1 + #t~string113.offset, 1);call write~init~int(93, #t~string113.base, 2 + #t~string113.offset, 1);call write~init~int(0, #t~string113.base, 3 + #t~string113.offset, 1);call #t~string115.base, #t~string115.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string115.base, #t~string115.offset, 1);call write~init~int(93, #t~string115.base, 1 + #t~string115.offset, 1);call write~init~int(32, #t~string115.base, 2 + #t~string115.offset, 1);call write~init~int(0, #t~string115.base, 3 + #t~string115.offset, 1);call #t~string117.base, #t~string117.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string117.base, #t~string117.offset, 1);call write~init~int(97, #t~string117.base, 1 + #t~string117.offset, 1);call write~init~int(116, #t~string117.base, 2 + #t~string117.offset, 1);call write~init~int(32, #t~string117.base, 3 + #t~string117.offset, 1);call write~init~int(0, #t~string117.base, 4 + #t~string117.offset, 1);call #t~string119.base, #t~string119.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string119.base, #t~string119.offset, 1);call write~init~int(105, #t~string119.base, 1 + #t~string119.offset, 1);call write~init~int(0, #t~string119.base, 2 + #t~string119.offset, 1);call #t~string121.base, #t~string121.offset := #Ultimate.allocOnStack(10);call #t~string123.base, #t~string123.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string123.base, #t~string123.offset, 1);call write~init~int(112, #t~string123.base, 1 + #t~string123.offset, 1);call write~init~int(0, #t~string123.base, 2 + #t~string123.offset, 1);call #t~string125.base, #t~string125.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string125.base, #t~string125.offset, 1);call write~init~int(111, #t~string125.base, 1 + #t~string125.offset, 1);call write~init~int(119, #t~string125.base, 2 + #t~string125.offset, 1);call write~init~int(110, #t~string125.base, 3 + #t~string125.offset, 1);call write~init~int(0, #t~string125.base, 4 + #t~string125.offset, 1);call #t~string127.base, #t~string127.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string127.base, #t~string127.offset, 1);call write~init~int(73, #t~string127.base, 1 + #t~string127.offset, 1);call write~init~int(76, #t~string127.base, 2 + #t~string127.offset, 1);call write~init~int(95, #t~string127.base, 3 + #t~string127.offset, 1);call write~init~int(112, #t~string127.base, 4 + #t~string127.offset, 1);call write~init~int(58, #t~string127.base, 5 + #t~string127.offset, 1);call write~init~int(0, #t~string127.base, 6 + #t~string127.offset, 1);call #t~string129.base, #t~string129.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string129.base, #t~string129.offset, 1);call write~init~int(37, #t~string129.base, 1 + #t~string129.offset, 1);call write~init~int(105, #t~string129.base, 2 + #t~string129.offset, 1);call write~init~int(0, #t~string129.base, 3 + #t~string129.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string131.base, #t~string131.offset, 1);call write~init~int(37, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 2 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 3 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string133.base, #t~string133.offset, 1);call write~init~int(37, #t~string133.base, 1 + #t~string133.offset, 1);call write~init~int(105, #t~string133.base, 2 + #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 3 + #t~string133.offset, 1);call #t~string135.base, #t~string135.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string135.base, #t~string135.offset, 1);call write~init~int(37, #t~string135.base, 1 + #t~string135.offset, 1);call write~init~int(105, #t~string135.base, 2 + #t~string135.offset, 1);call write~init~int(0, #t~string135.base, 3 + #t~string135.offset, 1);call #t~string137.base, #t~string137.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string137.base, #t~string137.offset, 1);call write~init~int(37, #t~string137.base, 1 + #t~string137.offset, 1);call write~init~int(105, #t~string137.base, 2 + #t~string137.offset, 1);call write~init~int(0, #t~string137.base, 3 + #t~string137.offset, 1);call #t~string139.base, #t~string139.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string139.base, #t~string139.offset, 1);call write~init~int(70, #t~string139.base, 1 + #t~string139.offset, 1);call write~init~int(95, #t~string139.base, 2 + #t~string139.offset, 1);call write~init~int(112, #t~string139.base, 3 + #t~string139.offset, 1);call write~init~int(58, #t~string139.base, 4 + #t~string139.offset, 1);call write~init~int(0, #t~string139.base, 5 + #t~string139.offset, 1);call #t~string142.base, #t~string142.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string142.base, #t~string142.offset, 1);call write~init~int(37, #t~string142.base, 1 + #t~string142.offset, 1);call write~init~int(105, #t~string142.base, 2 + #t~string142.offset, 1);call write~init~int(0, #t~string142.base, 3 + #t~string142.offset, 1);call #t~string145.base, #t~string145.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string145.base, #t~string145.offset, 1);call write~init~int(37, #t~string145.base, 1 + #t~string145.offset, 1);call write~init~int(105, #t~string145.base, 2 + #t~string145.offset, 1);call write~init~int(0, #t~string145.base, 3 + #t~string145.offset, 1);call #t~string148.base, #t~string148.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string148.base, #t~string148.offset, 1);call write~init~int(37, #t~string148.base, 1 + #t~string148.offset, 1);call write~init~int(105, #t~string148.base, 2 + #t~string148.offset, 1);call write~init~int(0, #t~string148.base, 3 + #t~string148.offset, 1);call #t~string151.base, #t~string151.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string151.base, #t~string151.offset, 1);call write~init~int(37, #t~string151.base, 1 + #t~string151.offset, 1);call write~init~int(105, #t~string151.base, 2 + #t~string151.offset, 1);call write~init~int(0, #t~string151.base, 3 + #t~string151.offset, 1);call #t~string154.base, #t~string154.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string154.base, #t~string154.offset, 1);call write~init~int(37, #t~string154.base, 1 + #t~string154.offset, 1);call write~init~int(105, #t~string154.base, 2 + #t~string154.offset, 1);call write~init~int(0, #t~string154.base, 3 + #t~string154.offset, 1);call #t~string156.base, #t~string156.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string156.base, #t~string156.offset, 1);call write~init~int(0, #t~string156.base, 1 + #t~string156.offset, 1); 104569#L-1 havoc main_#res;havoc main_#t~ret24, main_~retValue_acc~6, main_~tmp~11;havoc main_~retValue_acc~6;havoc main_~tmp~11; 101002#L64 havoc valid_product_#res;havoc valid_product_~retValue_acc~1;havoc valid_product_~retValue_acc~1;valid_product_~retValue_acc~1 := 1;valid_product_#res := valid_product_~retValue_acc~1; 101003#L72 main_#t~ret24 := valid_product_#res;main_~tmp~11 := main_#t~ret24;havoc main_#t~ret24; 101054#L682 assume 0 != main_~tmp~11; 101055#L658 havoc bigMacCall_#t~ret17, bigMacCall_~tmp~8;havoc bigMacCall_~tmp~8;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 102999#L231 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 100695#L256 bigMacCall_#t~ret17 := getOrigin_#res;bigMacCall_~tmp~8 := bigMacCall_#t~ret17;havoc bigMacCall_#t~ret17;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~8;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 101783#L1421 assume 0 == initPersonOnFloor_~floor; 105881#L1422 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 100523#L1529-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 100915#L1213 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 100672#L1225-2 havoc timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_~tmp~24, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_#t~ret87, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret158, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~10;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~10; 101766#L1150 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~10 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~10; 105175#L1177 isExecutiveFloorCalling_#t~ret158 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret158;havoc isExecutiveFloorCalling_#t~ret158;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 103191#L3232 stopRequestedAtCurrentFloor_#t~ret84 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 101233#L2617 assume 0 != stopRequestedAtCurrentFloor_~tmp~22;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 101234#L1948 stopRequestedAtCurrentFloor_#t~ret85 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret85;havoc stopRequestedAtCurrentFloor_#t~ret85; 100802#L2621 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 100804#L2634 timeShift_#t~ret100 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret100;havoc timeShift_#t~ret100; 101807#L2769 assume !(0 != timeShift_~tmp___9~2); 103020#L2860 assume 1 == ~doorState~0;~doorState~0 := 0; 103021#L2860-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret158, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~10;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~10; 103024#L1150-3 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~10 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~10; 105181#L1177-3 isExecutiveFloorCalling_#t~ret158 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret158;havoc isExecutiveFloorCalling_#t~ret158;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 103195#L3232-1 stopRequestedInDirection_#t~ret78 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78; 103196#L2500 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 105085#L1948-1 stopRequestedInDirection_#t~ret79 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~19 := stopRequestedInDirection_#t~ret79;havoc stopRequestedInDirection_#t~ret79;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~19 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 102656#L2513 timeShift_#t~ret107 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret107;havoc timeShift_#t~ret107; 102401#L2868 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret81, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 102403#L2557 assume !(1 == ~currentHeading~0); 105554#L2567 assume !(0 == ~currentFloorID~0); 105893#L2567-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 104920#L2573-5 havoc __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_#t~ret10, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret158, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~10;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~10; 104921#L1150-25 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~10 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~10; 105218#L1177-25 isExecutiveFloorCalling_#t~ret158 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret158;havoc isExecutiveFloorCalling_#t~ret158;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 101180#L3232-3 __utac_acc__Specification14_spec__1_#t~ret7 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret7;havoc __utac_acc__Specification14_spec__1_#t~ret7; 101181#L320 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 100798#L320-1 havoc timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_~tmp~24, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_#t~ret87, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret158, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~10;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~10; 103241#L1150-26 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~10 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~10; 105219#L1177-26 isExecutiveFloorCalling_#t~ret158 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret158;havoc isExecutiveFloorCalling_#t~ret158;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 101195#L3232-4 stopRequestedAtCurrentFloor_#t~ret84 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 101196#L2617-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~22;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 101245#L1948-4 stopRequestedAtCurrentFloor_#t~ret85 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret85;havoc stopRequestedAtCurrentFloor_#t~ret85; 100807#L2621-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 100809#L2634-1 timeShift_#t~ret100 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret100;havoc timeShift_#t~ret100; 118620#L2769-1 assume !(0 != timeShift_~tmp___9~2); 102992#L2860-3 assume !(1 == ~doorState~0); 102993#L2860-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret158, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~10;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~10; 102996#L1150-29 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~10 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~10; 105210#L1177-29 isExecutiveFloorCalling_#t~ret158 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret158;havoc isExecutiveFloorCalling_#t~ret158;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 101197#L3232-5 stopRequestedInDirection_#t~ret78 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78; 101198#L2500-2 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 105086#L1948-5 stopRequestedInDirection_#t~ret79 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~19 := stopRequestedInDirection_#t~ret79;havoc stopRequestedInDirection_#t~ret79;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~19 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 102659#L2513-2 timeShift_#t~ret107 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret107;havoc timeShift_#t~ret107; 102394#L2868-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret81, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 102396#L2557-3 assume !(1 == ~currentHeading~0); 105566#L2567-9 assume !(0 == ~currentFloorID~0); 106073#L2567-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 100583#L2573-11 havoc __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_#t~ret10, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret158, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~10;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~10; 104898#L1150-51 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~10 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~10; 105094#L1177-51 isExecutiveFloorCalling_#t~ret158 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret158;havoc isExecutiveFloorCalling_#t~ret158;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 101168#L3232-7 __utac_acc__Specification14_spec__1_#t~ret7 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret7;havoc __utac_acc__Specification14_spec__1_#t~ret7; 101169#L320-2 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 100776#L320-3 havoc timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_~tmp~24, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_#t~ret87, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret158, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~10;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~10; 103227#L1150-52 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~10 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~10; 105095#L1177-52 isExecutiveFloorCalling_#t~ret158 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret158;havoc isExecutiveFloorCalling_#t~ret158;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 101162#L3232-8 stopRequestedAtCurrentFloor_#t~ret84 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 101163#L2617-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~22;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 101239#L1948-8 stopRequestedAtCurrentFloor_#t~ret85 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret85;havoc stopRequestedAtCurrentFloor_#t~ret85; 117434#L2621-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 100806#L2634-2 timeShift_#t~ret100 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret100;havoc timeShift_#t~ret100; 101790#L2769-2 assume !(0 != timeShift_~tmp___9~2); 103004#L2860-6 assume !(1 == ~doorState~0); 102974#L2860-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret158, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~10;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~10; 102975#L1150-55 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~10 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~10; 105087#L1177-55 isExecutiveFloorCalling_#t~ret158 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret158;havoc isExecutiveFloorCalling_#t~ret158;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 101166#L3232-9 stopRequestedInDirection_#t~ret78 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78; 101167#L2500-4 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 105092#L1948-9 stopRequestedInDirection_#t~ret79 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~19 := stopRequestedInDirection_#t~ret79;havoc stopRequestedInDirection_#t~ret79;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~19 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 102635#L2513-4 timeShift_#t~ret107 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret107;havoc timeShift_#t~ret107; 102409#L2868-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret81, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 102411#L2557-6 assume !(1 == ~currentHeading~0); 105530#L2567-18 assume !(0 == ~currentFloorID~0); 106037#L2567-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 106028#L2573-17 havoc __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_#t~ret10, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret158, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~10;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~10; 120768#L1150-77 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~10 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~10; 108170#L1177-77 isExecutiveFloorCalling_#t~ret158 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret158;havoc isExecutiveFloorCalling_#t~ret158;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 120767#L3232-11 __utac_acc__Specification14_spec__1_#t~ret7 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret7;havoc __utac_acc__Specification14_spec__1_#t~ret7; 120709#L320-4 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 120706#L320-5 havoc bobCall_#t~ret12, bobCall_~tmp~3;havoc bobCall_~tmp~3;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 120705#L231-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 120698#L256-1 bobCall_#t~ret12 := getOrigin_#res;bobCall_~tmp~3 := bobCall_#t~ret12;havoc bobCall_#t~ret12;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~3;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 120695#L1421-1 assume 0 == initPersonOnFloor_~floor; 120638#L1422-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 120630#L1529-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 120627#L1213-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 120624#L1225-5 havoc cleanup_#t~ret18, cleanup_#t~ret19, cleanup_~i~2, cleanup_~tmp~9, cleanup_~tmp___0~3, cleanup_~__cil_tmp4~0;havoc cleanup_~i~2;havoc cleanup_~tmp~9;havoc cleanup_~tmp___0~3;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_~tmp~24, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_#t~ret87, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret158, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~10;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~10; 120623#L1150-78 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~10 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~10; 108106#L1177-78 isExecutiveFloorCalling_#t~ret158 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret158;havoc isExecutiveFloorCalling_#t~ret158;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 120622#L3232-12 stopRequestedAtCurrentFloor_#t~ret84 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 120620#L2617-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~22;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 120621#L1948-12 stopRequestedAtCurrentFloor_#t~ret85 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret85;havoc stopRequestedAtCurrentFloor_#t~ret85; 129942#L2621-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 100811#L2634-3 timeShift_#t~ret100 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret100;havoc timeShift_#t~ret100; 101784#L2769-3 assume !(0 != timeShift_~tmp___9~2); 105017#L2860-9 assume !(1 == ~doorState~0); 129313#L2860-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret158, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~10;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~10; 129312#L1150-81 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~10 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~10; 129311#L1177-81 isExecutiveFloorCalling_#t~ret158 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret158;havoc isExecutiveFloorCalling_#t~ret158;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 129305#L3232-13 stopRequestedInDirection_#t~ret78 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78; 129302#L2500-6 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 129267#L1948-13 stopRequestedInDirection_#t~ret79 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~19 := stopRequestedInDirection_#t~ret79;havoc stopRequestedInDirection_#t~ret79;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~19 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 129266#L2513-6 timeShift_#t~ret107 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret107;havoc timeShift_#t~ret107; 129264#L2868-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret81, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 129265#L2557-9 assume !(1 == ~currentHeading~0); 106032#L2567-27 assume !(0 == ~currentFloorID~0); 106033#L2567-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 105995#L2573-23 havoc __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_#t~ret10, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret158, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~10;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~10; 126010#L1150-103 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~10 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~10; 106474#L1177-103 isExecutiveFloorCalling_#t~ret158 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret158;havoc isExecutiveFloorCalling_#t~ret158;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 126004#L3232-15 __utac_acc__Specification14_spec__1_#t~ret7 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret7;havoc __utac_acc__Specification14_spec__1_#t~ret7; 125991#L320-6 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 125989#L320-7 cleanup_~i~2 := 0; 125987#L490-2 [2019-11-15 22:31:38,773 INFO L793 eck$LassoCheckResult]: Loop: 125987#L490-2 assume !false; 125986#L491 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 125985#L494 assume cleanup_~i~2 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 125984#L1799 cleanup_#t~ret18 := isBlocked_#res;cleanup_~tmp___0~3 := cleanup_#t~ret18;havoc cleanup_#t~ret18; 125983#L498 assume 1 != cleanup_~tmp___0~3; 125982#L498-1 havoc isIdle_#res;havoc isIdle_#t~ret66, isIdle_~retValue_acc~20, isIdle_~tmp~17;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~17;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret61, anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_#t~ret64, anyStopRequested_#t~ret65, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~16, anyStopRequested_~tmp___0~5, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~2, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~16;havoc anyStopRequested_~tmp___0~5;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~2;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~10;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~10; 125977#L1150-104 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~10 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~10; 125975#L1177-104 anyStopRequested_#t~ret61 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret61;havoc anyStopRequested_#t~ret61; 122097#L2056 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 122091#L2120 isIdle_#t~ret66 := anyStopRequested_#res;isIdle_~tmp~17 := isIdle_#t~ret66;havoc isIdle_#t~ret66;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~17 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 122089#L2133 cleanup_#t~ret19 := isIdle_#res;cleanup_~tmp~9 := cleanup_#t~ret19;havoc cleanup_#t~ret19; 122083#L510 assume !(0 != cleanup_~tmp~9);havoc timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_~tmp~24, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_#t~ret87, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret158, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~10;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~10; 122081#L1150-109 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~10 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~10; 106419#L1177-109 isExecutiveFloorCalling_#t~ret158 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret158;havoc isExecutiveFloorCalling_#t~ret158;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 122080#L3232-16 stopRequestedAtCurrentFloor_#t~ret84 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 122078#L2617-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~22;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 122079#L1948-16 stopRequestedAtCurrentFloor_#t~ret85 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret85;havoc stopRequestedAtCurrentFloor_#t~ret85; 129941#L2621-4 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 100795#L2634-4 timeShift_#t~ret100 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret100;havoc timeShift_#t~ret100; 101791#L2769-4 assume !(0 != timeShift_~tmp___9~2); 102991#L2860-12 assume 1 == ~doorState~0;~doorState~0 := 0; 102862#L2860-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret158, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~10;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~10; 102863#L1150-112 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~10 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~10; 105133#L1177-112 isExecutiveFloorCalling_#t~ret158 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret158;havoc isExecutiveFloorCalling_#t~ret158;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 101154#L3232-17 stopRequestedInDirection_#t~ret78 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78; 101155#L2500-8 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 105078#L1948-17 stopRequestedInDirection_#t~ret79 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~19 := stopRequestedInDirection_#t~ret79;havoc stopRequestedInDirection_#t~ret79;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~19 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 106215#L2513-8 timeShift_#t~ret107 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret107;havoc timeShift_#t~ret107; 120334#L2868-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret81, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 105511#L2557-12 assume !(1 == ~currentHeading~0); 105512#L2567-36 assume !(0 == ~currentFloorID~0); 105990#L2567-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 105978#L2573-29 havoc __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_#t~ret10, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret158, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~10;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~10; 126003#L1150-134 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~10 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~10; 106659#L1177-134 isExecutiveFloorCalling_#t~ret158 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret158;havoc isExecutiveFloorCalling_#t~ret158;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 126002#L3232-19 __utac_acc__Specification14_spec__1_#t~ret7 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret7;havoc __utac_acc__Specification14_spec__1_#t~ret7; 125996#L320-8 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 125988#L320-9 cleanup_~i~2 := 1 + cleanup_~i~2; 125987#L490-2 [2019-11-15 22:31:38,774 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-15 22:31:38,774 INFO L82 PathProgramCache]: Analyzing trace with hash 1174614959, now seen corresponding path program 1 times [2019-11-15 22:31:38,774 INFO L157 tionRefinementEngine]: Executing refinement strategy CAMEL [2019-11-15 22:31:38,774 INFO L342 tionRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1469624348] [2019-11-15 22:31:38,774 INFO L116 rtionOrderModulation]: Craig_NestedInterpolation forces the order to NOT_INCREMENTALLY [2019-11-15 22:31:38,775 INFO L116 rtionOrderModulation]: Craig_NestedInterpolation forces the order to NOT_INCREMENTALLY [2019-11-15 22:31:38,775 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-11-15 22:31:38,796 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-15 22:31:38,839 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-11-15 22:31:38,839 INFO L342 tionRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1469624348] [2019-11-15 22:31:38,839 INFO L223 tionRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-11-15 22:31:38,840 INFO L236 tionRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2019-11-15 22:31:38,840 INFO L342 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [82986955] [2019-11-15 22:31:38,840 INFO L796 eck$LassoCheckResult]: stem already infeasible [2019-11-15 22:31:38,841 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-15 22:31:38,841 INFO L82 PathProgramCache]: Analyzing trace with hash -778803694, now seen corresponding path program 1 times [2019-11-15 22:31:38,841 INFO L157 tionRefinementEngine]: Executing refinement strategy CAMEL [2019-11-15 22:31:38,841 INFO L342 tionRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1241167153] [2019-11-15 22:31:38,841 INFO L116 rtionOrderModulation]: Craig_NestedInterpolation forces the order to NOT_INCREMENTALLY [2019-11-15 22:31:38,841 INFO L116 rtionOrderModulation]: Craig_NestedInterpolation forces the order to NOT_INCREMENTALLY [2019-11-15 22:31:38,842 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-11-15 22:31:38,850 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-15 22:31:38,909 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-11-15 22:31:38,909 INFO L342 tionRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1241167153] [2019-11-15 22:31:38,910 INFO L223 tionRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-11-15 22:31:38,910 INFO L236 tionRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2019-11-15 22:31:38,910 INFO L342 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1823788172] [2019-11-15 22:31:38,910 INFO L808 eck$LassoCheckResult]: loop already infeasible [2019-11-15 22:31:38,911 INFO L137 tionRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-11-15 22:31:38,911 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2019-11-15 22:31:38,911 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=43, Unknown=0, NotChecked=0, Total=56 [2019-11-15 22:31:38,911 INFO L87 Difference]: Start difference. First operand 29542 states and 55578 transitions. cyclomatic complexity: 26038 Second operand 8 states. [2019-11-15 22:31:47,783 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-11-15 22:31:47,783 INFO L93 Difference]: Finished difference Result 283781 states and 536828 transitions. [2019-11-15 22:31:47,784 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 32 states. [2019-11-15 22:31:47,784 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 283781 states and 536828 transitions. [2019-11-15 22:31:49,274 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 81468 [2019-11-15 22:31:50,189 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 283781 states to 283781 states and 536828 transitions. [2019-11-15 22:31:50,190 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 283781 [2019-11-15 22:31:50,361 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 283781 [2019-11-15 22:31:50,362 INFO L73 IsDeterministic]: Start isDeterministic. Operand 283781 states and 536828 transitions. [2019-11-15 22:31:50,540 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2019-11-15 22:31:50,540 INFO L688 BuchiCegarLoop]: Abstraction has 283781 states and 536828 transitions. [2019-11-15 22:31:50,679 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 283781 states and 536828 transitions. [2019-11-15 22:31:52,019 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 283781 to 58906. [2019-11-15 22:31:52,019 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 58906 states. [2019-11-15 22:31:52,153 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 58906 states to 58906 states and 110795 transitions. [2019-11-15 22:31:52,153 INFO L711 BuchiCegarLoop]: Abstraction has 58906 states and 110795 transitions. [2019-11-15 22:31:52,153 INFO L591 BuchiCegarLoop]: Abstraction has 58906 states and 110795 transitions. [2019-11-15 22:31:52,153 INFO L424 BuchiCegarLoop]: ======== Iteration 4============ [2019-11-15 22:31:52,153 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 58906 states and 110795 transitions. [2019-11-15 22:31:52,614 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 13280 [2019-11-15 22:31:52,614 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2019-11-15 22:31:52,614 INFO L119 BuchiIsEmpty]: Starting construction of run [2019-11-15 22:31:52,618 INFO L849 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-15 22:31:52,618 INFO L850 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-15 22:31:52,618 INFO L791 eck$LassoCheckResult]: Stem: 418177#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;call #t~string43.base, #t~string43.offset := #Ultimate.allocOnStack(30);call #t~string44.base, #t~string44.offset := #Ultimate.allocOnStack(9);call #t~string45.base, #t~string45.offset := #Ultimate.allocOnStack(21);call #t~string46.base, #t~string46.offset := #Ultimate.allocOnStack(30);call #t~string47.base, #t~string47.offset := #Ultimate.allocOnStack(9);call #t~string48.base, #t~string48.offset := #Ultimate.allocOnStack(21);call #t~string52.base, #t~string52.offset := #Ultimate.allocOnStack(30);call #t~string53.base, #t~string53.offset := #Ultimate.allocOnStack(9);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(25);call #t~string55.base, #t~string55.offset := #Ultimate.allocOnStack(30);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(9);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(25);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string111.base, #t~string111.offset := #Ultimate.allocOnStack(10);call #t~string113.base, #t~string113.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string113.base, #t~string113.offset, 1);call write~init~int(95, #t~string113.base, 1 + #t~string113.offset, 1);call write~init~int(93, #t~string113.base, 2 + #t~string113.offset, 1);call write~init~int(0, #t~string113.base, 3 + #t~string113.offset, 1);call #t~string115.base, #t~string115.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string115.base, #t~string115.offset, 1);call write~init~int(93, #t~string115.base, 1 + #t~string115.offset, 1);call write~init~int(32, #t~string115.base, 2 + #t~string115.offset, 1);call write~init~int(0, #t~string115.base, 3 + #t~string115.offset, 1);call #t~string117.base, #t~string117.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string117.base, #t~string117.offset, 1);call write~init~int(97, #t~string117.base, 1 + #t~string117.offset, 1);call write~init~int(116, #t~string117.base, 2 + #t~string117.offset, 1);call write~init~int(32, #t~string117.base, 3 + #t~string117.offset, 1);call write~init~int(0, #t~string117.base, 4 + #t~string117.offset, 1);call #t~string119.base, #t~string119.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string119.base, #t~string119.offset, 1);call write~init~int(105, #t~string119.base, 1 + #t~string119.offset, 1);call write~init~int(0, #t~string119.base, 2 + #t~string119.offset, 1);call #t~string121.base, #t~string121.offset := #Ultimate.allocOnStack(10);call #t~string123.base, #t~string123.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string123.base, #t~string123.offset, 1);call write~init~int(112, #t~string123.base, 1 + #t~string123.offset, 1);call write~init~int(0, #t~string123.base, 2 + #t~string123.offset, 1);call #t~string125.base, #t~string125.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string125.base, #t~string125.offset, 1);call write~init~int(111, #t~string125.base, 1 + #t~string125.offset, 1);call write~init~int(119, #t~string125.base, 2 + #t~string125.offset, 1);call write~init~int(110, #t~string125.base, 3 + #t~string125.offset, 1);call write~init~int(0, #t~string125.base, 4 + #t~string125.offset, 1);call #t~string127.base, #t~string127.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string127.base, #t~string127.offset, 1);call write~init~int(73, #t~string127.base, 1 + #t~string127.offset, 1);call write~init~int(76, #t~string127.base, 2 + #t~string127.offset, 1);call write~init~int(95, #t~string127.base, 3 + #t~string127.offset, 1);call write~init~int(112, #t~string127.base, 4 + #t~string127.offset, 1);call write~init~int(58, #t~string127.base, 5 + #t~string127.offset, 1);call write~init~int(0, #t~string127.base, 6 + #t~string127.offset, 1);call #t~string129.base, #t~string129.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string129.base, #t~string129.offset, 1);call write~init~int(37, #t~string129.base, 1 + #t~string129.offset, 1);call write~init~int(105, #t~string129.base, 2 + #t~string129.offset, 1);call write~init~int(0, #t~string129.base, 3 + #t~string129.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string131.base, #t~string131.offset, 1);call write~init~int(37, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 2 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 3 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string133.base, #t~string133.offset, 1);call write~init~int(37, #t~string133.base, 1 + #t~string133.offset, 1);call write~init~int(105, #t~string133.base, 2 + #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 3 + #t~string133.offset, 1);call #t~string135.base, #t~string135.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string135.base, #t~string135.offset, 1);call write~init~int(37, #t~string135.base, 1 + #t~string135.offset, 1);call write~init~int(105, #t~string135.base, 2 + #t~string135.offset, 1);call write~init~int(0, #t~string135.base, 3 + #t~string135.offset, 1);call #t~string137.base, #t~string137.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string137.base, #t~string137.offset, 1);call write~init~int(37, #t~string137.base, 1 + #t~string137.offset, 1);call write~init~int(105, #t~string137.base, 2 + #t~string137.offset, 1);call write~init~int(0, #t~string137.base, 3 + #t~string137.offset, 1);call #t~string139.base, #t~string139.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string139.base, #t~string139.offset, 1);call write~init~int(70, #t~string139.base, 1 + #t~string139.offset, 1);call write~init~int(95, #t~string139.base, 2 + #t~string139.offset, 1);call write~init~int(112, #t~string139.base, 3 + #t~string139.offset, 1);call write~init~int(58, #t~string139.base, 4 + #t~string139.offset, 1);call write~init~int(0, #t~string139.base, 5 + #t~string139.offset, 1);call #t~string142.base, #t~string142.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string142.base, #t~string142.offset, 1);call write~init~int(37, #t~string142.base, 1 + #t~string142.offset, 1);call write~init~int(105, #t~string142.base, 2 + #t~string142.offset, 1);call write~init~int(0, #t~string142.base, 3 + #t~string142.offset, 1);call #t~string145.base, #t~string145.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string145.base, #t~string145.offset, 1);call write~init~int(37, #t~string145.base, 1 + #t~string145.offset, 1);call write~init~int(105, #t~string145.base, 2 + #t~string145.offset, 1);call write~init~int(0, #t~string145.base, 3 + #t~string145.offset, 1);call #t~string148.base, #t~string148.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string148.base, #t~string148.offset, 1);call write~init~int(37, #t~string148.base, 1 + #t~string148.offset, 1);call write~init~int(105, #t~string148.base, 2 + #t~string148.offset, 1);call write~init~int(0, #t~string148.base, 3 + #t~string148.offset, 1);call #t~string151.base, #t~string151.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string151.base, #t~string151.offset, 1);call write~init~int(37, #t~string151.base, 1 + #t~string151.offset, 1);call write~init~int(105, #t~string151.base, 2 + #t~string151.offset, 1);call write~init~int(0, #t~string151.base, 3 + #t~string151.offset, 1);call #t~string154.base, #t~string154.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string154.base, #t~string154.offset, 1);call write~init~int(37, #t~string154.base, 1 + #t~string154.offset, 1);call write~init~int(105, #t~string154.base, 2 + #t~string154.offset, 1);call write~init~int(0, #t~string154.base, 3 + #t~string154.offset, 1);call #t~string156.base, #t~string156.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string156.base, #t~string156.offset, 1);call write~init~int(0, #t~string156.base, 1 + #t~string156.offset, 1); 418178#L-1 havoc main_#res;havoc main_#t~ret24, main_~retValue_acc~6, main_~tmp~11;havoc main_~retValue_acc~6;havoc main_~tmp~11; 414412#L64 havoc valid_product_#res;havoc valid_product_~retValue_acc~1;havoc valid_product_~retValue_acc~1;valid_product_~retValue_acc~1 := 1;valid_product_#res := valid_product_~retValue_acc~1; 414413#L72 main_#t~ret24 := valid_product_#res;main_~tmp~11 := main_#t~ret24;havoc main_#t~ret24; 414478#L682 assume 0 != main_~tmp~11; 414479#L658 havoc bigMacCall_#t~ret17, bigMacCall_~tmp~8;havoc bigMacCall_~tmp~8;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 416541#L231 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 414088#L256 bigMacCall_#t~ret17 := getOrigin_#res;bigMacCall_~tmp~8 := bigMacCall_#t~ret17;havoc bigMacCall_#t~ret17;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~8;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 415249#L1421 assume 0 == initPersonOnFloor_~floor; 419700#L1422 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 413916#L1529-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 414311#L1213 assume !(0 == callOnFloor_~floorID); 414064#L1216 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 414065#L1225-2 havoc timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_~tmp~24, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_#t~ret87, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret158, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~10;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~10; 415232#L1150 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~10 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~10; 418879#L1177 isExecutiveFloorCalling_#t~ret158 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret158;havoc isExecutiveFloorCalling_#t~ret158;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 418880#L3232 stopRequestedAtCurrentFloor_#t~ret84 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 414678#L2617 assume 0 != stopRequestedAtCurrentFloor_~tmp~22;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 414679#L1948 stopRequestedAtCurrentFloor_#t~ret85 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret85;havoc stopRequestedAtCurrentFloor_#t~ret85; 414197#L2621 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 414199#L2634 timeShift_#t~ret100 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret100;havoc timeShift_#t~ret100; 424081#L2769 assume !(0 != timeShift_~tmp___9~2); 424080#L2860 assume 1 == ~doorState~0;~doorState~0 := 0; 424079#L2860-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret158, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~10;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~10; 419222#L1150-3 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~10 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~10; 419223#L1177-3 isExecutiveFloorCalling_#t~ret158 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret158;havoc isExecutiveFloorCalling_#t~ret158;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 416747#L3232-1 stopRequestedInDirection_#t~ret78 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78; 416748#L2500 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 420110#L1948-1 stopRequestedInDirection_#t~ret79 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~19 := stopRequestedInDirection_#t~ret79;havoc stopRequestedInDirection_#t~ret79;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~19 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 420111#L2513 timeShift_#t~ret107 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret107;havoc timeShift_#t~ret107; 424076#L2868 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret81, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 419361#L2557 assume !(1 == ~currentHeading~0); 419362#L2567 assume !(0 == ~currentFloorID~0); 419715#L2567-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 419705#L2573-5 havoc __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_#t~ret10, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret158, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~10;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~10; 421948#L1150-25 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~10 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~10; 421946#L1177-25 isExecutiveFloorCalling_#t~ret158 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret158;havoc isExecutiveFloorCalling_#t~ret158;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 414613#L3232-3 __utac_acc__Specification14_spec__1_#t~ret7 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret7;havoc __utac_acc__Specification14_spec__1_#t~ret7; 414614#L320 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 425565#L320-1 havoc timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_~tmp~24, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_#t~ret87, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret158, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~10;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~10; 425566#L1150-26 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~10 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~10; 425557#L1177-26 isExecutiveFloorCalling_#t~ret158 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret158;havoc isExecutiveFloorCalling_#t~ret158;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 425558#L3232-4 stopRequestedAtCurrentFloor_#t~ret84 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 425552#L2617-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~22;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 425554#L1948-4 stopRequestedAtCurrentFloor_#t~ret85 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret85;havoc stopRequestedAtCurrentFloor_#t~ret85; 421929#L2621-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 415247#L2634-1 timeShift_#t~ret100 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret100;havoc timeShift_#t~ret100; 415248#L2769-1 assume !(0 != timeShift_~tmp___9~2); 416534#L2860-3 assume !(1 == ~doorState~0); 416535#L2860-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret158, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~10;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~10; 416538#L1150-29 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~10 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~10; 418947#L1177-29 isExecutiveFloorCalling_#t~ret158 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret158;havoc isExecutiveFloorCalling_#t~ret158;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 414631#L3232-5 stopRequestedInDirection_#t~ret78 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78; 414632#L2500-2 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 418759#L1948-5 stopRequestedInDirection_#t~ret79 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~19 := stopRequestedInDirection_#t~ret79;havoc stopRequestedInDirection_#t~ret79;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~19 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 416167#L2513-2 timeShift_#t~ret107 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret107;havoc timeShift_#t~ret107; 415887#L2868-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret81, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 415889#L2557-3 assume !(1 == ~currentHeading~0); 419376#L2567-9 assume !(0 == ~currentFloorID~0); 419906#L2567-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 426587#L2573-11 havoc __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_#t~ret10, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret158, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~10;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~10; 426588#L1150-51 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~10 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~10; 426579#L1177-51 isExecutiveFloorCalling_#t~ret158 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret158;havoc isExecutiveFloorCalling_#t~ret158;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 426580#L3232-7 __utac_acc__Specification14_spec__1_#t~ret7 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret7;havoc __utac_acc__Specification14_spec__1_#t~ret7; 426576#L320-2 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 414170#L320-3 havoc timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_~tmp~24, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_#t~ret87, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret158, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~10;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~10; 420194#L1150-52 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~10 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~10; 420195#L1177-52 isExecutiveFloorCalling_#t~ret158 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret158;havoc isExecutiveFloorCalling_#t~ret158;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 436953#L3232-8 stopRequestedAtCurrentFloor_#t~ret84 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 421931#L2617-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~22;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 421933#L1948-8 stopRequestedAtCurrentFloor_#t~ret85 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret85;havoc stopRequestedAtCurrentFloor_#t~ret85; 421922#L2621-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 421924#L2634-2 timeShift_#t~ret100 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret100;havoc timeShift_#t~ret100; 436871#L2769-2 assume !(0 != timeShift_~tmp___9~2); 436870#L2860-6 assume !(1 == ~doorState~0); 436868#L2860-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret158, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~10;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~10; 436869#L1150-55 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~10 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~10; 441540#L1177-55 isExecutiveFloorCalling_#t~ret158 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret158;havoc isExecutiveFloorCalling_#t~ret158;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 441539#L3232-9 stopRequestedInDirection_#t~ret78 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78; 441537#L2500-4 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 441538#L1948-9 stopRequestedInDirection_#t~ret79 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~19 := stopRequestedInDirection_#t~ret79;havoc stopRequestedInDirection_#t~ret79;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~19 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 441978#L2513-4 timeShift_#t~ret107 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret107;havoc timeShift_#t~ret107; 415902#L2868-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret81, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 415904#L2557-6 assume !(1 == ~currentHeading~0); 419337#L2567-18 assume !(0 == ~currentFloorID~0); 419869#L2567-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 419860#L2573-17 havoc __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_#t~ret10, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret158, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~10;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~10; 427590#L1150-77 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~10 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~10; 427585#L1177-77 isExecutiveFloorCalling_#t~ret158 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret158;havoc isExecutiveFloorCalling_#t~ret158;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 427586#L3232-11 __utac_acc__Specification14_spec__1_#t~ret7 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret7;havoc __utac_acc__Specification14_spec__1_#t~ret7; 427579#L320-4 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 427577#L320-5 havoc bobCall_#t~ret12, bobCall_~tmp~3;havoc bobCall_~tmp~3;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 427576#L231-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 427570#L256-1 bobCall_#t~ret12 := getOrigin_#res;bobCall_~tmp~3 := bobCall_#t~ret12;havoc bobCall_#t~ret12;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~3;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 427567#L1421-1 assume 0 == initPersonOnFloor_~floor; 427568#L1422-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 427533#L1529-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 427534#L1213-2 assume !(0 == callOnFloor_~floorID); 449007#L1216-2 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 426600#L1225-5 havoc cleanup_#t~ret18, cleanup_#t~ret19, cleanup_~i~2, cleanup_~tmp~9, cleanup_~tmp___0~3, cleanup_~__cil_tmp4~0;havoc cleanup_~i~2;havoc cleanup_~tmp~9;havoc cleanup_~tmp___0~3;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_~tmp~24, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_#t~ret87, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret158, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~10;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~10; 426601#L1150-78 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~10 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~10; 420417#L1177-78 isExecutiveFloorCalling_#t~ret158 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret158;havoc isExecutiveFloorCalling_#t~ret158;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 426597#L3232-12 stopRequestedAtCurrentFloor_#t~ret84 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 426593#L2617-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~22;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 426594#L1948-12 stopRequestedAtCurrentFloor_#t~ret85 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret85;havoc stopRequestedAtCurrentFloor_#t~ret85; 426589#L2621-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 414205#L2634-3 timeShift_#t~ret100 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret100;havoc timeShift_#t~ret100; 452322#L2769-3 assume !(0 != timeShift_~tmp___9~2); 452286#L2860-9 assume !(1 == ~doorState~0); 452284#L2860-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret158, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~10;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~10; 452285#L1150-81 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~10 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~10; 452265#L1177-81 isExecutiveFloorCalling_#t~ret158 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret158;havoc isExecutiveFloorCalling_#t~ret158;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 452266#L3232-13 stopRequestedInDirection_#t~ret78 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78; 452260#L2500-6 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 452261#L1948-13 stopRequestedInDirection_#t~ret79 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~19 := stopRequestedInDirection_#t~ret79;havoc stopRequestedInDirection_#t~ret79;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~19 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 452708#L2513-6 timeShift_#t~ret107 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret107;havoc timeShift_#t~ret107; 452706#L2868-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret81, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 452707#L2557-9 assume !(1 == ~currentHeading~0); 419864#L2567-27 assume !(0 == ~currentFloorID~0); 419865#L2567-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 419826#L2573-23 havoc __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_#t~ret10, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret158, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~10;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~10; 442129#L1150-103 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~10 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~10; 442127#L1177-103 isExecutiveFloorCalling_#t~ret158 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret158;havoc isExecutiveFloorCalling_#t~ret158;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 414591#L3232-15 __utac_acc__Specification14_spec__1_#t~ret7 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret7;havoc __utac_acc__Specification14_spec__1_#t~ret7; 414592#L320-6 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 416771#L320-7 cleanup_~i~2 := 0; 415863#L490-2 [2019-11-15 22:31:52,619 INFO L793 eck$LassoCheckResult]: Loop: 415863#L490-2 assume !false; 415864#L491 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 417224#L494 assume cleanup_~i~2 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 418583#L1799 cleanup_#t~ret18 := isBlocked_#res;cleanup_~tmp___0~3 := cleanup_#t~ret18;havoc cleanup_#t~ret18; 418584#L498 assume 1 != cleanup_~tmp___0~3; 464977#L498-1 havoc isIdle_#res;havoc isIdle_#t~ret66, isIdle_~retValue_acc~20, isIdle_~tmp~17;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~17;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret61, anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_#t~ret64, anyStopRequested_#t~ret65, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~16, anyStopRequested_~tmp___0~5, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~2, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~16;havoc anyStopRequested_~tmp___0~5;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~2;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~10;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~10; 460547#L1150-104 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~10 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~10; 460548#L1177-104 anyStopRequested_#t~ret61 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret61;havoc anyStopRequested_#t~ret61; 460525#L2056 assume !(0 != anyStopRequested_~tmp___3~0); 460527#L2060 assume 0 != ~floorButtons_0~0;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 460369#L2120 isIdle_#t~ret66 := anyStopRequested_#res;isIdle_~tmp~17 := isIdle_#t~ret66;havoc isIdle_#t~ret66;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~17 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 460370#L2133 cleanup_#t~ret19 := isIdle_#res;cleanup_~tmp~9 := cleanup_#t~ret19;havoc cleanup_#t~ret19; 463163#L510 assume !(0 != cleanup_~tmp~9);havoc timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_~tmp~24, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_#t~ret87, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret158, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~10;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~10; 463164#L1150-109 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~10 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~10; 418833#L1177-109 isExecutiveFloorCalling_#t~ret158 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret158;havoc isExecutiveFloorCalling_#t~ret158;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 414585#L3232-16 stopRequestedAtCurrentFloor_#t~ret84 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 414586#L2617-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~22;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 463112#L1948-16 stopRequestedAtCurrentFloor_#t~ret85 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret85;havoc stopRequestedAtCurrentFloor_#t~ret85; 463113#L2621-4 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 470678#L2634-4 timeShift_#t~ret100 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret100;havoc timeShift_#t~ret100; 470677#L2769-4 assume !(0 != timeShift_~tmp___9~2); 416533#L2860-12 assume 1 == ~doorState~0;~doorState~0 := 0; 416397#L2860-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret158, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~10;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~10; 416398#L1150-112 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~10 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~10; 418816#L1177-112 isExecutiveFloorCalling_#t~ret158 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret158;havoc isExecutiveFloorCalling_#t~ret158;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 418817#L3232-17 stopRequestedInDirection_#t~ret78 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78; 472593#L2500-8 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 420061#L1948-17 stopRequestedInDirection_#t~ret79 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~19 := stopRequestedInDirection_#t~ret79;havoc stopRequestedInDirection_#t~ret79;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~19 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 416124#L2513-8 timeShift_#t~ret107 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret107;havoc timeShift_#t~ret107; 415918#L2868-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret81, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 415919#L2557-12 assume !(1 == ~currentHeading~0); 419317#L2567-36 assume !(0 == ~currentFloorID~0); 419821#L2567-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 418466#L2573-29 havoc __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_#t~ret10, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret158, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~10;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~10; 418467#L1150-134 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~10 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~10; 418647#L1177-134 isExecutiveFloorCalling_#t~ret158 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret158;havoc isExecutiveFloorCalling_#t~ret158;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 418648#L3232-19 __utac_acc__Specification14_spec__1_#t~ret7 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret7;havoc __utac_acc__Specification14_spec__1_#t~ret7; 416775#L320-8 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 414156#L320-9 cleanup_~i~2 := 1 + cleanup_~i~2; 415863#L490-2 [2019-11-15 22:31:52,620 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-15 22:31:52,620 INFO L82 PathProgramCache]: Analyzing trace with hash 1002634152, now seen corresponding path program 1 times [2019-11-15 22:31:52,620 INFO L157 tionRefinementEngine]: Executing refinement strategy CAMEL [2019-11-15 22:31:52,620 INFO L342 tionRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2059232162] [2019-11-15 22:31:52,621 INFO L116 rtionOrderModulation]: Craig_NestedInterpolation forces the order to NOT_INCREMENTALLY [2019-11-15 22:31:52,621 INFO L116 rtionOrderModulation]: Craig_NestedInterpolation forces the order to NOT_INCREMENTALLY [2019-11-15 22:31:52,621 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-11-15 22:31:52,642 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-15 22:31:52,682 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-11-15 22:31:52,682 INFO L342 tionRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2059232162] [2019-11-15 22:31:52,683 INFO L223 tionRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-11-15 22:31:52,683 INFO L236 tionRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2019-11-15 22:31:52,683 INFO L342 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1966377609] [2019-11-15 22:31:52,683 INFO L796 eck$LassoCheckResult]: stem already infeasible [2019-11-15 22:31:52,684 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-15 22:31:52,684 INFO L82 PathProgramCache]: Analyzing trace with hash -2005249716, now seen corresponding path program 1 times [2019-11-15 22:31:52,684 INFO L157 tionRefinementEngine]: Executing refinement strategy CAMEL [2019-11-15 22:31:52,684 INFO L342 tionRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [290596583] [2019-11-15 22:31:52,684 INFO L116 rtionOrderModulation]: Craig_NestedInterpolation forces the order to NOT_INCREMENTALLY [2019-11-15 22:31:52,685 INFO L116 rtionOrderModulation]: Craig_NestedInterpolation forces the order to NOT_INCREMENTALLY [2019-11-15 22:31:52,685 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-11-15 22:31:52,691 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-15 22:31:52,750 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-11-15 22:31:52,750 INFO L342 tionRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [290596583] [2019-11-15 22:31:52,750 INFO L223 tionRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-11-15 22:31:52,750 INFO L236 tionRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2019-11-15 22:31:52,751 INFO L342 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1168717371] [2019-11-15 22:31:52,751 INFO L808 eck$LassoCheckResult]: loop already infeasible [2019-11-15 22:31:52,751 INFO L137 tionRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-11-15 22:31:52,751 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2019-11-15 22:31:52,751 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=43, Unknown=0, NotChecked=0, Total=56 [2019-11-15 22:31:52,752 INFO L87 Difference]: Start difference. First operand 58906 states and 110795 transitions. cyclomatic complexity: 51891 Second operand 8 states. [2019-11-15 22:32:08,178 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-11-15 22:32:08,178 INFO L93 Difference]: Finished difference Result 340576 states and 640399 transitions. [2019-11-15 22:32:08,178 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 41 states. [2019-11-15 22:32:08,179 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 340576 states and 640399 transitions. [2019-11-15 22:32:10,115 INFO L131 ngComponentsAnalysis]: Automaton has 6 accepting balls. 94718 [2019-11-15 22:32:10,897 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 340576 states to 340576 states and 640399 transitions. [2019-11-15 22:32:10,897 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 340576 [2019-11-15 22:32:11,065 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 340576 [2019-11-15 22:32:11,066 INFO L73 IsDeterministic]: Start isDeterministic. Operand 340576 states and 640399 transitions. [2019-11-15 22:32:11,194 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2019-11-15 22:32:11,194 INFO L688 BuchiCegarLoop]: Abstraction has 340576 states and 640399 transitions. [2019-11-15 22:32:11,330 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 340576 states and 640399 transitions. [2019-11-15 22:32:12,329 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 340576 to 58353. [2019-11-15 22:32:12,330 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 58353 states. [2019-11-15 22:32:12,434 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 58353 states to 58353 states and 109732 transitions. [2019-11-15 22:32:12,434 INFO L711 BuchiCegarLoop]: Abstraction has 58353 states and 109732 transitions. [2019-11-15 22:32:12,435 INFO L591 BuchiCegarLoop]: Abstraction has 58353 states and 109732 transitions. [2019-11-15 22:32:12,435 INFO L424 BuchiCegarLoop]: ======== Iteration 5============ [2019-11-15 22:32:12,435 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 58353 states and 109732 transitions. [2019-11-15 22:32:12,556 INFO L131 ngComponentsAnalysis]: Automaton has 6 accepting balls. 13238 [2019-11-15 22:32:12,556 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2019-11-15 22:32:12,557 INFO L119 BuchiIsEmpty]: Starting construction of run [2019-11-15 22:32:12,560 INFO L849 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-15 22:32:12,561 INFO L850 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-15 22:32:12,561 INFO L791 eck$LassoCheckResult]: Stem: 817657#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;call #t~string43.base, #t~string43.offset := #Ultimate.allocOnStack(30);call #t~string44.base, #t~string44.offset := #Ultimate.allocOnStack(9);call #t~string45.base, #t~string45.offset := #Ultimate.allocOnStack(21);call #t~string46.base, #t~string46.offset := #Ultimate.allocOnStack(30);call #t~string47.base, #t~string47.offset := #Ultimate.allocOnStack(9);call #t~string48.base, #t~string48.offset := #Ultimate.allocOnStack(21);call #t~string52.base, #t~string52.offset := #Ultimate.allocOnStack(30);call #t~string53.base, #t~string53.offset := #Ultimate.allocOnStack(9);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(25);call #t~string55.base, #t~string55.offset := #Ultimate.allocOnStack(30);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(9);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(25);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string111.base, #t~string111.offset := #Ultimate.allocOnStack(10);call #t~string113.base, #t~string113.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string113.base, #t~string113.offset, 1);call write~init~int(95, #t~string113.base, 1 + #t~string113.offset, 1);call write~init~int(93, #t~string113.base, 2 + #t~string113.offset, 1);call write~init~int(0, #t~string113.base, 3 + #t~string113.offset, 1);call #t~string115.base, #t~string115.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string115.base, #t~string115.offset, 1);call write~init~int(93, #t~string115.base, 1 + #t~string115.offset, 1);call write~init~int(32, #t~string115.base, 2 + #t~string115.offset, 1);call write~init~int(0, #t~string115.base, 3 + #t~string115.offset, 1);call #t~string117.base, #t~string117.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string117.base, #t~string117.offset, 1);call write~init~int(97, #t~string117.base, 1 + #t~string117.offset, 1);call write~init~int(116, #t~string117.base, 2 + #t~string117.offset, 1);call write~init~int(32, #t~string117.base, 3 + #t~string117.offset, 1);call write~init~int(0, #t~string117.base, 4 + #t~string117.offset, 1);call #t~string119.base, #t~string119.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string119.base, #t~string119.offset, 1);call write~init~int(105, #t~string119.base, 1 + #t~string119.offset, 1);call write~init~int(0, #t~string119.base, 2 + #t~string119.offset, 1);call #t~string121.base, #t~string121.offset := #Ultimate.allocOnStack(10);call #t~string123.base, #t~string123.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string123.base, #t~string123.offset, 1);call write~init~int(112, #t~string123.base, 1 + #t~string123.offset, 1);call write~init~int(0, #t~string123.base, 2 + #t~string123.offset, 1);call #t~string125.base, #t~string125.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string125.base, #t~string125.offset, 1);call write~init~int(111, #t~string125.base, 1 + #t~string125.offset, 1);call write~init~int(119, #t~string125.base, 2 + #t~string125.offset, 1);call write~init~int(110, #t~string125.base, 3 + #t~string125.offset, 1);call write~init~int(0, #t~string125.base, 4 + #t~string125.offset, 1);call #t~string127.base, #t~string127.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string127.base, #t~string127.offset, 1);call write~init~int(73, #t~string127.base, 1 + #t~string127.offset, 1);call write~init~int(76, #t~string127.base, 2 + #t~string127.offset, 1);call write~init~int(95, #t~string127.base, 3 + #t~string127.offset, 1);call write~init~int(112, #t~string127.base, 4 + #t~string127.offset, 1);call write~init~int(58, #t~string127.base, 5 + #t~string127.offset, 1);call write~init~int(0, #t~string127.base, 6 + #t~string127.offset, 1);call #t~string129.base, #t~string129.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string129.base, #t~string129.offset, 1);call write~init~int(37, #t~string129.base, 1 + #t~string129.offset, 1);call write~init~int(105, #t~string129.base, 2 + #t~string129.offset, 1);call write~init~int(0, #t~string129.base, 3 + #t~string129.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string131.base, #t~string131.offset, 1);call write~init~int(37, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 2 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 3 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string133.base, #t~string133.offset, 1);call write~init~int(37, #t~string133.base, 1 + #t~string133.offset, 1);call write~init~int(105, #t~string133.base, 2 + #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 3 + #t~string133.offset, 1);call #t~string135.base, #t~string135.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string135.base, #t~string135.offset, 1);call write~init~int(37, #t~string135.base, 1 + #t~string135.offset, 1);call write~init~int(105, #t~string135.base, 2 + #t~string135.offset, 1);call write~init~int(0, #t~string135.base, 3 + #t~string135.offset, 1);call #t~string137.base, #t~string137.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string137.base, #t~string137.offset, 1);call write~init~int(37, #t~string137.base, 1 + #t~string137.offset, 1);call write~init~int(105, #t~string137.base, 2 + #t~string137.offset, 1);call write~init~int(0, #t~string137.base, 3 + #t~string137.offset, 1);call #t~string139.base, #t~string139.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string139.base, #t~string139.offset, 1);call write~init~int(70, #t~string139.base, 1 + #t~string139.offset, 1);call write~init~int(95, #t~string139.base, 2 + #t~string139.offset, 1);call write~init~int(112, #t~string139.base, 3 + #t~string139.offset, 1);call write~init~int(58, #t~string139.base, 4 + #t~string139.offset, 1);call write~init~int(0, #t~string139.base, 5 + #t~string139.offset, 1);call #t~string142.base, #t~string142.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string142.base, #t~string142.offset, 1);call write~init~int(37, #t~string142.base, 1 + #t~string142.offset, 1);call write~init~int(105, #t~string142.base, 2 + #t~string142.offset, 1);call write~init~int(0, #t~string142.base, 3 + #t~string142.offset, 1);call #t~string145.base, #t~string145.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string145.base, #t~string145.offset, 1);call write~init~int(37, #t~string145.base, 1 + #t~string145.offset, 1);call write~init~int(105, #t~string145.base, 2 + #t~string145.offset, 1);call write~init~int(0, #t~string145.base, 3 + #t~string145.offset, 1);call #t~string148.base, #t~string148.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string148.base, #t~string148.offset, 1);call write~init~int(37, #t~string148.base, 1 + #t~string148.offset, 1);call write~init~int(105, #t~string148.base, 2 + #t~string148.offset, 1);call write~init~int(0, #t~string148.base, 3 + #t~string148.offset, 1);call #t~string151.base, #t~string151.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string151.base, #t~string151.offset, 1);call write~init~int(37, #t~string151.base, 1 + #t~string151.offset, 1);call write~init~int(105, #t~string151.base, 2 + #t~string151.offset, 1);call write~init~int(0, #t~string151.base, 3 + #t~string151.offset, 1);call #t~string154.base, #t~string154.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string154.base, #t~string154.offset, 1);call write~init~int(37, #t~string154.base, 1 + #t~string154.offset, 1);call write~init~int(105, #t~string154.base, 2 + #t~string154.offset, 1);call write~init~int(0, #t~string154.base, 3 + #t~string154.offset, 1);call #t~string156.base, #t~string156.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string156.base, #t~string156.offset, 1);call write~init~int(0, #t~string156.base, 1 + #t~string156.offset, 1); 817658#L-1 havoc main_#res;havoc main_#t~ret24, main_~retValue_acc~6, main_~tmp~11;havoc main_~retValue_acc~6;havoc main_~tmp~11; 813977#L64 havoc valid_product_#res;havoc valid_product_~retValue_acc~1;havoc valid_product_~retValue_acc~1;valid_product_~retValue_acc~1 := 1;valid_product_#res := valid_product_~retValue_acc~1; 813978#L72 main_#t~ret24 := valid_product_#res;main_~tmp~11 := main_#t~ret24;havoc main_#t~ret24; 814029#L682 assume 0 != main_~tmp~11; 814030#L658 havoc bigMacCall_#t~ret17, bigMacCall_~tmp~8;havoc bigMacCall_~tmp~8;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 816066#L231 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 813669#L256 bigMacCall_#t~ret17 := getOrigin_#res;bigMacCall_~tmp~8 := bigMacCall_#t~ret17;havoc bigMacCall_#t~ret17;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~8;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 814777#L1421 assume 0 == initPersonOnFloor_~floor; 819038#L1422 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 813494#L1529-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 813887#L1213 assume !(0 == callOnFloor_~floorID); 813645#L1216 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 813646#L1225-2 havoc timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_~tmp~24, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_#t~ret87, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret158, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~10;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~10; 818564#L1150 assume !(0 == isFloorCalling_~floorID); 818566#L1154 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~10 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~10; 817463#L1177 isExecutiveFloorCalling_#t~ret158 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret158;havoc isExecutiveFloorCalling_#t~ret158;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 819591#L3232 stopRequestedAtCurrentFloor_#t~ret84 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 819592#L2617 assume 0 != stopRequestedAtCurrentFloor_~tmp~22;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 819431#L1948 stopRequestedAtCurrentFloor_#t~ret85 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret85;havoc stopRequestedAtCurrentFloor_#t~ret85; 819432#L2621 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 831734#L2634 timeShift_#t~ret100 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret100;havoc timeShift_#t~ret100; 831732#L2769 assume !(0 != timeShift_~tmp___9~2); 831731#L2860 assume 1 == ~doorState~0;~doorState~0 := 0; 831683#L2860-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret158, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~10;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~10; 819613#L1150-3 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~10 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~10; 818314#L1177-3 isExecutiveFloorCalling_#t~ret158 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret158;havoc isExecutiveFloorCalling_#t~ret158;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 816270#L3232-1 stopRequestedInDirection_#t~ret78 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78; 816271#L2500 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 818206#L1948-1 stopRequestedInDirection_#t~ret79 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~19 := stopRequestedInDirection_#t~ret79;havoc stopRequestedInDirection_#t~ret79;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~19 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 836026#L2513 timeShift_#t~ret107 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret107;havoc timeShift_#t~ret107; 836018#L2868 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret81, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 836011#L2557 assume !(1 == ~currentHeading~0); 836005#L2567 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 835995#L2567-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 835832#L2573-5 havoc __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_#t~ret10, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret158, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~10;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~10; 835829#L1150-25 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~10 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~10; 835828#L1177-25 isExecutiveFloorCalling_#t~ret158 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret158;havoc isExecutiveFloorCalling_#t~ret158;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 835827#L3232-3 __utac_acc__Specification14_spec__1_#t~ret7 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret7;havoc __utac_acc__Specification14_spec__1_#t~ret7; 835822#L320 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 835820#L320-1 havoc timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_~tmp~24, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_#t~ret87, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret158, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~10;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~10; 818465#L1150-26 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~10 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~10; 818466#L1177-26 isExecutiveFloorCalling_#t~ret158 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret158;havoc isExecutiveFloorCalling_#t~ret158;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 837253#L3232-4 stopRequestedAtCurrentFloor_#t~ret84 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 837252#L2617-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22);havoc stopRequestedAtCurrentFloor__wrappee__empty_#res;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret82, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret83, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~21, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~21;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~10;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~10; 837251#L1150-28 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~10 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~10; 837245#L1177-28 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret82 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret82;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret82; 837242#L2590-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24; 837241#L2602-3 stopRequestedAtCurrentFloor_#t~ret87 := stopRequestedAtCurrentFloor__wrappee__empty_#res;stopRequestedAtCurrentFloor_~retValue_acc~25 := stopRequestedAtCurrentFloor_#t~ret87;havoc stopRequestedAtCurrentFloor_#t~ret87;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 837240#L2634-1 timeShift_#t~ret100 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret100;havoc timeShift_#t~ret100; 837239#L2769-1 assume !(0 != timeShift_~tmp___9~2); 837238#L2860-3 assume !(1 == ~doorState~0); 837236#L2860-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret158, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~10;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~10; 837234#L1150-29 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~10 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~10; 837233#L1177-29 isExecutiveFloorCalling_#t~ret158 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret158;havoc isExecutiveFloorCalling_#t~ret158;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 837232#L3232-5 stopRequestedInDirection_#t~ret78 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78; 837230#L2500-2 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 837228#L1948-5 stopRequestedInDirection_#t~ret79 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~19 := stopRequestedInDirection_#t~ret79;havoc stopRequestedInDirection_#t~ret79;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~19 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 837226#L2513-2 timeShift_#t~ret107 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret107;havoc timeShift_#t~ret107; 837107#L2868-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret81, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 837098#L2557-3 assume !(1 == ~currentHeading~0); 837092#L2567-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 837091#L2567-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 832501#L2573-11 havoc __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_#t~ret10, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret158, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~10;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~10; 819485#L1150-51 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~10 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~10; 818218#L1177-51 isExecutiveFloorCalling_#t~ret158 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret158;havoc isExecutiveFloorCalling_#t~ret158;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 818219#L3232-7 __utac_acc__Specification14_spec__1_#t~ret7 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret7;havoc __utac_acc__Specification14_spec__1_#t~ret7; 832495#L320-2 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 832489#L320-3 havoc timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_~tmp~24, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_#t~ret87, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret158, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~10;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~10; 819487#L1150-52 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~10 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~10; 819488#L1177-52 isExecutiveFloorCalling_#t~ret158 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret158;havoc isExecutiveFloorCalling_#t~ret158;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 833124#L3232-8 stopRequestedAtCurrentFloor_#t~ret84 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 833123#L2617-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22);havoc stopRequestedAtCurrentFloor__wrappee__empty_#res;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret82, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret83, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~21, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~21;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~10;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~10; 833121#L1150-54 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~10 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~10; 833116#L1177-54 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret82 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret82;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret82; 833113#L2590-5 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24; 833112#L2602-5 stopRequestedAtCurrentFloor_#t~ret87 := stopRequestedAtCurrentFloor__wrappee__empty_#res;stopRequestedAtCurrentFloor_~retValue_acc~25 := stopRequestedAtCurrentFloor_#t~ret87;havoc stopRequestedAtCurrentFloor_#t~ret87;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 833111#L2634-2 timeShift_#t~ret100 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret100;havoc timeShift_#t~ret100; 833109#L2769-2 assume !(0 != timeShift_~tmp___9~2); 833108#L2860-6 assume !(1 == ~doorState~0); 833106#L2860-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret158, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~10;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~10; 833103#L1150-55 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~10 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~10; 833102#L1177-55 isExecutiveFloorCalling_#t~ret158 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret158;havoc isExecutiveFloorCalling_#t~ret158;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 833101#L3232-9 stopRequestedInDirection_#t~ret78 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78; 833099#L2500-4 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 833097#L1948-9 stopRequestedInDirection_#t~ret79 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~19 := stopRequestedInDirection_#t~ret79;havoc stopRequestedInDirection_#t~ret79;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~19 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 833096#L2513-4 timeShift_#t~ret107 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret107;havoc timeShift_#t~ret107; 833094#L2868-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret81, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 832363#L2557-6 assume !(1 == ~currentHeading~0); 832355#L2567-18 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 832345#L2567-20 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 826213#L2573-17 havoc __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_#t~ret10, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret158, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~10;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~10; 826211#L1150-77 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~10 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~10; 820553#L1177-77 isExecutiveFloorCalling_#t~ret158 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret158;havoc isExecutiveFloorCalling_#t~ret158;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 826207#L3232-11 __utac_acc__Specification14_spec__1_#t~ret7 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret7;havoc __utac_acc__Specification14_spec__1_#t~ret7; 826200#L320-4 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 826197#L320-5 havoc bobCall_#t~ret12, bobCall_~tmp~3;havoc bobCall_~tmp~3;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 826190#L231-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 826179#L256-1 bobCall_#t~ret12 := getOrigin_#res;bobCall_~tmp~3 := bobCall_#t~ret12;havoc bobCall_#t~ret12;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~3;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 826177#L1421-1 assume 0 == initPersonOnFloor_~floor; 826120#L1422-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 826111#L1529-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 826106#L1213-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 822075#L1225-5 havoc cleanup_#t~ret18, cleanup_#t~ret19, cleanup_~i~2, cleanup_~tmp~9, cleanup_~tmp___0~3, cleanup_~__cil_tmp4~0;havoc cleanup_~i~2;havoc cleanup_~tmp~9;havoc cleanup_~tmp___0~3;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_~tmp~24, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_#t~ret87, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret158, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~10;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~10; 820495#L1150-78 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~10 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~10; 820496#L1177-78 isExecutiveFloorCalling_#t~ret158 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret158;havoc isExecutiveFloorCalling_#t~ret158;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 820491#L3232-12 stopRequestedAtCurrentFloor_#t~ret84 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 820492#L2617-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~22;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 820486#L1948-12 stopRequestedAtCurrentFloor_#t~ret85 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret85;havoc stopRequestedAtCurrentFloor_#t~ret85; 820487#L2621-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 822069#L2634-3 timeShift_#t~ret100 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret100;havoc timeShift_#t~ret100; 822067#L2769-3 assume !(0 != timeShift_~tmp___9~2); 822066#L2860-9 assume !(1 == ~doorState~0); 822065#L2860-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret158, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~10;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~10; 822064#L1150-81 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~10 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~10; 822063#L1177-81 isExecutiveFloorCalling_#t~ret158 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret158;havoc isExecutiveFloorCalling_#t~ret158;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 822062#L3232-13 stopRequestedInDirection_#t~ret78 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78; 822060#L2500-6 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 822058#L1948-13 stopRequestedInDirection_#t~ret79 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~19 := stopRequestedInDirection_#t~ret79;havoc stopRequestedInDirection_#t~ret79;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~19 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 822039#L2513-6 timeShift_#t~ret107 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret107;havoc timeShift_#t~ret107; 822033#L2868-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret81, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 821778#L2557-9 assume !(1 == ~currentHeading~0); 821779#L2567-27 assume !(0 == ~currentFloorID~0); 821749#L2567-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 821630#L2573-23 havoc __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_#t~ret10, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret158, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~10;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~10; 821631#L1150-103 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~10 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~10; 821625#L1177-103 isExecutiveFloorCalling_#t~ret158 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret158;havoc isExecutiveFloorCalling_#t~ret158;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 821626#L3232-15 __utac_acc__Specification14_spec__1_#t~ret7 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret7;havoc __utac_acc__Specification14_spec__1_#t~ret7; 821621#L320-6 assume 0 != __utac_acc__Specification14_spec__1_~tmp___2~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 821622#L1948-15 __utac_acc__Specification14_spec__1_#t~ret8 := getCurrentFloorID_#res;__utac_acc__Specification14_spec__1_~tmp~2 := __utac_acc__Specification14_spec__1_#t~ret8;havoc __utac_acc__Specification14_spec__1_#t~ret8;isExecutiveFloor_#in~floorID := __utac_acc__Specification14_spec__1_~tmp~2;havoc isExecutiveFloor_#res;havoc isExecutiveFloor_~floorID, isExecutiveFloor_~retValue_acc~29;isExecutiveFloor_~floorID := isExecutiveFloor_#in~floorID;havoc isExecutiveFloor_~retValue_acc~29;isExecutiveFloor_~retValue_acc~29 := (if ~executiveFloor~0 == isExecutiveFloor_~floorID then 1 else 0);isExecutiveFloor_#res := isExecutiveFloor_~retValue_acc~29; 821617#L3241-3 __utac_acc__Specification14_spec__1_#t~ret9 := isExecutiveFloor_#res;__utac_acc__Specification14_spec__1_~tmp___0~2 := __utac_acc__Specification14_spec__1_#t~ret9;havoc __utac_acc__Specification14_spec__1_#t~ret9; 821618#L325-6 assume 0 != __utac_acc__Specification14_spec__1_~tmp___0~2; 821610#L320-7 cleanup_~i~2 := 0; 821609#L490-2 [2019-11-15 22:32:12,562 INFO L793 eck$LassoCheckResult]: Loop: 821609#L490-2 assume !false; 821603#L491 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 821604#L494 assume cleanup_~i~2 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 821466#L1799 cleanup_#t~ret18 := isBlocked_#res;cleanup_~tmp___0~3 := cleanup_#t~ret18;havoc cleanup_#t~ret18; 821467#L498 assume 1 != cleanup_~tmp___0~3; 820669#L498-1 havoc isIdle_#res;havoc isIdle_#t~ret66, isIdle_~retValue_acc~20, isIdle_~tmp~17;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~17;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret61, anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_#t~ret64, anyStopRequested_#t~ret65, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~16, anyStopRequested_~tmp___0~5, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~2, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~16;havoc anyStopRequested_~tmp___0~5;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~2;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~10;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~10; 820670#L1150-104 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~10 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~10; 820665#L1177-104 anyStopRequested_#t~ret61 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret61;havoc anyStopRequested_#t~ret61; 820666#L2056 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 820661#L2120 isIdle_#t~ret66 := anyStopRequested_#res;isIdle_~tmp~17 := isIdle_#t~ret66;havoc isIdle_#t~ret66;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~17 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 820662#L2133 cleanup_#t~ret19 := isIdle_#res;cleanup_~tmp~9 := cleanup_#t~ret19;havoc cleanup_#t~ret19; 820655#L510 assume !(0 != cleanup_~tmp~9);havoc timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_~tmp~24, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~24;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_#t~ret87, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~22, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~22;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret158, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~10;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~10; 820656#L1150-109 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~10 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~10; 820649#L1177-109 isExecutiveFloorCalling_#t~ret158 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret158;havoc isExecutiveFloorCalling_#t~ret158;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 820650#L3232-16 stopRequestedAtCurrentFloor_#t~ret84 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~22 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 820644#L2617-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~22;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 820646#L1948-16 stopRequestedAtCurrentFloor_#t~ret85 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret85;havoc stopRequestedAtCurrentFloor_#t~ret85; 820641#L2621-4 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 813769#L2634-4 timeShift_#t~ret100 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret100;havoc timeShift_#t~ret100; 851424#L2769-4 assume !(0 != timeShift_~tmp___9~2); 851425#L2860-12 assume 1 == ~doorState~0;~doorState~0 := 0; 860182#L2860-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret158, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~10;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~10; 860181#L1150-112 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~10 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~10; 860180#L1177-112 isExecutiveFloorCalling_#t~ret158 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret158;havoc isExecutiveFloorCalling_#t~ret158;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 860179#L3232-17 stopRequestedInDirection_#t~ret78 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78; 860177#L2500-8 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 860175#L1948-17 stopRequestedInDirection_#t~ret79 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~19 := stopRequestedInDirection_#t~ret79;havoc stopRequestedInDirection_#t~ret79;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~19 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 860172#L2513-8 timeShift_#t~ret107 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret107;havoc timeShift_#t~ret107; 860098#L2868-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret81, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 860039#L2557-12 assume !(1 == ~currentHeading~0); 854607#L2567-36 assume !(0 == ~currentFloorID~0); 854605#L2567-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 854599#L2573-29 havoc __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_#t~ret10, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret158, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~10;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~10; 821648#L1150-134 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~10 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~10; 821647#L1177-134 isExecutiveFloorCalling_#t~ret158 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret158;havoc isExecutiveFloorCalling_#t~ret158;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 821644#L3232-19 __utac_acc__Specification14_spec__1_#t~ret7 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret7;havoc __utac_acc__Specification14_spec__1_#t~ret7; 821641#L320-8 assume 0 != __utac_acc__Specification14_spec__1_~tmp___2~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 821640#L1948-19 __utac_acc__Specification14_spec__1_#t~ret8 := getCurrentFloorID_#res;__utac_acc__Specification14_spec__1_~tmp~2 := __utac_acc__Specification14_spec__1_#t~ret8;havoc __utac_acc__Specification14_spec__1_#t~ret8;isExecutiveFloor_#in~floorID := __utac_acc__Specification14_spec__1_~tmp~2;havoc isExecutiveFloor_#res;havoc isExecutiveFloor_~floorID, isExecutiveFloor_~retValue_acc~29;isExecutiveFloor_~floorID := isExecutiveFloor_#in~floorID;havoc isExecutiveFloor_~retValue_acc~29;isExecutiveFloor_~retValue_acc~29 := (if ~executiveFloor~0 == isExecutiveFloor_~floorID then 1 else 0);isExecutiveFloor_#res := isExecutiveFloor_~retValue_acc~29; 821637#L3241-4 __utac_acc__Specification14_spec__1_#t~ret9 := isExecutiveFloor_#res;__utac_acc__Specification14_spec__1_~tmp___0~2 := __utac_acc__Specification14_spec__1_#t~ret9;havoc __utac_acc__Specification14_spec__1_#t~ret9; 821635#L325-8 assume 0 != __utac_acc__Specification14_spec__1_~tmp___0~2; 821608#L320-9 cleanup_~i~2 := 1 + cleanup_~i~2; 821609#L490-2 [2019-11-15 22:32:12,563 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-15 22:32:12,563 INFO L82 PathProgramCache]: Analyzing trace with hash 404167015, now seen corresponding path program 1 times [2019-11-15 22:32:12,563 INFO L157 tionRefinementEngine]: Executing refinement strategy CAMEL [2019-11-15 22:32:12,563 INFO L342 tionRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [44817389] [2019-11-15 22:32:12,564 INFO L116 rtionOrderModulation]: Craig_NestedInterpolation forces the order to NOT_INCREMENTALLY [2019-11-15 22:32:12,564 INFO L116 rtionOrderModulation]: Craig_NestedInterpolation forces the order to NOT_INCREMENTALLY [2019-11-15 22:32:12,564 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-11-15 22:32:12,582 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-15 22:32:12,621 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-11-15 22:32:12,621 INFO L342 tionRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [44817389] [2019-11-15 22:32:12,621 INFO L223 tionRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-11-15 22:32:12,621 INFO L236 tionRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2019-11-15 22:32:12,622 INFO L342 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [271352345] [2019-11-15 22:32:12,622 INFO L796 eck$LassoCheckResult]: stem already infeasible [2019-11-15 22:32:12,622 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-15 22:32:12,622 INFO L82 PathProgramCache]: Analyzing trace with hash 78590404, now seen corresponding path program 1 times [2019-11-15 22:32:12,623 INFO L157 tionRefinementEngine]: Executing refinement strategy CAMEL [2019-11-15 22:32:12,623 INFO L342 tionRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2077193718] [2019-11-15 22:32:12,623 INFO L116 rtionOrderModulation]: Craig_NestedInterpolation forces the order to NOT_INCREMENTALLY [2019-11-15 22:32:12,623 INFO L116 rtionOrderModulation]: Craig_NestedInterpolation forces the order to NOT_INCREMENTALLY [2019-11-15 22:32:12,623 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-11-15 22:32:12,636 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2019-11-15 22:32:12,647 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2019-11-15 22:32:12,682 INFO L168 tionRefinementEngine]: Strategy CAMEL found a feasible trace [2019-11-15 22:32:13,463 WARN L191 SmtUtils]: Spent 775.00 ms on a formula simplification. DAG size of input: 192 DAG size of output: 170 [2019-11-15 22:32:14,239 WARN L191 SmtUtils]: Spent 703.00 ms on a formula simplification. DAG size of input: 141 DAG size of output: 122 [2019-11-15 22:32:14,255 INFO L210 LassoAnalysis]: Preferences: [2019-11-15 22:32:14,256 INFO L124 ssoRankerPreferences]: Compute integeral hull: false [2019-11-15 22:32:14,256 INFO L125 ssoRankerPreferences]: Enable LassoPartitioneer: true [2019-11-15 22:32:14,256 INFO L126 ssoRankerPreferences]: Term annotations enabled: false [2019-11-15 22:32:14,256 INFO L127 ssoRankerPreferences]: Use exernal solver: true [2019-11-15 22:32:14,256 INFO L128 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-15 22:32:14,256 INFO L129 ssoRankerPreferences]: Dump SMT script to file: false [2019-11-15 22:32:14,256 INFO L130 ssoRankerPreferences]: Path of dumped script: [2019-11-15 22:32:14,257 INFO L131 ssoRankerPreferences]: Filename of dumped script: elevator_spec14_product11.cil.c_Iteration5_Loop [2019-11-15 22:32:14,257 INFO L132 ssoRankerPreferences]: MapElimAlgo: Frank [2019-11-15 22:32:14,257 INFO L274 LassoAnalysis]: Starting lasso preprocessing... [2019-11-15 22:32:14,288 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 22:32:14,293 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 22:32:14,294 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 22:32:14,298 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 22:32:14,304 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 22:32:14,307 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 22:32:14,308 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 22:32:14,315 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 22:32:14,317 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 22:32:14,334 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 22:32:14,339 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 22:32:14,341 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 22:32:14,343 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 22:32:14,344 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 22:32:14,349 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 22:32:14,351 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 22:32:14,352 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 22:32:14,355 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 22:32:14,356 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 22:32:14,358 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 22:32:14,364 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 22:32:14,370 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 22:32:14,372 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 22:32:14,374 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 22:32:14,375 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 22:32:14,377 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 22:32:14,380 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 22:32:14,381 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 22:32:14,405 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 22:32:14,411 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 22:32:14,414 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 22:32:14,418 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 22:32:14,420 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 22:32:14,421 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 22:32:14,423 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 22:32:14,424 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 22:32:14,431 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 22:32:14,441 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 22:32:14,442 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 22:32:14,444 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 22:32:14,446 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 22:32:14,448 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 22:32:14,450 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 22:32:14,451 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 22:32:14,453 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 22:32:14,455 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 22:32:14,456 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 22:32:14,458 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 22:32:14,463 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 22:32:14,466 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 22:32:14,480 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 22:32:14,483 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 22:32:14,489 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 22:32:14,497 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 22:32:14,499 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 22:32:14,501 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 22:32:14,502 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 22:32:14,513 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 22:32:14,515 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 22:32:14,517 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 22:32:14,523 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 22:32:14,524 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 22:32:14,527 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 22:32:14,997 WARN L191 SmtUtils]: Spent 141.00 ms on a formula simplification that was a NOOP. DAG size: 33 [2019-11-15 22:32:15,349 INFO L292 LassoAnalysis]: Preprocessing complete. [2019-11-15 22:32:15,349 INFO L404 LassoAnalysis]: Checking for nontermination... No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_fa805ef5-170e-4492-8306-00375ee37692/bin/uautomizer/z3 Starting monitored process 2 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2019-11-15 22:32:15,362 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-11-15 22:32:15,362 INFO L160 nArgumentSynthesizer]: Using integer mode. Waiting until toolchain timeout for monitored process 2 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-15 22:32:15,371 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-11-15 22:32:15,371 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_anyStopRequested_~tmp___1~4=0} Honda state: {ULTIMATE.start_anyStopRequested_~tmp___1~4=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_fa805ef5-170e-4492-8306-00375ee37692/bin/uautomizer/z3 Starting monitored process 3 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2019-11-15 22:32:15,386 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-11-15 22:32:15,386 INFO L160 nArgumentSynthesizer]: Using integer mode. Waiting until toolchain timeout for monitored process 3 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-15 22:32:15,390 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-11-15 22:32:15,391 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___1~7=0} Honda state: {ULTIMATE.start_timeShift_~tmp___1~7=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_fa805ef5-170e-4492-8306-00375ee37692/bin/uautomizer/z3 Starting monitored process 4 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 4 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-15 22:32:15,405 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-11-15 22:32:15,406 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-11-15 22:32:15,409 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-11-15 22:32:15,409 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret103=0} Honda state: {ULTIMATE.start_timeShift_#t~ret103=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_fa805ef5-170e-4492-8306-00375ee37692/bin/uautomizer/z3 Starting monitored process 5 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2019-11-15 22:32:15,421 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-11-15 22:32:15,422 INFO L160 nArgumentSynthesizer]: Using integer mode. Waiting until toolchain timeout for monitored process 5 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-15 22:32:15,430 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-11-15 22:32:15,430 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___9~2=0} Honda state: {ULTIMATE.start_timeShift_~tmp___9~2=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_fa805ef5-170e-4492-8306-00375ee37692/bin/uautomizer/z3 Starting monitored process 6 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 6 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-15 22:32:15,441 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-11-15 22:32:15,442 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-11-15 22:32:15,446 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-11-15 22:32:15,446 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp~24=0} Honda state: {ULTIMATE.start_timeShift_~tmp~24=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_fa805ef5-170e-4492-8306-00375ee37692/bin/uautomizer/z3 Starting monitored process 7 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 7 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-15 22:32:16,299 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-11-15 22:32:16,300 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-11-15 22:32:16,305 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-11-15 22:32:16,305 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification14_spec__1_#t~ret10=0} Honda state: {ULTIMATE.start___utac_acc__Specification14_spec__1_#t~ret10=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_fa805ef5-170e-4492-8306-00375ee37692/bin/uautomizer/z3 Starting monitored process 8 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 8 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-15 22:32:16,314 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-11-15 22:32:16,314 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-11-15 22:32:16,318 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-11-15 22:32:16,318 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret107=0} Honda state: {ULTIMATE.start_timeShift_#t~ret107=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_fa805ef5-170e-4492-8306-00375ee37692/bin/uautomizer/z3 Starting monitored process 9 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2019-11-15 22:32:16,330 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-11-15 22:32:16,330 INFO L160 nArgumentSynthesizer]: Using integer mode. Waiting until toolchain timeout for monitored process 9 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-15 22:32:16,333 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-11-15 22:32:16,333 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret100=0} Honda state: {ULTIMATE.start_timeShift_#t~ret100=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_fa805ef5-170e-4492-8306-00375ee37692/bin/uautomizer/z3 Starting monitored process 10 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 10 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-15 22:32:16,339 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-11-15 22:32:16,340 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-11-15 22:32:16,372 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-11-15 22:32:16,372 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_isFloorCalling_#res=-7, ~calls_0~0=-7, ULTIMATE.start_isExecutiveFloorCalling_#res=-7, ULTIMATE.start_anyStopRequested_~tmp___3~0=-7, ULTIMATE.start_isFloorCalling_~retValue_acc~10=-7, ULTIMATE.start___utac_acc__Specification14_spec__1_~tmp___2~0=-7, ULTIMATE.start_isExecutiveFloorCalling_~retValue_acc~28=-7, ULTIMATE.start_stopRequestedInDirection_~tmp___0~7=-7, ULTIMATE.start_stopRequestedAtCurrentFloor_~tmp~22=-7} Honda state: {ULTIMATE.start_isFloorCalling_#res=-7, ~calls_0~0=-7, ULTIMATE.start_isExecutiveFloorCalling_#res=-7, ULTIMATE.start_anyStopRequested_~tmp___3~0=-7, ULTIMATE.start_isFloorCalling_~retValue_acc~10=-7, ULTIMATE.start___utac_acc__Specification14_spec__1_~tmp___2~0=-7, ULTIMATE.start_isExecutiveFloorCalling_~retValue_acc~28=-7, ULTIMATE.start_stopRequestedInDirection_~tmp___0~7=-7, ULTIMATE.start_stopRequestedAtCurrentFloor_~tmp~22=-7} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_fa805ef5-170e-4492-8306-00375ee37692/bin/uautomizer/z3 Starting monitored process 11 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2019-11-15 22:32:16,384 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-11-15 22:32:16,384 INFO L160 nArgumentSynthesizer]: Using integer mode. Waiting until toolchain timeout for monitored process 11 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-15 22:32:16,389 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-11-15 22:32:16,389 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_~__cil_tmp7~5=0, ULTIMATE.start_stopRequestedInDirection_~__cil_tmp8~5=0} Honda state: {ULTIMATE.start_stopRequestedInDirection_~__cil_tmp7~5=0, ULTIMATE.start_stopRequestedInDirection_~__cil_tmp8~5=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_fa805ef5-170e-4492-8306-00375ee37692/bin/uautomizer/z3 Starting monitored process 12 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 12 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-15 22:32:16,409 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-11-15 22:32:16,410 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-11-15 22:32:16,414 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-11-15 22:32:16,414 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_anyStopRequested_~tmp___2~2=0} Honda state: {ULTIMATE.start_anyStopRequested_~tmp___2~2=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_fa805ef5-170e-4492-8306-00375ee37692/bin/uautomizer/z3 Starting monitored process 13 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 13 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-15 22:32:16,429 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-11-15 22:32:16,430 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-11-15 22:32:16,433 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-11-15 22:32:16,433 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_anyStopRequested_#t~ret62=0} Honda state: {ULTIMATE.start_anyStopRequested_#t~ret62=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_fa805ef5-170e-4492-8306-00375ee37692/bin/uautomizer/z3 Starting monitored process 14 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 14 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-15 22:32:16,437 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-11-15 22:32:16,437 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-11-15 22:32:16,440 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-11-15 22:32:16,440 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_anyStopRequested_#t~ret64=0} Honda state: {ULTIMATE.start_anyStopRequested_#t~ret64=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_fa805ef5-170e-4492-8306-00375ee37692/bin/uautomizer/z3 Starting monitored process 15 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 15 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-15 22:32:16,445 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-11-15 22:32:16,445 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-11-15 22:32:16,450 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-11-15 22:32:16,450 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_#in~respectFloorCalls=1, ULTIMATE.start_stopRequestedInDirection_~respectFloorCalls=1} Honda state: {ULTIMATE.start_stopRequestedInDirection_#in~respectFloorCalls=1, ULTIMATE.start_stopRequestedInDirection_~respectFloorCalls=1} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_fa805ef5-170e-4492-8306-00375ee37692/bin/uautomizer/z3 Starting monitored process 16 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 16 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-15 22:32:16,455 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-11-15 22:32:16,455 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-11-15 22:32:16,458 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-11-15 22:32:16,458 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedAtCurrentFloor_#t~ret87=0} Honda state: {ULTIMATE.start_stopRequestedAtCurrentFloor_#t~ret87=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_fa805ef5-170e-4492-8306-00375ee37692/bin/uautomizer/z3 Starting monitored process 17 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 17 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-15 22:32:16,470 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-11-15 22:32:16,470 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-11-15 22:32:16,473 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-11-15 22:32:16,473 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_anyStopRequested_~tmp~16=0} Honda state: {ULTIMATE.start_anyStopRequested_~tmp~16=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_fa805ef5-170e-4492-8306-00375ee37692/bin/uautomizer/z3 Starting monitored process 18 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 18 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-15 22:32:16,478 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-11-15 22:32:16,478 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-11-15 22:32:16,480 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-11-15 22:32:16,481 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification14_spec__1_#t~ret7=0} Honda state: {ULTIMATE.start___utac_acc__Specification14_spec__1_#t~ret7=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_fa805ef5-170e-4492-8306-00375ee37692/bin/uautomizer/z3 Starting monitored process 19 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 19 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-15 22:32:16,485 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-11-15 22:32:16,485 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-11-15 22:32:16,488 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-11-15 22:32:16,488 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_continueInDirection_#t~ret81=0} Honda state: {ULTIMATE.start_continueInDirection_#t~ret81=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_fa805ef5-170e-4492-8306-00375ee37692/bin/uautomizer/z3 Starting monitored process 20 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 20 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-15 22:32:16,492 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-11-15 22:32:16,493 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-11-15 22:32:16,495 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-11-15 22:32:16,495 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___2~5=0} Honda state: {ULTIMATE.start_timeShift_~tmp___2~5=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_fa805ef5-170e-4492-8306-00375ee37692/bin/uautomizer/z3 Starting monitored process 21 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 21 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-15 22:32:16,501 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-11-15 22:32:16,501 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-11-15 22:32:16,505 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-11-15 22:32:16,505 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_isIdle_#res=0, ULTIMATE.start_isIdle_~retValue_acc~20=0, ULTIMATE.start_cleanup_~tmp~9=0} Honda state: {ULTIMATE.start_isIdle_#res=0, ULTIMATE.start_isIdle_~retValue_acc~20=0, ULTIMATE.start_cleanup_~tmp~9=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_fa805ef5-170e-4492-8306-00375ee37692/bin/uautomizer/z3 Starting monitored process 22 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 22 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-15 22:32:16,510 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-11-15 22:32:16,511 INFO L160 nArgumentSynthesizer]: Using integer mode. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_fa805ef5-170e-4492-8306-00375ee37692/bin/uautomizer/z3 Starting monitored process 23 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 23 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-15 22:32:16,518 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 3 Nilpotent components: true [2019-11-15 22:32:16,519 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-11-15 22:32:17,175 INFO L444 LassoAnalysis]: Proving nontermination failed: No geometric nontermination argument exists. [2019-11-15 22:32:17,177 INFO L210 LassoAnalysis]: Preferences: [2019-11-15 22:32:17,177 INFO L124 ssoRankerPreferences]: Compute integeral hull: false [2019-11-15 22:32:17,177 INFO L125 ssoRankerPreferences]: Enable LassoPartitioneer: true [2019-11-15 22:32:17,177 INFO L126 ssoRankerPreferences]: Term annotations enabled: false [2019-11-15 22:32:17,177 INFO L127 ssoRankerPreferences]: Use exernal solver: false [2019-11-15 22:32:17,177 INFO L128 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-15 22:32:17,178 INFO L129 ssoRankerPreferences]: Dump SMT script to file: false [2019-11-15 22:32:17,178 INFO L130 ssoRankerPreferences]: Path of dumped script: [2019-11-15 22:32:17,178 INFO L131 ssoRankerPreferences]: Filename of dumped script: elevator_spec14_product11.cil.c_Iteration5_Loop [2019-11-15 22:32:17,178 INFO L132 ssoRankerPreferences]: MapElimAlgo: Frank [2019-11-15 22:32:17,178 INFO L274 LassoAnalysis]: Starting lasso preprocessing... [2019-11-15 22:32:17,182 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 22:32:17,188 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 22:32:17,191 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 22:32:17,193 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 22:32:17,195 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 22:32:17,197 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 22:32:17,199 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 22:32:17,206 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 22:32:17,209 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 22:32:17,211 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 22:32:17,214 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 22:32:17,221 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 22:32:17,224 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 22:32:17,235 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 22:32:17,238 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 22:32:17,240 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 22:32:17,242 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 22:32:17,245 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 22:32:17,247 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 22:32:17,257 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 22:32:17,271 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 22:32:17,301 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 22:32:17,304 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 22:32:17,308 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 22:32:17,310 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 22:32:17,312 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 22:32:17,342 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 22:32:17,351 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 22:32:17,353 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 22:32:17,356 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 22:32:17,362 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 22:32:17,364 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 22:32:17,367 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 22:32:17,369 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 22:32:17,373 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 22:32:17,375 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 22:32:17,378 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 22:32:17,387 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 22:32:17,390 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 22:32:17,398 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 22:32:17,401 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 22:32:17,403 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 22:32:17,405 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 22:32:17,408 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 22:32:17,409 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 22:32:17,411 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 22:32:17,412 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 22:32:17,417 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 22:32:17,419 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 22:32:17,420 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 22:32:17,422 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 22:32:17,423 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 22:32:17,425 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 22:32:17,426 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 22:32:17,449 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 22:32:17,451 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 22:32:17,454 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 22:32:17,462 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 22:32:17,464 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 22:32:17,466 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 22:32:17,477 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 22:32:17,480 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 22:32:17,483 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 22:32:18,029 WARN L191 SmtUtils]: Spent 114.00 ms on a formula simplification that was a NOOP. DAG size: 33 [2019-11-15 22:32:18,260 INFO L292 LassoAnalysis]: Preprocessing complete. [2019-11-15 22:32:18,264 INFO L489 LassoAnalysis]: Using template 'affine'. [2019-11-15 22:32:18,266 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-11-15 22:32:18,268 INFO L337 nArgumentSynthesizer]: Template has degree 0. [2019-11-15 22:32:18,268 INFO L350 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-11-15 22:32:18,269 INFO L202 nArgumentSynthesizer]: 1 stem disjuncts [2019-11-15 22:32:18,269 INFO L203 nArgumentSynthesizer]: 1 loop disjuncts [2019-11-15 22:32:18,269 INFO L204 nArgumentSynthesizer]: 2 template conjuncts. [2019-11-15 22:32:18,270 INFO L400 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-11-15 22:32:18,271 INFO L401 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-11-15 22:32:18,272 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. [2019-11-15 22:32:18,272 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-11-15 22:32:18,273 INFO L337 nArgumentSynthesizer]: Template has degree 0. [2019-11-15 22:32:18,273 INFO L350 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-11-15 22:32:18,273 INFO L202 nArgumentSynthesizer]: 1 stem disjuncts [2019-11-15 22:32:18,273 INFO L203 nArgumentSynthesizer]: 1 loop disjuncts [2019-11-15 22:32:18,274 INFO L204 nArgumentSynthesizer]: 2 template conjuncts. [2019-11-15 22:32:18,274 INFO L400 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-11-15 22:32:18,274 INFO L401 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-11-15 22:32:18,274 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. [2019-11-15 22:32:18,275 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-11-15 22:32:18,275 INFO L337 nArgumentSynthesizer]: Template has degree 0. [2019-11-15 22:32:18,276 INFO L350 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-11-15 22:32:18,276 INFO L202 nArgumentSynthesizer]: 1 stem disjuncts [2019-11-15 22:32:18,276 INFO L203 nArgumentSynthesizer]: 1 loop disjuncts [2019-11-15 22:32:18,276 INFO L204 nArgumentSynthesizer]: 2 template conjuncts. [2019-11-15 22:32:18,276 INFO L400 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-11-15 22:32:18,277 INFO L401 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-11-15 22:32:18,277 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. [2019-11-15 22:32:18,277 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-11-15 22:32:18,278 INFO L337 nArgumentSynthesizer]: Template has degree 0. [2019-11-15 22:32:18,278 INFO L350 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-11-15 22:32:18,278 INFO L202 nArgumentSynthesizer]: 1 stem disjuncts [2019-11-15 22:32:18,278 INFO L203 nArgumentSynthesizer]: 1 loop disjuncts [2019-11-15 22:32:18,278 INFO L204 nArgumentSynthesizer]: 2 template conjuncts. [2019-11-15 22:32:18,279 INFO L400 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-11-15 22:32:18,279 INFO L401 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-11-15 22:32:18,280 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. [2019-11-15 22:32:18,280 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-11-15 22:32:18,281 INFO L337 nArgumentSynthesizer]: Template has degree 0. [2019-11-15 22:32:18,281 INFO L350 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-11-15 22:32:18,281 INFO L202 nArgumentSynthesizer]: 1 stem disjuncts [2019-11-15 22:32:18,281 INFO L203 nArgumentSynthesizer]: 1 loop disjuncts [2019-11-15 22:32:18,281 INFO L204 nArgumentSynthesizer]: 2 template conjuncts. [2019-11-15 22:32:18,282 INFO L400 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-11-15 22:32:18,282 INFO L401 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-11-15 22:32:18,282 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. [2019-11-15 22:32:18,283 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-11-15 22:32:18,283 INFO L337 nArgumentSynthesizer]: Template has degree 0. [2019-11-15 22:32:18,283 INFO L350 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-11-15 22:32:18,284 INFO L202 nArgumentSynthesizer]: 1 stem disjuncts [2019-11-15 22:32:18,284 INFO L203 nArgumentSynthesizer]: 1 loop disjuncts [2019-11-15 22:32:18,284 INFO L204 nArgumentSynthesizer]: 2 template conjuncts. [2019-11-15 22:32:18,284 INFO L400 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-11-15 22:32:18,284 INFO L401 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-11-15 22:32:18,285 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. [2019-11-15 22:32:18,285 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-11-15 22:32:18,286 INFO L337 nArgumentSynthesizer]: Template has degree 0. [2019-11-15 22:32:18,286 INFO L350 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-11-15 22:32:18,286 INFO L202 nArgumentSynthesizer]: 1 stem disjuncts [2019-11-15 22:32:18,286 INFO L203 nArgumentSynthesizer]: 1 loop disjuncts [2019-11-15 22:32:18,286 INFO L204 nArgumentSynthesizer]: 2 template conjuncts. [2019-11-15 22:32:18,287 INFO L400 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-11-15 22:32:18,287 INFO L401 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-11-15 22:32:18,287 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. [2019-11-15 22:32:18,288 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-11-15 22:32:18,288 INFO L337 nArgumentSynthesizer]: Template has degree 0. [2019-11-15 22:32:18,288 INFO L350 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-11-15 22:32:18,288 INFO L202 nArgumentSynthesizer]: 1 stem disjuncts [2019-11-15 22:32:18,289 INFO L203 nArgumentSynthesizer]: 1 loop disjuncts [2019-11-15 22:32:18,289 INFO L204 nArgumentSynthesizer]: 2 template conjuncts. [2019-11-15 22:32:18,289 INFO L400 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-11-15 22:32:18,289 INFO L401 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-11-15 22:32:18,290 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. [2019-11-15 22:32:18,290 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-11-15 22:32:18,291 INFO L337 nArgumentSynthesizer]: Template has degree 0. [2019-11-15 22:32:18,291 INFO L350 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-11-15 22:32:18,291 INFO L202 nArgumentSynthesizer]: 1 stem disjuncts [2019-11-15 22:32:18,291 INFO L203 nArgumentSynthesizer]: 1 loop disjuncts [2019-11-15 22:32:18,291 INFO L204 nArgumentSynthesizer]: 2 template conjuncts. [2019-11-15 22:32:18,292 INFO L400 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-11-15 22:32:18,292 INFO L401 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-11-15 22:32:18,292 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. [2019-11-15 22:32:18,293 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-11-15 22:32:18,293 INFO L337 nArgumentSynthesizer]: Template has degree 0. [2019-11-15 22:32:18,293 INFO L350 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-11-15 22:32:18,293 INFO L202 nArgumentSynthesizer]: 1 stem disjuncts [2019-11-15 22:32:18,294 INFO L203 nArgumentSynthesizer]: 1 loop disjuncts [2019-11-15 22:32:18,294 INFO L204 nArgumentSynthesizer]: 2 template conjuncts. [2019-11-15 22:32:18,294 INFO L400 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-11-15 22:32:18,294 INFO L401 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-11-15 22:32:18,295 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. [2019-11-15 22:32:18,295 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-11-15 22:32:18,296 INFO L337 nArgumentSynthesizer]: Template has degree 0. [2019-11-15 22:32:18,296 INFO L350 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-11-15 22:32:18,296 INFO L202 nArgumentSynthesizer]: 1 stem disjuncts [2019-11-15 22:32:18,296 INFO L203 nArgumentSynthesizer]: 1 loop disjuncts [2019-11-15 22:32:18,296 INFO L204 nArgumentSynthesizer]: 2 template conjuncts. [2019-11-15 22:32:18,297 INFO L400 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-11-15 22:32:18,297 INFO L401 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-11-15 22:32:18,298 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. [2019-11-15 22:32:18,298 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-11-15 22:32:18,299 INFO L337 nArgumentSynthesizer]: Template has degree 0. [2019-11-15 22:32:18,299 INFO L350 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-11-15 22:32:18,299 INFO L202 nArgumentSynthesizer]: 1 stem disjuncts [2019-11-15 22:32:18,299 INFO L203 nArgumentSynthesizer]: 1 loop disjuncts [2019-11-15 22:32:18,300 INFO L204 nArgumentSynthesizer]: 2 template conjuncts. [2019-11-15 22:32:18,300 INFO L400 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-11-15 22:32:18,300 INFO L401 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-11-15 22:32:18,301 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. [2019-11-15 22:32:18,301 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-11-15 22:32:18,301 INFO L337 nArgumentSynthesizer]: Template has degree 0. [2019-11-15 22:32:18,302 INFO L350 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-11-15 22:32:18,302 INFO L202 nArgumentSynthesizer]: 1 stem disjuncts [2019-11-15 22:32:18,302 INFO L203 nArgumentSynthesizer]: 1 loop disjuncts [2019-11-15 22:32:18,302 INFO L204 nArgumentSynthesizer]: 2 template conjuncts. [2019-11-15 22:32:18,302 INFO L400 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-11-15 22:32:18,303 INFO L401 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-11-15 22:32:18,304 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. [2019-11-15 22:32:18,304 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-11-15 22:32:18,305 INFO L337 nArgumentSynthesizer]: Template has degree 0. [2019-11-15 22:32:18,305 INFO L350 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-11-15 22:32:18,305 INFO L202 nArgumentSynthesizer]: 1 stem disjuncts [2019-11-15 22:32:18,305 INFO L203 nArgumentSynthesizer]: 1 loop disjuncts [2019-11-15 22:32:18,305 INFO L204 nArgumentSynthesizer]: 2 template conjuncts. [2019-11-15 22:32:18,306 INFO L400 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-11-15 22:32:18,306 INFO L401 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-11-15 22:32:18,306 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. [2019-11-15 22:32:18,307 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-11-15 22:32:18,307 INFO L337 nArgumentSynthesizer]: Template has degree 0. [2019-11-15 22:32:18,307 INFO L350 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-11-15 22:32:18,308 INFO L202 nArgumentSynthesizer]: 1 stem disjuncts [2019-11-15 22:32:18,308 INFO L203 nArgumentSynthesizer]: 1 loop disjuncts [2019-11-15 22:32:18,308 INFO L204 nArgumentSynthesizer]: 2 template conjuncts. [2019-11-15 22:32:18,308 INFO L400 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-11-15 22:32:18,308 INFO L401 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-11-15 22:32:18,309 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. [2019-11-15 22:32:18,309 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-11-15 22:32:18,310 INFO L337 nArgumentSynthesizer]: Template has degree 0. [2019-11-15 22:32:18,310 INFO L350 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-11-15 22:32:18,310 INFO L202 nArgumentSynthesizer]: 1 stem disjuncts [2019-11-15 22:32:18,310 INFO L203 nArgumentSynthesizer]: 1 loop disjuncts [2019-11-15 22:32:18,310 INFO L204 nArgumentSynthesizer]: 2 template conjuncts. [2019-11-15 22:32:18,311 INFO L400 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-11-15 22:32:18,311 INFO L401 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-11-15 22:32:18,311 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. [2019-11-15 22:32:18,312 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-11-15 22:32:18,312 INFO L337 nArgumentSynthesizer]: Template has degree 0. [2019-11-15 22:32:18,313 INFO L350 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-11-15 22:32:18,313 INFO L202 nArgumentSynthesizer]: 1 stem disjuncts [2019-11-15 22:32:18,313 INFO L203 nArgumentSynthesizer]: 1 loop disjuncts [2019-11-15 22:32:18,313 INFO L204 nArgumentSynthesizer]: 2 template conjuncts. [2019-11-15 22:32:18,313 INFO L400 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-11-15 22:32:18,314 INFO L401 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-11-15 22:32:18,314 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. [2019-11-15 22:32:18,314 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-11-15 22:32:18,315 INFO L337 nArgumentSynthesizer]: Template has degree 0. [2019-11-15 22:32:18,315 INFO L350 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-11-15 22:32:18,315 INFO L202 nArgumentSynthesizer]: 1 stem disjuncts [2019-11-15 22:32:18,315 INFO L203 nArgumentSynthesizer]: 1 loop disjuncts [2019-11-15 22:32:18,316 INFO L204 nArgumentSynthesizer]: 2 template conjuncts. [2019-11-15 22:32:18,316 INFO L400 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-11-15 22:32:18,316 INFO L401 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-11-15 22:32:18,317 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. [2019-11-15 22:32:18,317 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-11-15 22:32:18,317 INFO L337 nArgumentSynthesizer]: Template has degree 0. [2019-11-15 22:32:18,318 INFO L350 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-11-15 22:32:18,318 INFO L202 nArgumentSynthesizer]: 1 stem disjuncts [2019-11-15 22:32:18,318 INFO L203 nArgumentSynthesizer]: 1 loop disjuncts [2019-11-15 22:32:18,318 INFO L204 nArgumentSynthesizer]: 2 template conjuncts. [2019-11-15 22:32:18,319 INFO L400 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-11-15 22:32:18,319 INFO L401 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-11-15 22:32:18,320 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. [2019-11-15 22:32:18,320 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-11-15 22:32:18,320 INFO L337 nArgumentSynthesizer]: Template has degree 0. [2019-11-15 22:32:18,321 INFO L350 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-11-15 22:32:18,321 INFO L202 nArgumentSynthesizer]: 1 stem disjuncts [2019-11-15 22:32:18,321 INFO L203 nArgumentSynthesizer]: 1 loop disjuncts [2019-11-15 22:32:18,321 INFO L204 nArgumentSynthesizer]: 2 template conjuncts. [2019-11-15 22:32:18,322 INFO L400 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-11-15 22:32:18,322 INFO L401 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-11-15 22:32:18,324 INFO L419 nArgumentSynthesizer]: Found a termination argument, trying to simplify. [2019-11-15 22:32:18,327 INFO L443 ModelExtractionUtils]: Simplification made 4 calls to the SMT solver. [2019-11-15 22:32:18,327 INFO L444 ModelExtractionUtils]: 1 out of 5 variables were initially zero. Simplification set additionally 1 variables to zero. [2019-11-15 22:32:18,329 INFO L435 nArgumentSynthesizer]: Simplifying supporting invariants... [2019-11-15 22:32:18,329 INFO L438 nArgumentSynthesizer]: Removed 0 redundant supporting invariants from a total of 0. [2019-11-15 22:32:18,329 INFO L510 LassoAnalysis]: Proved termination. [2019-11-15 22:32:18,330 INFO L512 LassoAnalysis]: Termination argument consisting of: Ranking function f(~cleanupTimeShifts~0, ULTIMATE.start_cleanup_~i~2) = 1*~cleanupTimeShifts~0 - 1*ULTIMATE.start_cleanup_~i~2 Supporting invariants [] [2019-11-15 22:32:18,331 INFO L297 tatePredicateManager]: 0 out of 0 supporting invariants were superfluous and have been removed [2019-11-15 22:32:18,359 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-15 22:32:18,577 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-15 22:32:18,582 INFO L256 TraceCheckSpWp]: Trace formula consists of 1034 conjuncts, 2 conjunts are in the unsatisfiable core [2019-11-15 22:32:18,588 INFO L279 TraceCheckSpWp]: Computing forward predicates... [2019-11-15 22:32:18,669 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-15 22:32:18,670 INFO L256 TraceCheckSpWp]: Trace formula consists of 169 conjuncts, 5 conjunts are in the unsatisfiable core [2019-11-15 22:32:18,673 INFO L279 TraceCheckSpWp]: Computing forward predicates... [2019-11-15 22:32:18,716 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-11-15 22:32:18,725 INFO L152 lantAutomatonBouncer]: Defining deterministic Buchi interpolant automaton with honda bouncer for stem and without honda bouncer for loop.1 stem predicates 3 loop predicates [2019-11-15 22:32:18,726 INFO L72 iDifferenceNCSBLazy3]: Start buchiDifferenceNCSBLazy3. First operand 58353 states and 109732 transitions. cyclomatic complexity: 51385 Second operand 5 states. [2019-11-15 22:32:19,526 INFO L76 iDifferenceNCSBLazy3]: Finished buchiDifferenceNCSBLazy3. First operand 58353 states and 109732 transitions. cyclomatic complexity: 51385. Second operand 5 states. Result 71615 states and 134582 transitions. Complement of second has 8 states. [2019-11-15 22:32:19,527 INFO L142 InterpolantAutomaton]: Switched to read-only mode: Buchi interpolant automaton has 5 states 1 stem states 3 non-accepting loop states 1 accepting loop states [2019-11-15 22:32:19,527 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2019-11-15 22:32:19,541 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 10750 transitions. [2019-11-15 22:32:19,542 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 5 states and 10750 transitions. Stem has 133 letters. Loop has 41 letters. [2019-11-15 22:32:19,546 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2019-11-15 22:32:19,547 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 5 states and 10750 transitions. Stem has 174 letters. Loop has 41 letters. [2019-11-15 22:32:19,550 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2019-11-15 22:32:19,550 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 5 states and 10750 transitions. Stem has 133 letters. Loop has 82 letters. [2019-11-15 22:32:19,551 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2019-11-15 22:32:19,551 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 71615 states and 134582 transitions. [2019-11-15 22:32:20,155 INFO L131 ngComponentsAnalysis]: Automaton has 0 accepting balls. 0 [2019-11-15 22:32:20,155 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 71615 states to 0 states and 0 transitions. [2019-11-15 22:32:20,155 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 0 [2019-11-15 22:32:20,155 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 0 [2019-11-15 22:32:20,155 INFO L73 IsDeterministic]: Start isDeterministic. Operand 0 states and 0 transitions. [2019-11-15 22:32:20,156 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2019-11-15 22:32:20,156 INFO L688 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2019-11-15 22:32:20,156 INFO L711 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2019-11-15 22:32:20,156 INFO L137 tionRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-11-15 22:32:20,156 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2019-11-15 22:32:20,156 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2019-11-15 22:32:20,157 INFO L87 Difference]: Start difference. First operand 0 states and 0 transitions. Second operand 3 states. [2019-11-15 22:32:20,157 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-11-15 22:32:20,157 INFO L93 Difference]: Finished difference Result 0 states and 0 transitions. [2019-11-15 22:32:20,157 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2019-11-15 22:32:20,157 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 0 states and 0 transitions. [2019-11-15 22:32:20,157 INFO L131 ngComponentsAnalysis]: Automaton has 0 accepting balls. 0 [2019-11-15 22:32:20,157 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 0 states to 0 states and 0 transitions. [2019-11-15 22:32:20,158 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 0 [2019-11-15 22:32:20,158 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 0 [2019-11-15 22:32:20,158 INFO L73 IsDeterministic]: Start isDeterministic. Operand 0 states and 0 transitions. [2019-11-15 22:32:20,158 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2019-11-15 22:32:20,158 INFO L688 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2019-11-15 22:32:20,158 INFO L711 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2019-11-15 22:32:20,158 INFO L591 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2019-11-15 22:32:20,158 INFO L424 BuchiCegarLoop]: ======== Iteration 6============ [2019-11-15 22:32:20,159 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 0 states and 0 transitions. [2019-11-15 22:32:20,159 INFO L131 ngComponentsAnalysis]: Automaton has 0 accepting balls. 0 [2019-11-15 22:32:20,159 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is true [2019-11-15 22:32:20,166 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer CFG 15.11 10:32:20 BoogieIcfgContainer [2019-11-15 22:32:20,166 INFO L132 PluginConnector]: ------------------------ END BuchiAutomizer---------------------------- [2019-11-15 22:32:20,166 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2019-11-15 22:32:20,167 INFO L271 PluginConnector]: Initializing Witness Printer... [2019-11-15 22:32:20,167 INFO L275 PluginConnector]: Witness Printer initialized [2019-11-15 22:32:20,167 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 15.11 10:31:24" (3/4) ... [2019-11-15 22:32:20,170 INFO L140 WitnessPrinter]: No result that supports witness generation found [2019-11-15 22:32:20,171 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2019-11-15 22:32:20,173 INFO L168 Benchmark]: Toolchain (without parser) took 68253.14 ms. Allocated memory was 1.0 GB in the beginning and 5.2 GB in the end (delta: 4.1 GB). Free memory was 939.3 MB in the beginning and 2.2 GB in the end (delta: -1.3 GB). Peak memory consumption was 2.8 GB. Max. memory is 11.5 GB. [2019-11-15 22:32:20,173 INFO L168 Benchmark]: CDTParser took 0.22 ms. Allocated memory is still 1.0 GB. Free memory is still 967.5 MB. There was no memory consumed. Max. memory is 11.5 GB. [2019-11-15 22:32:20,174 INFO L168 Benchmark]: CACSL2BoogieTranslator took 888.16 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 143.1 MB). Free memory was 939.3 MB in the beginning and 1.1 GB in the end (delta: -153.8 MB). Peak memory consumption was 29.5 MB. Max. memory is 11.5 GB. [2019-11-15 22:32:20,178 INFO L168 Benchmark]: Boogie Procedure Inliner took 283.82 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.0 GB in the end (delta: 53.7 MB). Peak memory consumption was 53.7 MB. Max. memory is 11.5 GB. [2019-11-15 22:32:20,178 INFO L168 Benchmark]: Boogie Preprocessor took 395.98 ms. Allocated memory is still 1.2 GB. Free memory was 1.0 GB in the beginning and 985.5 MB in the end (delta: 53.9 MB). Peak memory consumption was 53.9 MB. Max. memory is 11.5 GB. [2019-11-15 22:32:20,179 INFO L168 Benchmark]: RCFGBuilder took 10778.77 ms. Allocated memory was 1.2 GB in the beginning and 1.5 GB in the end (delta: 362.8 MB). Free memory was 985.5 MB in the beginning and 995.8 MB in the end (delta: -10.3 MB). Peak memory consumption was 352.5 MB. Max. memory is 11.5 GB. [2019-11-15 22:32:20,180 INFO L168 Benchmark]: BuchiAutomizer took 55896.51 ms. Allocated memory was 1.5 GB in the beginning and 5.2 GB in the end (delta: 3.6 GB). Free memory was 995.8 MB in the beginning and 2.2 GB in the end (delta: -1.2 GB). Peak memory consumption was 2.4 GB. Max. memory is 11.5 GB. [2019-11-15 22:32:20,180 INFO L168 Benchmark]: Witness Printer took 4.28 ms. Allocated memory is still 5.2 GB. Free memory is still 2.2 GB. There was no memory consumed. Max. memory is 11.5 GB. [2019-11-15 22:32:20,189 INFO L335 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.22 ms. Allocated memory is still 1.0 GB. Free memory is still 967.5 MB. There was no memory consumed. Max. memory is 11.5 GB. * CACSL2BoogieTranslator took 888.16 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 143.1 MB). Free memory was 939.3 MB in the beginning and 1.1 GB in the end (delta: -153.8 MB). Peak memory consumption was 29.5 MB. Max. memory is 11.5 GB. * Boogie Procedure Inliner took 283.82 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.0 GB in the end (delta: 53.7 MB). Peak memory consumption was 53.7 MB. Max. memory is 11.5 GB. * Boogie Preprocessor took 395.98 ms. Allocated memory is still 1.2 GB. Free memory was 1.0 GB in the beginning and 985.5 MB in the end (delta: 53.9 MB). Peak memory consumption was 53.9 MB. Max. memory is 11.5 GB. * RCFGBuilder took 10778.77 ms. Allocated memory was 1.2 GB in the beginning and 1.5 GB in the end (delta: 362.8 MB). Free memory was 985.5 MB in the beginning and 995.8 MB in the end (delta: -10.3 MB). Peak memory consumption was 352.5 MB. Max. memory is 11.5 GB. * BuchiAutomizer took 55896.51 ms. Allocated memory was 1.5 GB in the beginning and 5.2 GB in the end (delta: 3.6 GB). Free memory was 995.8 MB in the beginning and 2.2 GB in the end (delta: -1.2 GB). Peak memory consumption was 2.4 GB. Max. memory is 11.5 GB. * Witness Printer took 4.28 ms. Allocated memory is still 5.2 GB. Free memory is still 2.2 GB. There was no memory consumed. Max. memory is 11.5 GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: Constructed decomposition of program Your program was decomposed into 6 terminating modules (5 trivial, 1 deterministic, 0 nondeterministic). One deterministic module has affine ranking function cleanupTimeShifts + -1 * i and consists of 5 locations. 5 modules have a trivial ranking function, the largest among these consists of 8 locations. - StatisticsResult: Timing statistics BüchiAutomizer plugin needed 55.8s and 6 iterations. TraceHistogramMax:1. Analysis of lassos took 6.8s. Construction of modules took 22.5s. Büchi inclusion checks took 13.8s. Highest rank in rank-based complementation 3. Minimization of det autom 6. Minimization of nondet autom 0. Automata minimization 4.0s AutomataMinimizationTime, 4 MinimizatonAttempts, 539204 StatesRemovedByMinimization, 4 NontrivialMinimizations. Non-live state removal took 6.6s Buchi closure took 0.4s. Biggest automaton had 58906 states and ocurred in iteration 3. Nontrivial modules had stage [1, 0, 0, 0, 0]. InterpolantCoveringCapabilityFinite: 0/0 InterpolantCoveringCapabilityBuchi: 0/0 HoareTripleCheckerStatistics: 86709 SDtfs, 510286 SDslu, 538884 SDs, 0 SdLazy, 25881 SolverSat, 3937 SolverUnsat, 0 SolverUnknown, 0 SolverNotchecked, 22.5s Time LassoAnalysisResults: nont0 unkn0 SFLI0 SFLT0 conc0 concLT0 SILN0 SILU0 SILI4 SILT1 lasso0 LassoPreprocessingBenchmarks: Lassos: inital178 mio100 ax100 hnf100 lsp20 ukn100 mio100 lsp100 div100 bol100 ite100 ukn100 eq224 hnf86 smp100 dnf150 smp100 tf101 neg98 sie103 LassoTerminationAnalysisBenchmarks: ConstraintsSatisfiability: unsat Degree: 0 Time: 6ms VariablesStem: 0 VariablesLoop: 0 DisjunctsStem: 1 DisjunctsLoop: 1 SupportingInvariants: 0 MotzkinApplications: 2 LassoTerminationAnalysisBenchmarks: LassoNonterminationAnalysisSatFixpoint: 20 LassoNonterminationAnalysisSatUnbounded: 0 LassoNonterminationAnalysisUnsat: 1 LassoNonterminationAnalysisUnknown: 0 LassoNonterminationAnalysisTime: 1.7s - TerminationAnalysisResult: Termination proven Buchi Automizer proved that your program is terminating RESULT: Ultimate proved your program to be correct! Received shutdown request...