./Ultimate.py --spec ../../sv-benchmarks/c/properties/termination.prp --file ../../sv-benchmarks/c/product-lines/elevator_spec3_product11.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for termination Using default analysis Version a4ecdabc Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/tmp/vcloud-vcloud-master/worker/run_dir_1851a923-bb58-40d0-a682-f93b13a216ab/bin/uautomizer/data/config -Xmx15G -Xms4m -jar /tmp/vcloud-vcloud-master/worker/run_dir_1851a923-bb58-40d0-a682-f93b13a216ab/bin/uautomizer/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud-vcloud-master/worker/run_dir_1851a923-bb58-40d0-a682-f93b13a216ab/bin/uautomizer/data -tc /tmp/vcloud-vcloud-master/worker/run_dir_1851a923-bb58-40d0-a682-f93b13a216ab/bin/uautomizer/config/AutomizerTermination.xml -i ../../sv-benchmarks/c/product-lines/elevator_spec3_product11.cil.c -s /tmp/vcloud-vcloud-master/worker/run_dir_1851a923-bb58-40d0-a682-f93b13a216ab/bin/uautomizer/config/svcomp-Termination-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud-vcloud-master/worker/run_dir_1851a923-bb58-40d0-a682-f93b13a216ab/bin/uautomizer --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(F end) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 18ec674a9843c08cd351b1b1936efacd5e1a5f4e ................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................ Execution finished normally Writing output log to file Ultimate.log Result: TRUE --- Real Ultimate output --- This is Ultimate 0.2.0-a4ecdab [2020-11-29 19:16:10,823 INFO L177 SettingsManager]: Resetting all preferences to default values... [2020-11-29 19:16:10,828 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2020-11-29 19:16:10,919 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2020-11-29 19:16:10,920 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2020-11-29 19:16:10,927 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2020-11-29 19:16:10,930 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2020-11-29 19:16:10,936 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2020-11-29 19:16:10,940 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2020-11-29 19:16:10,946 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2020-11-29 19:16:10,951 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2020-11-29 19:16:10,954 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2020-11-29 19:16:10,955 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2020-11-29 19:16:10,960 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2020-11-29 19:16:10,963 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2020-11-29 19:16:10,965 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2020-11-29 19:16:10,968 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2020-11-29 19:16:10,975 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2020-11-29 19:16:10,980 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2020-11-29 19:16:10,993 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2020-11-29 19:16:10,996 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2020-11-29 19:16:10,999 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2020-11-29 19:16:11,003 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2020-11-29 19:16:11,005 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2020-11-29 19:16:11,018 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2020-11-29 19:16:11,019 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2020-11-29 19:16:11,019 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2020-11-29 19:16:11,022 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2020-11-29 19:16:11,024 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2020-11-29 19:16:11,025 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2020-11-29 19:16:11,026 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2020-11-29 19:16:11,028 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2020-11-29 19:16:11,031 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2020-11-29 19:16:11,032 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2020-11-29 19:16:11,034 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2020-11-29 19:16:11,035 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2020-11-29 19:16:11,036 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2020-11-29 19:16:11,036 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2020-11-29 19:16:11,037 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2020-11-29 19:16:11,038 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2020-11-29 19:16:11,039 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2020-11-29 19:16:11,043 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud-vcloud-master/worker/run_dir_1851a923-bb58-40d0-a682-f93b13a216ab/bin/uautomizer/config/svcomp-Termination-32bit-Automizer_Default.epf [2020-11-29 19:16:11,106 INFO L113 SettingsManager]: Loading preferences was successful [2020-11-29 19:16:11,106 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2020-11-29 19:16:11,109 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2020-11-29 19:16:11,110 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2020-11-29 19:16:11,110 INFO L138 SettingsManager]: * Use SBE=true [2020-11-29 19:16:11,110 INFO L136 SettingsManager]: Preferences of BuchiAutomizer differ from their defaults: [2020-11-29 19:16:11,111 INFO L138 SettingsManager]: * NCSB implementation=INTSET_LAZY3 [2020-11-29 19:16:11,111 INFO L138 SettingsManager]: * Use old map elimination=false [2020-11-29 19:16:11,111 INFO L138 SettingsManager]: * Use external solver (rank synthesis)=false [2020-11-29 19:16:11,112 INFO L138 SettingsManager]: * Use only trivial implications for array writes=true [2020-11-29 19:16:11,113 INFO L138 SettingsManager]: * Rank analysis=LINEAR_WITH_GUESSES [2020-11-29 19:16:11,114 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2020-11-29 19:16:11,114 INFO L138 SettingsManager]: * sizeof long=4 [2020-11-29 19:16:11,114 INFO L138 SettingsManager]: * Check unreachability of error function in SV-COMP mode=false [2020-11-29 19:16:11,115 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2020-11-29 19:16:11,115 INFO L138 SettingsManager]: * sizeof POINTER=4 [2020-11-29 19:16:11,115 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2020-11-29 19:16:11,116 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=ASSUME [2020-11-29 19:16:11,116 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=ASSUME [2020-11-29 19:16:11,116 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=ASSUME [2020-11-29 19:16:11,117 INFO L138 SettingsManager]: * sizeof long double=12 [2020-11-29 19:16:11,117 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2020-11-29 19:16:11,117 INFO L138 SettingsManager]: * Assume nondeterminstic values are in range=false [2020-11-29 19:16:11,118 INFO L138 SettingsManager]: * Use constant arrays=true [2020-11-29 19:16:11,118 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=ASSUME [2020-11-29 19:16:11,118 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2020-11-29 19:16:11,119 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2020-11-29 19:16:11,119 INFO L138 SettingsManager]: * To the following directory=/home/matthias/ultimate/dump [2020-11-29 19:16:11,119 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2020-11-29 19:16:11,122 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2020-11-29 19:16:11,123 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2020-11-29 19:16:11,123 INFO L138 SettingsManager]: * Dump automata to the following directory=/home/matthias/ultimate/dump/auto [2020-11-29 19:16:11,125 INFO L136 SettingsManager]: Preferences of IcfgTransformer differ from their defaults: [2020-11-29 19:16:11,125 INFO L138 SettingsManager]: * TransformationType=MODULO_NEIGHBOR WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud-vcloud-master/worker/run_dir_1851a923-bb58-40d0-a682-f93b13a216ab/bin/uautomizer/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud-vcloud-master/worker/run_dir_1851a923-bb58-40d0-a682-f93b13a216ab/bin/uautomizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(F end) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 18ec674a9843c08cd351b1b1936efacd5e1a5f4e [2020-11-29 19:16:11,530 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2020-11-29 19:16:11,581 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2020-11-29 19:16:11,585 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2020-11-29 19:16:11,586 INFO L271 PluginConnector]: Initializing CDTParser... [2020-11-29 19:16:11,587 INFO L275 PluginConnector]: CDTParser initialized [2020-11-29 19:16:11,589 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud-vcloud-master/worker/run_dir_1851a923-bb58-40d0-a682-f93b13a216ab/bin/uautomizer/../../sv-benchmarks/c/product-lines/elevator_spec3_product11.cil.c [2020-11-29 19:16:11,680 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud-vcloud-master/worker/run_dir_1851a923-bb58-40d0-a682-f93b13a216ab/bin/uautomizer/data/3a6fd5630/2a16c132ed6b4bb280e8c6aeeae6582d/FLAG416f10f8e [2020-11-29 19:16:12,647 INFO L306 CDTParser]: Found 1 translation units. [2020-11-29 19:16:12,656 INFO L160 CDTParser]: Scanning /tmp/vcloud-vcloud-master/worker/run_dir_1851a923-bb58-40d0-a682-f93b13a216ab/sv-benchmarks/c/product-lines/elevator_spec3_product11.cil.c [2020-11-29 19:16:12,694 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud-vcloud-master/worker/run_dir_1851a923-bb58-40d0-a682-f93b13a216ab/bin/uautomizer/data/3a6fd5630/2a16c132ed6b4bb280e8c6aeeae6582d/FLAG416f10f8e [2020-11-29 19:16:13,197 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud-vcloud-master/worker/run_dir_1851a923-bb58-40d0-a682-f93b13a216ab/bin/uautomizer/data/3a6fd5630/2a16c132ed6b4bb280e8c6aeeae6582d [2020-11-29 19:16:13,201 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2020-11-29 19:16:13,203 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2020-11-29 19:16:13,205 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2020-11-29 19:16:13,205 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2020-11-29 19:16:13,210 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2020-11-29 19:16:13,211 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 29.11 07:16:13" (1/1) ... [2020-11-29 19:16:13,214 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@4c588d5b and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 07:16:13, skipping insertion in model container [2020-11-29 19:16:13,214 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 29.11 07:16:13" (1/1) ... [2020-11-29 19:16:13,224 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2020-11-29 19:16:13,357 INFO L178 MainTranslator]: Built tables and reachable declarations [2020-11-29 19:16:14,025 INFO L206 PostProcessor]: Analyzing one entry point: main [2020-11-29 19:16:14,039 INFO L203 MainTranslator]: Completed pre-run [2020-11-29 19:16:14,241 INFO L206 PostProcessor]: Analyzing one entry point: main [2020-11-29 19:16:14,343 INFO L208 MainTranslator]: Completed translation [2020-11-29 19:16:14,344 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 07:16:14 WrapperNode [2020-11-29 19:16:14,344 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2020-11-29 19:16:14,346 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2020-11-29 19:16:14,346 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2020-11-29 19:16:14,346 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2020-11-29 19:16:14,356 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 07:16:14" (1/1) ... [2020-11-29 19:16:14,435 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 07:16:14" (1/1) ... [2020-11-29 19:16:14,909 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2020-11-29 19:16:14,910 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2020-11-29 19:16:14,910 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2020-11-29 19:16:14,911 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2020-11-29 19:16:14,938 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 07:16:14" (1/1) ... [2020-11-29 19:16:14,938 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 07:16:14" (1/1) ... [2020-11-29 19:16:15,013 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 07:16:14" (1/1) ... [2020-11-29 19:16:15,013 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 07:16:14" (1/1) ... [2020-11-29 19:16:15,366 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 07:16:14" (1/1) ... [2020-11-29 19:16:15,511 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 07:16:14" (1/1) ... [2020-11-29 19:16:15,548 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 07:16:14" (1/1) ... [2020-11-29 19:16:15,628 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2020-11-29 19:16:15,630 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2020-11-29 19:16:15,630 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2020-11-29 19:16:15,631 INFO L275 PluginConnector]: RCFGBuilder initialized [2020-11-29 19:16:15,632 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 07:16:14" (1/1) ... No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_1851a923-bb58-40d0-a682-f93b13a216ab/bin/uautomizer/z3 Starting monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2020-11-29 19:16:15,744 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2020-11-29 19:16:15,745 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2020-11-29 19:16:15,745 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2020-11-29 19:16:15,745 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2020-11-29 19:16:33,306 INFO L293 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2020-11-29 19:16:33,307 INFO L298 CfgBuilder]: Removed 1397 assume(true) statements. [2020-11-29 19:16:33,317 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 29.11 07:16:33 BoogieIcfgContainer [2020-11-29 19:16:33,318 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2020-11-29 19:16:33,319 INFO L113 PluginConnector]: ------------------------BuchiAutomizer---------------------------- [2020-11-29 19:16:33,320 INFO L271 PluginConnector]: Initializing BuchiAutomizer... [2020-11-29 19:16:33,324 INFO L275 PluginConnector]: BuchiAutomizer initialized [2020-11-29 19:16:33,326 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2020-11-29 19:16:33,326 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "CDTParser AST 29.11 07:16:13" (1/3) ... [2020-11-29 19:16:33,328 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@5156f474 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 29.11 07:16:33, skipping insertion in model container [2020-11-29 19:16:33,328 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2020-11-29 19:16:33,329 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 07:16:14" (2/3) ... [2020-11-29 19:16:33,329 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@5156f474 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 29.11 07:16:33, skipping insertion in model container [2020-11-29 19:16:33,329 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2020-11-29 19:16:33,330 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 29.11 07:16:33" (3/3) ... [2020-11-29 19:16:33,332 INFO L373 chiAutomizerObserver]: Analyzing ICFG elevator_spec3_product11.cil.c [2020-11-29 19:16:33,418 INFO L359 BuchiCegarLoop]: Interprodecural is true [2020-11-29 19:16:33,418 INFO L360 BuchiCegarLoop]: Hoare is false [2020-11-29 19:16:33,419 INFO L361 BuchiCegarLoop]: Compute interpolants for ForwardPredicates [2020-11-29 19:16:33,419 INFO L362 BuchiCegarLoop]: Backedges is STRAIGHT_LINE [2020-11-29 19:16:33,419 INFO L363 BuchiCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2020-11-29 19:16:33,419 INFO L364 BuchiCegarLoop]: Difference is false [2020-11-29 19:16:33,419 INFO L365 BuchiCegarLoop]: Minimize is MINIMIZE_SEVPA [2020-11-29 19:16:33,420 INFO L368 BuchiCegarLoop]: ======== Iteration 0==of CEGAR loop == BuchiCegarLoop======== [2020-11-29 19:16:33,573 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 6093 states. [2020-11-29 19:16:33,803 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1236 [2020-11-29 19:16:33,804 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2020-11-29 19:16:33,804 INFO L119 BuchiIsEmpty]: Starting construction of run [2020-11-29 19:16:33,858 INFO L852 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-11-29 19:16:33,859 INFO L853 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-11-29 19:16:33,859 INFO L427 BuchiCegarLoop]: ======== Iteration 1============ [2020-11-29 19:16:33,860 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 6093 states. [2020-11-29 19:16:33,972 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1236 [2020-11-29 19:16:33,973 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2020-11-29 19:16:33,973 INFO L119 BuchiIsEmpty]: Starting construction of run [2020-11-29 19:16:33,995 INFO L852 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-11-29 19:16:33,999 INFO L853 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-11-29 19:16:34,022 INFO L794 eck$LassoCheckResult]: Stem: 3471#ULTIMATE.startENTRYtrue #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(2);call write~init~int(48, #t~string4.base, #t~string4.offset, 1);call write~init~int(0, #t~string4.base, 1 + #t~string4.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(31);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(12);call #t~string25.base, #t~string25.offset := #Ultimate.allocOnStack(30);call #t~string26.base, #t~string26.offset := #Ultimate.allocOnStack(9);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(21);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(30);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(9);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(21);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(30);call #t~string35.base, #t~string35.offset := #Ultimate.allocOnStack(9);call #t~string36.base, #t~string36.offset := #Ultimate.allocOnStack(25);call #t~string37.base, #t~string37.offset := #Ultimate.allocOnStack(30);call #t~string38.base, #t~string38.offset := #Ultimate.allocOnStack(9);call #t~string39.base, #t~string39.offset := #Ultimate.allocOnStack(25);call #t~string127.base, #t~string127.offset := #Ultimate.allocOnStack(10);call #t~string129.base, #t~string129.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string129.base, #t~string129.offset, 1);call write~init~int(95, #t~string129.base, 1 + #t~string129.offset, 1);call write~init~int(93, #t~string129.base, 2 + #t~string129.offset, 1);call write~init~int(0, #t~string129.base, 3 + #t~string129.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string131.base, #t~string131.offset, 1);call write~init~int(93, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(32, #t~string131.base, 2 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 3 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string133.base, #t~string133.offset, 1);call write~init~int(97, #t~string133.base, 1 + #t~string133.offset, 1);call write~init~int(116, #t~string133.base, 2 + #t~string133.offset, 1);call write~init~int(32, #t~string133.base, 3 + #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 4 + #t~string133.offset, 1);call #t~string135.base, #t~string135.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string135.base, #t~string135.offset, 1);call write~init~int(105, #t~string135.base, 1 + #t~string135.offset, 1);call write~init~int(0, #t~string135.base, 2 + #t~string135.offset, 1);call #t~string137.base, #t~string137.offset := #Ultimate.allocOnStack(10);call #t~string139.base, #t~string139.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string139.base, #t~string139.offset, 1);call write~init~int(112, #t~string139.base, 1 + #t~string139.offset, 1);call write~init~int(0, #t~string139.base, 2 + #t~string139.offset, 1);call #t~string141.base, #t~string141.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string141.base, #t~string141.offset, 1);call write~init~int(111, #t~string141.base, 1 + #t~string141.offset, 1);call write~init~int(119, #t~string141.base, 2 + #t~string141.offset, 1);call write~init~int(110, #t~string141.base, 3 + #t~string141.offset, 1);call write~init~int(0, #t~string141.base, 4 + #t~string141.offset, 1);call #t~string143.base, #t~string143.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string143.base, #t~string143.offset, 1);call write~init~int(73, #t~string143.base, 1 + #t~string143.offset, 1);call write~init~int(76, #t~string143.base, 2 + #t~string143.offset, 1);call write~init~int(95, #t~string143.base, 3 + #t~string143.offset, 1);call write~init~int(112, #t~string143.base, 4 + #t~string143.offset, 1);call write~init~int(58, #t~string143.base, 5 + #t~string143.offset, 1);call write~init~int(0, #t~string143.base, 6 + #t~string143.offset, 1);call #t~string145.base, #t~string145.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string145.base, #t~string145.offset, 1);call write~init~int(37, #t~string145.base, 1 + #t~string145.offset, 1);call write~init~int(105, #t~string145.base, 2 + #t~string145.offset, 1);call write~init~int(0, #t~string145.base, 3 + #t~string145.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string147.base, #t~string147.offset, 1);call write~init~int(37, #t~string147.base, 1 + #t~string147.offset, 1);call write~init~int(105, #t~string147.base, 2 + #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 3 + #t~string147.offset, 1);call #t~string149.base, #t~string149.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string149.base, #t~string149.offset, 1);call write~init~int(37, #t~string149.base, 1 + #t~string149.offset, 1);call write~init~int(105, #t~string149.base, 2 + #t~string149.offset, 1);call write~init~int(0, #t~string149.base, 3 + #t~string149.offset, 1);call #t~string151.base, #t~string151.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string151.base, #t~string151.offset, 1);call write~init~int(37, #t~string151.base, 1 + #t~string151.offset, 1);call write~init~int(105, #t~string151.base, 2 + #t~string151.offset, 1);call write~init~int(0, #t~string151.base, 3 + #t~string151.offset, 1);call #t~string153.base, #t~string153.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string153.base, #t~string153.offset, 1);call write~init~int(37, #t~string153.base, 1 + #t~string153.offset, 1);call write~init~int(105, #t~string153.base, 2 + #t~string153.offset, 1);call write~init~int(0, #t~string153.base, 3 + #t~string153.offset, 1);call #t~string155.base, #t~string155.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string155.base, #t~string155.offset, 1);call write~init~int(70, #t~string155.base, 1 + #t~string155.offset, 1);call write~init~int(95, #t~string155.base, 2 + #t~string155.offset, 1);call write~init~int(112, #t~string155.base, 3 + #t~string155.offset, 1);call write~init~int(58, #t~string155.base, 4 + #t~string155.offset, 1);call write~init~int(0, #t~string155.base, 5 + #t~string155.offset, 1);call #t~string158.base, #t~string158.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string158.base, #t~string158.offset, 1);call write~init~int(37, #t~string158.base, 1 + #t~string158.offset, 1);call write~init~int(105, #t~string158.base, 2 + #t~string158.offset, 1);call write~init~int(0, #t~string158.base, 3 + #t~string158.offset, 1);call #t~string161.base, #t~string161.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string161.base, #t~string161.offset, 1);call write~init~int(37, #t~string161.base, 1 + #t~string161.offset, 1);call write~init~int(105, #t~string161.base, 2 + #t~string161.offset, 1);call write~init~int(0, #t~string161.base, 3 + #t~string161.offset, 1);call #t~string164.base, #t~string164.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string164.base, #t~string164.offset, 1);call write~init~int(37, #t~string164.base, 1 + #t~string164.offset, 1);call write~init~int(105, #t~string164.base, 2 + #t~string164.offset, 1);call write~init~int(0, #t~string164.base, 3 + #t~string164.offset, 1);call #t~string167.base, #t~string167.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string167.base, #t~string167.offset, 1);call write~init~int(37, #t~string167.base, 1 + #t~string167.offset, 1);call write~init~int(105, #t~string167.base, 2 + #t~string167.offset, 1);call write~init~int(0, #t~string167.base, 3 + #t~string167.offset, 1);call #t~string170.base, #t~string170.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string170.base, #t~string170.offset, 1);call write~init~int(37, #t~string170.base, 1 + #t~string170.offset, 1);call write~init~int(105, #t~string170.base, 2 + #t~string170.offset, 1);call write~init~int(0, #t~string170.base, 3 + #t~string170.offset, 1);call #t~string172.base, #t~string172.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string172.base, #t~string172.offset, 1);call write~init~int(0, #t~string172.base, 1 + #t~string172.offset, 1);~head~0.base, ~head~0.offset := 0, 0;~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~expectedDirection~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 4909#L-1true havoc main_#res;havoc main_#t~ret75, main_~retValue_acc~7, main_~tmp~15;havoc main_~retValue_acc~7;havoc main_~tmp~15; 2838#L3402true havoc valid_product_#res;havoc valid_product_~retValue_acc~29;havoc valid_product_~retValue_acc~29;valid_product_~retValue_acc~29 := 1;valid_product_#res := valid_product_~retValue_acc~29; 505#L3410true main_#t~ret75 := valid_product_#res;main_~tmp~15 := main_#t~ret75;havoc main_#t~ret75; 3635#L1164true assume 0 != main_~tmp~15; 1023#L1137true ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 475#L2794true havoc bobCall_#t~ret63, bobCall_~tmp~7;havoc bobCall_~tmp~7;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 4139#L561true assume 0 == getOrigin_~person;getOrigin_~retValue_acc~4 := 4;getOrigin_#res := getOrigin_~retValue_acc~4; 2658#L586true bobCall_#t~ret63 := getOrigin_#res;bobCall_~tmp~7 := bobCall_#t~ret63;havoc bobCall_#t~ret63;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~7;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 1348#L3072true assume 0 == initPersonOnFloor_~floor; 957#L3073true assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 5818#L3180-1true callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 1970#L2864true assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 2663#L2876-2true havoc timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_#t~ret123, timeShift_#t~ret124, timeShift_#t~ret125, timeShift_#t~ret126, timeShift_~tmp~25, timeShift_~tmp___0~12, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~25;havoc timeShift_~tmp___0~12;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_#t~ret54, __utac_acc__Specification3_spec__1_#t~ret55, __utac_acc__Specification3_spec__1_#t~ret56, __utac_acc__Specification3_spec__1_#t~ret57, __utac_acc__Specification3_spec__1_#t~ret58, __utac_acc__Specification3_spec__1_#t~ret59, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 5868#L1420true __utac_acc__Specification3_spec__1_#t~ret48 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret48;havoc __utac_acc__Specification3_spec__1_#t~ret48;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~12;havoc getCurrentHeading_~retValue_acc~12;getCurrentHeading_~retValue_acc~12 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~12; 535#L1472true __utac_acc__Specification3_spec__1_#t~ret49 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 1951#L662true assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 2081#L663true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~11;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~11; 3210#L1437true assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~11 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~11; 1902#L1458true __utac_acc__Specification3_spec__1_#t~ret50 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~0 := __utac_acc__Specification3_spec__1_#t~ret50;havoc __utac_acc__Specification3_spec__1_#t~ret50; 2948#L667true assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0;~expectedDirection~0 := 1; 474#L768true havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret100, stopRequestedAtCurrentFloor_#t~ret101, stopRequestedAtCurrentFloor_#t~ret102, stopRequestedAtCurrentFloor_#t~ret103, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~23, stopRequestedAtCurrentFloor_~tmp___0~10;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~23;havoc stopRequestedAtCurrentFloor_~tmp___0~10;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret174, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 16#L2801true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 5794#L2828true isExecutiveFloorCalling_#t~ret174 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret174;havoc isExecutiveFloorCalling_#t~ret174;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 551#L2705true stopRequestedAtCurrentFloor_#t~ret100 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~23 := stopRequestedAtCurrentFloor_#t~ret100;havoc stopRequestedAtCurrentFloor_#t~ret100; 482#L2089true assume 0 != stopRequestedAtCurrentFloor_~tmp~23;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 5869#L1420-1true stopRequestedAtCurrentFloor_#t~ret101 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~10 := stopRequestedAtCurrentFloor_#t~ret101;havoc stopRequestedAtCurrentFloor_#t~ret101; 202#L2093true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 1027#L2106true timeShift_#t~ret116 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret116;havoc timeShift_#t~ret116; 2298#L2242true assume !(0 != timeShift_~tmp___9~3); 2148#L2333true assume !(1 == ~doorState~0); 2151#L2333-2true stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret94, stopRequestedInDirection_#t~ret95, stopRequestedInDirection_#t~ret96, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~17, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~8, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~17;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~8;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret174, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 3#L2801-3true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 5767#L2828-3true isExecutiveFloorCalling_#t~ret174 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret174;havoc isExecutiveFloorCalling_#t~ret174;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 557#L2705-1true stopRequestedInDirection_#t~ret94 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~8 := stopRequestedInDirection_#t~ret94;havoc stopRequestedInDirection_#t~ret94; 3840#L1972true assume 0 != stopRequestedInDirection_~tmp___0~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 5872#L1420-2true stopRequestedInDirection_#t~ret95 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~20 := stopRequestedInDirection_#t~ret95;havoc stopRequestedInDirection_#t~ret95;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~20 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~17; 2024#L1985true timeShift_#t~ret123 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret123;havoc timeShift_#t~ret123; 2918#L2341true assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret97, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 4757#L2029true assume !(1 == ~currentHeading~0); 5694#L2039true assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 5700#L2039-2true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 3611#L2045-5true havoc __utac_acc__Specification3_spec__2_#t~ret60, __utac_acc__Specification3_spec__2_#t~ret61, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 5039#L793true assume !(-1 == ~expectedDirection~0); 5599#L805true assume !(1 == ~expectedDirection~0); 5683#L806true havoc timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_#t~ret123, timeShift_#t~ret124, timeShift_#t~ret125, timeShift_#t~ret126, timeShift_~tmp~25, timeShift_~tmp___0~12, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~25;havoc timeShift_~tmp___0~12;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_#t~ret54, __utac_acc__Specification3_spec__1_#t~ret55, __utac_acc__Specification3_spec__1_#t~ret56, __utac_acc__Specification3_spec__1_#t~ret57, __utac_acc__Specification3_spec__1_#t~ret58, __utac_acc__Specification3_spec__1_#t~ret59, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 5857#L1420-4true __utac_acc__Specification3_spec__1_#t~ret48 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret48;havoc __utac_acc__Specification3_spec__1_#t~ret48;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~12;havoc getCurrentHeading_~retValue_acc~12;getCurrentHeading_~retValue_acc~12 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~12; 509#L1472-3true __utac_acc__Specification3_spec__1_#t~ret49 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 1955#L662-1true assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 2087#L663-1true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~11;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~11; 4284#L1437-12true assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~11 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~11; 1878#L1458-12true __utac_acc__Specification3_spec__1_#t~ret50 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~0 := __utac_acc__Specification3_spec__1_#t~ret50;havoc __utac_acc__Specification3_spec__1_#t~ret50; 2923#L667-2true assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0;~expectedDirection~0 := 1; 477#L768-1true havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret100, stopRequestedAtCurrentFloor_#t~ret101, stopRequestedAtCurrentFloor_#t~ret102, stopRequestedAtCurrentFloor_#t~ret103, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~23, stopRequestedAtCurrentFloor_~tmp___0~10;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~23;havoc stopRequestedAtCurrentFloor_~tmp___0~10;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret174, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 140#L2801-25true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 5888#L2828-25true isExecutiveFloorCalling_#t~ret174 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret174;havoc isExecutiveFloorCalling_#t~ret174;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 522#L2705-3true stopRequestedAtCurrentFloor_#t~ret100 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~23 := stopRequestedAtCurrentFloor_#t~ret100;havoc stopRequestedAtCurrentFloor_#t~ret100; 484#L2089-1true assume 0 != stopRequestedAtCurrentFloor_~tmp~23;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 5858#L1420-5true stopRequestedAtCurrentFloor_#t~ret101 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~10 := stopRequestedAtCurrentFloor_#t~ret101;havoc stopRequestedAtCurrentFloor_#t~ret101; 204#L2093-1true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 997#L2106-1true timeShift_#t~ret116 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret116;havoc timeShift_#t~ret116; 2303#L2242-1true assume !(0 != timeShift_~tmp___9~3); 2153#L2333-3true assume !(1 == ~doorState~0); 2135#L2333-5true stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret94, stopRequestedInDirection_#t~ret95, stopRequestedInDirection_#t~ret96, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~17, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~8, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~17;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~8;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret174, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 144#L2801-28true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 5898#L2828-28true isExecutiveFloorCalling_#t~ret174 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret174;havoc isExecutiveFloorCalling_#t~ret174;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 529#L2705-4true stopRequestedInDirection_#t~ret94 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~8 := stopRequestedInDirection_#t~ret94;havoc stopRequestedInDirection_#t~ret94; 3843#L1972-2true assume 0 != stopRequestedInDirection_~tmp___0~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 5861#L1420-6true stopRequestedInDirection_#t~ret95 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~20 := stopRequestedInDirection_#t~ret95;havoc stopRequestedInDirection_#t~ret95;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~20 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~17; 2027#L1985-2true timeShift_#t~ret123 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret123;havoc timeShift_#t~ret123; 2899#L2341-1true assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret97, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 4764#L2029-3true assume !(1 == ~currentHeading~0); 5660#L2039-9true assume !(0 == ~currentFloorID~0); 5672#L2039-11true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 3589#L2045-11true havoc __utac_acc__Specification3_spec__2_#t~ret60, __utac_acc__Specification3_spec__2_#t~ret61, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 5042#L793-1true assume !(-1 == ~expectedDirection~0); 5578#L805-1true assume !(1 == ~expectedDirection~0); 5690#L806-1true havoc timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_#t~ret123, timeShift_#t~ret124, timeShift_#t~ret125, timeShift_#t~ret126, timeShift_~tmp~25, timeShift_~tmp___0~12, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~25;havoc timeShift_~tmp___0~12;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_#t~ret54, __utac_acc__Specification3_spec__1_#t~ret55, __utac_acc__Specification3_spec__1_#t~ret56, __utac_acc__Specification3_spec__1_#t~ret57, __utac_acc__Specification3_spec__1_#t~ret58, __utac_acc__Specification3_spec__1_#t~ret59, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 5844#L1420-8true __utac_acc__Specification3_spec__1_#t~ret48 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret48;havoc __utac_acc__Specification3_spec__1_#t~ret48;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~12;havoc getCurrentHeading_~retValue_acc~12;getCurrentHeading_~retValue_acc~12 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~12; 521#L1472-6true __utac_acc__Specification3_spec__1_#t~ret49 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 1918#L662-2true assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 2089#L663-2true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~11;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~11; 4248#L1437-24true assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~11 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~11; 1856#L1458-24true __utac_acc__Specification3_spec__1_#t~ret50 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~0 := __utac_acc__Specification3_spec__1_#t~ret50;havoc __utac_acc__Specification3_spec__1_#t~ret50; 2929#L667-4true assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0;~expectedDirection~0 := 1; 455#L768-2true havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret100, stopRequestedAtCurrentFloor_#t~ret101, stopRequestedAtCurrentFloor_#t~ret102, stopRequestedAtCurrentFloor_#t~ret103, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~23, stopRequestedAtCurrentFloor_~tmp___0~10;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~23;havoc stopRequestedAtCurrentFloor_~tmp___0~10;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret174, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 85#L2801-50true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 5864#L2828-50true isExecutiveFloorCalling_#t~ret174 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret174;havoc isExecutiveFloorCalling_#t~ret174;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 530#L2705-6true stopRequestedAtCurrentFloor_#t~ret100 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~23 := stopRequestedAtCurrentFloor_#t~ret100;havoc stopRequestedAtCurrentFloor_#t~ret100; 483#L2089-2true assume 0 != stopRequestedAtCurrentFloor_~tmp~23;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 5845#L1420-9true stopRequestedAtCurrentFloor_#t~ret101 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~10 := stopRequestedAtCurrentFloor_#t~ret101;havoc stopRequestedAtCurrentFloor_#t~ret101; 203#L2093-2true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 1004#L2106-2true timeShift_#t~ret116 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret116;havoc timeShift_#t~ret116; 2309#L2242-2true assume !(0 != timeShift_~tmp___9~3); 2133#L2333-6true assume 1 == ~doorState~0;~doorState~0 := 0; 2141#L2333-8true stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret94, stopRequestedInDirection_#t~ret95, stopRequestedInDirection_#t~ret96, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~17, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~8, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~17;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~8;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret174, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 1598#L2801-53true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 5847#L2828-53true isExecutiveFloorCalling_#t~ret174 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret174;havoc isExecutiveFloorCalling_#t~ret174;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 536#L2705-7true stopRequestedInDirection_#t~ret94 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~8 := stopRequestedInDirection_#t~ret94;havoc stopRequestedInDirection_#t~ret94; 3850#L1972-4true assume 0 != stopRequestedInDirection_~tmp___0~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 5849#L1420-10true stopRequestedInDirection_#t~ret95 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~20 := stopRequestedInDirection_#t~ret95;havoc stopRequestedInDirection_#t~ret95;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~20 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~17; 1791#L1985-4true timeShift_#t~ret123 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret123;havoc timeShift_#t~ret123; 2897#L2341-2true assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret97, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 4484#L2029-6true assume !(1 == ~currentHeading~0); 5658#L2039-18true assume !(0 == ~currentFloorID~0); 5640#L2039-20true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 3574#L2045-17true havoc __utac_acc__Specification3_spec__2_#t~ret60, __utac_acc__Specification3_spec__2_#t~ret61, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 5047#L793-2true assume !(-1 == ~expectedDirection~0); 5582#L805-2true assume !(1 == ~expectedDirection~0); 5661#L806-2true havoc bobCall_#t~ret63, bobCall_~tmp~7;havoc bobCall_~tmp~7;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 4142#L561-1true assume 0 == getOrigin_~person;getOrigin_~retValue_acc~4 := 4;getOrigin_#res := getOrigin_~retValue_acc~4; 2651#L586-1true bobCall_#t~ret63 := getOrigin_#res;bobCall_~tmp~7 := bobCall_#t~ret63;havoc bobCall_#t~ret63;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~7;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 1343#L3072-1true assume 0 == initPersonOnFloor_~floor; 960#L3073-2true assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 5801#L3180-3true callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 1939#L2864-2true assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 2657#L2876-5true havoc cleanup_#t~ret69, cleanup_#t~ret70, cleanup_~i~2, cleanup_~tmp~13, cleanup_~tmp___0~4, cleanup_~__cil_tmp4~2;havoc cleanup_~i~2;havoc cleanup_~tmp~13;havoc cleanup_~tmp___0~4;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_#t~ret123, timeShift_#t~ret124, timeShift_#t~ret125, timeShift_#t~ret126, timeShift_~tmp~25, timeShift_~tmp___0~12, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~25;havoc timeShift_~tmp___0~12;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_#t~ret54, __utac_acc__Specification3_spec__1_#t~ret55, __utac_acc__Specification3_spec__1_#t~ret56, __utac_acc__Specification3_spec__1_#t~ret57, __utac_acc__Specification3_spec__1_#t~ret58, __utac_acc__Specification3_spec__1_#t~ret59, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 5852#L1420-12true __utac_acc__Specification3_spec__1_#t~ret48 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret48;havoc __utac_acc__Specification3_spec__1_#t~ret48;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~12;havoc getCurrentHeading_~retValue_acc~12;getCurrentHeading_~retValue_acc~12 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~12; 497#L1472-9true __utac_acc__Specification3_spec__1_#t~ret49 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 1923#L662-3true assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 2053#L663-3true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~11;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~11; 4205#L1437-36true assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~11 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~11; 1799#L1458-36true __utac_acc__Specification3_spec__1_#t~ret50 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~0 := __utac_acc__Specification3_spec__1_#t~ret50;havoc __utac_acc__Specification3_spec__1_#t~ret50; 2933#L667-6true assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0;~expectedDirection~0 := 1; 458#L768-3true havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret100, stopRequestedAtCurrentFloor_#t~ret101, stopRequestedAtCurrentFloor_#t~ret102, stopRequestedAtCurrentFloor_#t~ret103, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~23, stopRequestedAtCurrentFloor_~tmp___0~10;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~23;havoc stopRequestedAtCurrentFloor_~tmp___0~10;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret174, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 1511#L2801-75true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 5615#L2828-75true isExecutiveFloorCalling_#t~ret174 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret174;havoc isExecutiveFloorCalling_#t~ret174;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 512#L2705-9true stopRequestedAtCurrentFloor_#t~ret100 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~23 := stopRequestedAtCurrentFloor_#t~ret100;havoc stopRequestedAtCurrentFloor_#t~ret100; 487#L2089-3true assume 0 != stopRequestedAtCurrentFloor_~tmp~23;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 5854#L1420-13true stopRequestedAtCurrentFloor_#t~ret101 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~10 := stopRequestedAtCurrentFloor_#t~ret101;havoc stopRequestedAtCurrentFloor_#t~ret101; 205#L2093-3true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 1003#L2106-3true timeShift_#t~ret116 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret116;havoc timeShift_#t~ret116; 2306#L2242-3true assume !(0 != timeShift_~tmp___9~3); 2269#L2333-9true assume !(1 == ~doorState~0); 2271#L2333-11true stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret94, stopRequestedInDirection_#t~ret95, stopRequestedInDirection_#t~ret96, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~17, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~8, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~17;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~8;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret174, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 1468#L2801-78true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 5607#L2828-78true isExecutiveFloorCalling_#t~ret174 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret174;havoc isExecutiveFloorCalling_#t~ret174;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 510#L2705-10true stopRequestedInDirection_#t~ret94 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~8 := stopRequestedInDirection_#t~ret94;havoc stopRequestedInDirection_#t~ret94; 3824#L1972-6true assume 0 != stopRequestedInDirection_~tmp___0~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 5835#L1420-14true stopRequestedInDirection_#t~ret95 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~20 := stopRequestedInDirection_#t~ret95;havoc stopRequestedInDirection_#t~ret95;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~20 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~17; 1793#L1985-6true timeShift_#t~ret123 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret123;havoc timeShift_#t~ret123; 2900#L2341-3true assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret97, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 4458#L2029-9true assume !(1 == ~currentHeading~0); 5636#L2039-27true assume !(0 == ~currentFloorID~0); 5638#L2039-29true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 3440#L2045-23true havoc __utac_acc__Specification3_spec__2_#t~ret60, __utac_acc__Specification3_spec__2_#t~ret61, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 5050#L793-3true assume !(-1 == ~expectedDirection~0); 5584#L805-3true assume !(1 == ~expectedDirection~0); 5664#L806-3true cleanup_~i~2 := 0; 5066#L969-2true [2020-11-29 19:16:34,036 INFO L796 eck$LassoCheckResult]: Loop: 5066#L969-2true assume !false; 4706#L970true cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 4423#L973true assume cleanup_~i~2 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~8;havoc isBlocked_~retValue_acc~8;isBlocked_~retValue_acc~8 := 0;isBlocked_#res := isBlocked_~retValue_acc~8; 3804#L1271true cleanup_#t~ret69 := isBlocked_#res;cleanup_~tmp___0~4 := cleanup_#t~ret69;havoc cleanup_#t~ret69; 6060#L977true assume 1 != cleanup_~tmp___0~4; 6062#L977-1true havoc isIdle_#res;havoc isIdle_#t~ret82, isIdle_~retValue_acc~15, isIdle_~tmp~18;havoc isIdle_~retValue_acc~15;havoc isIdle_~tmp~18;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret77, anyStopRequested_#t~ret78, anyStopRequested_#t~ret79, anyStopRequested_#t~ret80, anyStopRequested_#t~ret81, anyStopRequested_~retValue_acc~14, anyStopRequested_~tmp~17, anyStopRequested_~tmp___0~6, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~2, anyStopRequested_~tmp___3~1;havoc anyStopRequested_~retValue_acc~14;havoc anyStopRequested_~tmp~17;havoc anyStopRequested_~tmp___0~6;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~2;havoc anyStopRequested_~tmp___3~1;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 1707#L2801-100true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 5574#L2828-100true anyStopRequested_#t~ret77 := isFloorCalling_#res;anyStopRequested_~tmp___3~1 := anyStopRequested_#t~ret77;havoc anyStopRequested_#t~ret77; 4304#L1528true assume 0 != anyStopRequested_~tmp___3~1;anyStopRequested_~retValue_acc~14 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~14; 5954#L1592true isIdle_#t~ret82 := anyStopRequested_#res;isIdle_~tmp~18 := isIdle_#t~ret82;havoc isIdle_#t~ret82;isIdle_~retValue_acc~15 := (if 0 == isIdle_~tmp~18 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~15; 3602#L1605true cleanup_#t~ret70 := isIdle_#res;cleanup_~tmp~13 := cleanup_#t~ret70;havoc cleanup_#t~ret70; 3415#L989true assume !(0 != cleanup_~tmp~13);havoc timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_#t~ret123, timeShift_#t~ret124, timeShift_#t~ret125, timeShift_#t~ret126, timeShift_~tmp~25, timeShift_~tmp___0~12, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~25;havoc timeShift_~tmp___0~12;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_#t~ret54, __utac_acc__Specification3_spec__1_#t~ret55, __utac_acc__Specification3_spec__1_#t~ret56, __utac_acc__Specification3_spec__1_#t~ret57, __utac_acc__Specification3_spec__1_#t~ret58, __utac_acc__Specification3_spec__1_#t~ret59, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 5838#L1420-16true __utac_acc__Specification3_spec__1_#t~ret48 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret48;havoc __utac_acc__Specification3_spec__1_#t~ret48;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~12;havoc getCurrentHeading_~retValue_acc~12;getCurrentHeading_~retValue_acc~12 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~12; 480#L1472-12true __utac_acc__Specification3_spec__1_#t~ret49 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 1927#L662-4true assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 3603#L724-4true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~11;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~11; 4379#L1437-53true assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~11 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~11; 2940#L1458-53true __utac_acc__Specification3_spec__1_#t~ret55 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret55;havoc __utac_acc__Specification3_spec__1_#t~ret55; 3292#L728-8true assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 462#L768-4true havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret100, stopRequestedAtCurrentFloor_#t~ret101, stopRequestedAtCurrentFloor_#t~ret102, stopRequestedAtCurrentFloor_#t~ret103, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~23, stopRequestedAtCurrentFloor_~tmp___0~10;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~23;havoc stopRequestedAtCurrentFloor_~tmp___0~10;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret174, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 1696#L2801-105true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 5565#L2828-105true isExecutiveFloorCalling_#t~ret174 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret174;havoc isExecutiveFloorCalling_#t~ret174;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 519#L2705-12true stopRequestedAtCurrentFloor_#t~ret100 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~23 := stopRequestedAtCurrentFloor_#t~ret100;havoc stopRequestedAtCurrentFloor_#t~ret100; 491#L2089-4true assume 0 != stopRequestedAtCurrentFloor_~tmp~23;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 5840#L1420-17true stopRequestedAtCurrentFloor_#t~ret101 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~10 := stopRequestedAtCurrentFloor_#t~ret101;havoc stopRequestedAtCurrentFloor_#t~ret101; 200#L2093-4true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 1007#L2106-4true timeShift_#t~ret116 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret116;havoc timeShift_#t~ret116; 2284#L2242-4true assume !(0 != timeShift_~tmp___9~3); 2274#L2333-12true assume 1 == ~doorState~0;~doorState~0 := 0; 2277#L2333-14true stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret94, stopRequestedInDirection_#t~ret95, stopRequestedInDirection_#t~ret96, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~17, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~8, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~17;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~8;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret174, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 1701#L2801-108true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 5570#L2828-108true isExecutiveFloorCalling_#t~ret174 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret174;havoc isExecutiveFloorCalling_#t~ret174;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 494#L2705-13true stopRequestedInDirection_#t~ret94 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~8 := stopRequestedInDirection_#t~ret94;havoc stopRequestedInDirection_#t~ret94; 3833#L1972-8true assume 0 != stopRequestedInDirection_~tmp___0~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 5843#L1420-18true stopRequestedInDirection_#t~ret95 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~20 := stopRequestedInDirection_#t~ret95;havoc stopRequestedInDirection_#t~ret95;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~20 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~17; 1781#L1985-8true timeShift_#t~ret123 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret123;havoc timeShift_#t~ret123; 2905#L2341-4true assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret97, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 4471#L2029-12true assume !(1 == ~currentHeading~0); 5557#L2039-36true assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 5559#L2039-38true assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 3430#L2045-29true havoc __utac_acc__Specification3_spec__2_#t~ret60, __utac_acc__Specification3_spec__2_#t~ret61, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 5055#L793-4true assume !(-1 == ~expectedDirection~0); 5587#L805-4true assume !(1 == ~expectedDirection~0); 5666#L806-4true cleanup_~i~2 := 1 + cleanup_~i~2; 5066#L969-2true [2020-11-29 19:16:34,045 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-11-29 19:16:34,046 INFO L82 PathProgramCache]: Analyzing trace with hash -438563064, now seen corresponding path program 1 times [2020-11-29 19:16:34,063 INFO L162 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-11-29 19:16:34,064 INFO L353 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [398812268] [2020-11-29 19:16:34,065 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-11-29 19:16:34,454 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-11-29 19:16:34,777 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-11-29 19:16:34,778 INFO L353 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [398812268] [2020-11-29 19:16:34,779 INFO L219 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-11-29 19:16:34,780 INFO L232 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2020-11-29 19:16:34,781 INFO L155 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1350645097] [2020-11-29 19:16:34,788 INFO L799 eck$LassoCheckResult]: stem already infeasible [2020-11-29 19:16:34,789 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-11-29 19:16:34,789 INFO L82 PathProgramCache]: Analyzing trace with hash -887822560, now seen corresponding path program 1 times [2020-11-29 19:16:34,790 INFO L162 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-11-29 19:16:34,790 INFO L353 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1329608501] [2020-11-29 19:16:34,790 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-11-29 19:16:34,815 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-11-29 19:16:34,936 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-11-29 19:16:34,937 INFO L353 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1329608501] [2020-11-29 19:16:34,938 INFO L219 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-11-29 19:16:34,938 INFO L232 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2020-11-29 19:16:34,938 INFO L155 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2006565912] [2020-11-29 19:16:34,940 INFO L811 eck$LassoCheckResult]: loop already infeasible [2020-11-29 19:16:34,942 INFO L142 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-11-29 19:16:34,962 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2020-11-29 19:16:34,963 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2020-11-29 19:16:34,966 INFO L87 Difference]: Start difference. First operand 6093 states. Second operand 7 states. [2020-11-29 19:16:53,123 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-11-29 19:16:53,123 INFO L93 Difference]: Finished difference Result 63843 states and 120177 transitions. [2020-11-29 19:16:53,124 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2020-11-29 19:16:53,126 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 63843 states and 120177 transitions. [2020-11-29 19:16:53,947 INFO L131 ngComponentsAnalysis]: Automaton has 3 accepting balls. 10951 [2020-11-29 19:16:54,686 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 63843 states to 63649 states and 119956 transitions. [2020-11-29 19:16:54,688 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 63649 [2020-11-29 19:16:54,840 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 63649 [2020-11-29 19:16:54,842 INFO L73 IsDeterministic]: Start isDeterministic. Operand 63649 states and 119956 transitions. [2020-11-29 19:16:55,011 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2020-11-29 19:16:55,011 INFO L691 BuchiCegarLoop]: Abstraction has 63649 states and 119956 transitions. [2020-11-29 19:16:55,148 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 63649 states and 119956 transitions. [2020-11-29 19:16:56,136 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 63649 to 20194. [2020-11-29 19:16:56,138 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 20194 states. [2020-11-29 19:16:56,230 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 20194 states to 20194 states and 38017 transitions. [2020-11-29 19:16:56,231 INFO L714 BuchiCegarLoop]: Abstraction has 20194 states and 38017 transitions. [2020-11-29 19:16:56,232 INFO L594 BuchiCegarLoop]: Abstraction has 20194 states and 38017 transitions. [2020-11-29 19:16:56,233 INFO L427 BuchiCegarLoop]: ======== Iteration 2============ [2020-11-29 19:16:56,233 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 20194 states and 38017 transitions. [2020-11-29 19:16:56,544 INFO L131 ngComponentsAnalysis]: Automaton has 3 accepting balls. 4547 [2020-11-29 19:16:56,544 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2020-11-29 19:16:56,545 INFO L119 BuchiIsEmpty]: Starting construction of run [2020-11-29 19:16:56,558 INFO L852 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-11-29 19:16:56,559 INFO L853 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-11-29 19:16:56,561 INFO L794 eck$LassoCheckResult]: Stem: 74714#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(2);call write~init~int(48, #t~string4.base, #t~string4.offset, 1);call write~init~int(0, #t~string4.base, 1 + #t~string4.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(31);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(12);call #t~string25.base, #t~string25.offset := #Ultimate.allocOnStack(30);call #t~string26.base, #t~string26.offset := #Ultimate.allocOnStack(9);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(21);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(30);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(9);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(21);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(30);call #t~string35.base, #t~string35.offset := #Ultimate.allocOnStack(9);call #t~string36.base, #t~string36.offset := #Ultimate.allocOnStack(25);call #t~string37.base, #t~string37.offset := #Ultimate.allocOnStack(30);call #t~string38.base, #t~string38.offset := #Ultimate.allocOnStack(9);call #t~string39.base, #t~string39.offset := #Ultimate.allocOnStack(25);call #t~string127.base, #t~string127.offset := #Ultimate.allocOnStack(10);call #t~string129.base, #t~string129.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string129.base, #t~string129.offset, 1);call write~init~int(95, #t~string129.base, 1 + #t~string129.offset, 1);call write~init~int(93, #t~string129.base, 2 + #t~string129.offset, 1);call write~init~int(0, #t~string129.base, 3 + #t~string129.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string131.base, #t~string131.offset, 1);call write~init~int(93, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(32, #t~string131.base, 2 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 3 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string133.base, #t~string133.offset, 1);call write~init~int(97, #t~string133.base, 1 + #t~string133.offset, 1);call write~init~int(116, #t~string133.base, 2 + #t~string133.offset, 1);call write~init~int(32, #t~string133.base, 3 + #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 4 + #t~string133.offset, 1);call #t~string135.base, #t~string135.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string135.base, #t~string135.offset, 1);call write~init~int(105, #t~string135.base, 1 + #t~string135.offset, 1);call write~init~int(0, #t~string135.base, 2 + #t~string135.offset, 1);call #t~string137.base, #t~string137.offset := #Ultimate.allocOnStack(10);call #t~string139.base, #t~string139.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string139.base, #t~string139.offset, 1);call write~init~int(112, #t~string139.base, 1 + #t~string139.offset, 1);call write~init~int(0, #t~string139.base, 2 + #t~string139.offset, 1);call #t~string141.base, #t~string141.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string141.base, #t~string141.offset, 1);call write~init~int(111, #t~string141.base, 1 + #t~string141.offset, 1);call write~init~int(119, #t~string141.base, 2 + #t~string141.offset, 1);call write~init~int(110, #t~string141.base, 3 + #t~string141.offset, 1);call write~init~int(0, #t~string141.base, 4 + #t~string141.offset, 1);call #t~string143.base, #t~string143.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string143.base, #t~string143.offset, 1);call write~init~int(73, #t~string143.base, 1 + #t~string143.offset, 1);call write~init~int(76, #t~string143.base, 2 + #t~string143.offset, 1);call write~init~int(95, #t~string143.base, 3 + #t~string143.offset, 1);call write~init~int(112, #t~string143.base, 4 + #t~string143.offset, 1);call write~init~int(58, #t~string143.base, 5 + #t~string143.offset, 1);call write~init~int(0, #t~string143.base, 6 + #t~string143.offset, 1);call #t~string145.base, #t~string145.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string145.base, #t~string145.offset, 1);call write~init~int(37, #t~string145.base, 1 + #t~string145.offset, 1);call write~init~int(105, #t~string145.base, 2 + #t~string145.offset, 1);call write~init~int(0, #t~string145.base, 3 + #t~string145.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string147.base, #t~string147.offset, 1);call write~init~int(37, #t~string147.base, 1 + #t~string147.offset, 1);call write~init~int(105, #t~string147.base, 2 + #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 3 + #t~string147.offset, 1);call #t~string149.base, #t~string149.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string149.base, #t~string149.offset, 1);call write~init~int(37, #t~string149.base, 1 + #t~string149.offset, 1);call write~init~int(105, #t~string149.base, 2 + #t~string149.offset, 1);call write~init~int(0, #t~string149.base, 3 + #t~string149.offset, 1);call #t~string151.base, #t~string151.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string151.base, #t~string151.offset, 1);call write~init~int(37, #t~string151.base, 1 + #t~string151.offset, 1);call write~init~int(105, #t~string151.base, 2 + #t~string151.offset, 1);call write~init~int(0, #t~string151.base, 3 + #t~string151.offset, 1);call #t~string153.base, #t~string153.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string153.base, #t~string153.offset, 1);call write~init~int(37, #t~string153.base, 1 + #t~string153.offset, 1);call write~init~int(105, #t~string153.base, 2 + #t~string153.offset, 1);call write~init~int(0, #t~string153.base, 3 + #t~string153.offset, 1);call #t~string155.base, #t~string155.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string155.base, #t~string155.offset, 1);call write~init~int(70, #t~string155.base, 1 + #t~string155.offset, 1);call write~init~int(95, #t~string155.base, 2 + #t~string155.offset, 1);call write~init~int(112, #t~string155.base, 3 + #t~string155.offset, 1);call write~init~int(58, #t~string155.base, 4 + #t~string155.offset, 1);call write~init~int(0, #t~string155.base, 5 + #t~string155.offset, 1);call #t~string158.base, #t~string158.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string158.base, #t~string158.offset, 1);call write~init~int(37, #t~string158.base, 1 + #t~string158.offset, 1);call write~init~int(105, #t~string158.base, 2 + #t~string158.offset, 1);call write~init~int(0, #t~string158.base, 3 + #t~string158.offset, 1);call #t~string161.base, #t~string161.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string161.base, #t~string161.offset, 1);call write~init~int(37, #t~string161.base, 1 + #t~string161.offset, 1);call write~init~int(105, #t~string161.base, 2 + #t~string161.offset, 1);call write~init~int(0, #t~string161.base, 3 + #t~string161.offset, 1);call #t~string164.base, #t~string164.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string164.base, #t~string164.offset, 1);call write~init~int(37, #t~string164.base, 1 + #t~string164.offset, 1);call write~init~int(105, #t~string164.base, 2 + #t~string164.offset, 1);call write~init~int(0, #t~string164.base, 3 + #t~string164.offset, 1);call #t~string167.base, #t~string167.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string167.base, #t~string167.offset, 1);call write~init~int(37, #t~string167.base, 1 + #t~string167.offset, 1);call write~init~int(105, #t~string167.base, 2 + #t~string167.offset, 1);call write~init~int(0, #t~string167.base, 3 + #t~string167.offset, 1);call #t~string170.base, #t~string170.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string170.base, #t~string170.offset, 1);call write~init~int(37, #t~string170.base, 1 + #t~string170.offset, 1);call write~init~int(105, #t~string170.base, 2 + #t~string170.offset, 1);call write~init~int(0, #t~string170.base, 3 + #t~string170.offset, 1);call #t~string172.base, #t~string172.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string172.base, #t~string172.offset, 1);call write~init~int(0, #t~string172.base, 1 + #t~string172.offset, 1);~head~0.base, ~head~0.offset := 0, 0;~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~expectedDirection~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 74715#L-1 havoc main_#res;havoc main_#t~ret75, main_~retValue_acc~7, main_~tmp~15;havoc main_~retValue_acc~7;havoc main_~tmp~15; 74071#L3402 havoc valid_product_#res;havoc valid_product_~retValue_acc~29;havoc valid_product_~retValue_acc~29;valid_product_~retValue_acc~29 := 1;valid_product_#res := valid_product_~retValue_acc~29; 70918#L3410 main_#t~ret75 := valid_product_#res;main_~tmp~15 := main_#t~ret75;havoc main_#t~ret75; 70919#L1164 assume 0 != main_~tmp~15; 71949#L1137 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 70865#L2794 havoc bobCall_#t~ret63, bobCall_~tmp~7;havoc bobCall_~tmp~7;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 70866#L561 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~4 := 4;getOrigin_#res := getOrigin_~retValue_acc~4; 72731#L586 bobCall_#t~ret63 := getOrigin_#res;bobCall_~tmp~7 := bobCall_#t~ret63;havoc bobCall_#t~ret63;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~7;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 72330#L3072 assume 0 == initPersonOnFloor_~floor; 71840#L3073 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 70347#L3180-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 73150#L2864 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 72748#L2876-2 havoc timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_#t~ret123, timeShift_#t~ret124, timeShift_#t~ret125, timeShift_#t~ret126, timeShift_~tmp~25, timeShift_~tmp___0~12, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~25;havoc timeShift_~tmp___0~12;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_#t~ret54, __utac_acc__Specification3_spec__1_#t~ret55, __utac_acc__Specification3_spec__1_#t~ret56, __utac_acc__Specification3_spec__1_#t~ret57, __utac_acc__Specification3_spec__1_#t~ret58, __utac_acc__Specification3_spec__1_#t~ret59, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 73905#L1420 __utac_acc__Specification3_spec__1_#t~ret48 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret48;havoc __utac_acc__Specification3_spec__1_#t~ret48;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~12;havoc getCurrentHeading_~retValue_acc~12;getCurrentHeading_~retValue_acc~12 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~12; 70964#L1472 __utac_acc__Specification3_spec__1_#t~ret49 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 70965#L662 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 73120#L663 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~11;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~11; 73299#L1437 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~11 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~11; 73052#L1458 __utac_acc__Specification3_spec__1_#t~ret50 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~0 := __utac_acc__Specification3_spec__1_#t~ret50;havoc __utac_acc__Specification3_spec__1_#t~ret50; 73053#L667 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0;~expectedDirection~0 := 1; 70463#L768 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret100, stopRequestedAtCurrentFloor_#t~ret101, stopRequestedAtCurrentFloor_#t~ret102, stopRequestedAtCurrentFloor_#t~ret103, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~23, stopRequestedAtCurrentFloor_~tmp___0~10;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~23;havoc stopRequestedAtCurrentFloor_~tmp___0~10;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret174, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 70019#L2801 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 70020#L2828 isExecutiveFloorCalling_#t~ret174 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret174;havoc isExecutiveFloorCalling_#t~ret174;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 70990#L2705 stopRequestedAtCurrentFloor_#t~ret100 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~23 := stopRequestedAtCurrentFloor_#t~ret100;havoc stopRequestedAtCurrentFloor_#t~ret100; 70876#L2089 assume 0 != stopRequestedAtCurrentFloor_~tmp~23;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 70877#L1420-1 stopRequestedAtCurrentFloor_#t~ret101 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~10 := stopRequestedAtCurrentFloor_#t~ret101;havoc stopRequestedAtCurrentFloor_#t~ret101; 70487#L2093 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 70488#L2106 timeShift_#t~ret116 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret116;havoc timeShift_#t~ret116; 71958#L2242 assume !(0 != timeShift_~tmp___9~3); 73381#L2333 assume !(1 == ~doorState~0); 73382#L2333-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret94, stopRequestedInDirection_#t~ret95, stopRequestedInDirection_#t~ret96, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~17, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~8, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~17;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~8;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret174, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 69984#L2801-3 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 69985#L2828-3 isExecutiveFloorCalling_#t~ret174 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret174;havoc isExecutiveFloorCalling_#t~ret174;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 70999#L2705-1 stopRequestedInDirection_#t~ret94 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~8 := stopRequestedInDirection_#t~ret94;havoc stopRequestedInDirection_#t~ret94; 71000#L1972 assume 0 != stopRequestedInDirection_~tmp___0~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 75044#L1420-2 stopRequestedInDirection_#t~ret95 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~20 := stopRequestedInDirection_#t~ret95;havoc stopRequestedInDirection_#t~ret95;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~20 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~17; 73222#L1985 timeShift_#t~ret123 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret123;havoc timeShift_#t~ret123; 73223#L2341 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret97, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 74116#L2029 assume !(1 == ~currentHeading~0); 75809#L2039 assume !(0 == ~currentFloorID~0); 76288#L2039-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 76278#L2045-5 havoc __utac_acc__Specification3_spec__2_#t~ret60, __utac_acc__Specification3_spec__2_#t~ret61, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 78188#L793 assume !(-1 == ~expectedDirection~0); 78184#L805 assume !(1 == ~expectedDirection~0); 76281#L806 havoc timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_#t~ret123, timeShift_#t~ret124, timeShift_#t~ret125, timeShift_#t~ret126, timeShift_~tmp~25, timeShift_~tmp___0~12, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~25;havoc timeShift_~tmp___0~12;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_#t~ret54, __utac_acc__Specification3_spec__1_#t~ret55, __utac_acc__Specification3_spec__1_#t~ret56, __utac_acc__Specification3_spec__1_#t~ret57, __utac_acc__Specification3_spec__1_#t~ret58, __utac_acc__Specification3_spec__1_#t~ret59, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 76282#L1420-4 __utac_acc__Specification3_spec__1_#t~ret48 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret48;havoc __utac_acc__Specification3_spec__1_#t~ret48;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~12;havoc getCurrentHeading_~retValue_acc~12;getCurrentHeading_~retValue_acc~12 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~12; 70925#L1472-3 __utac_acc__Specification3_spec__1_#t~ret49 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 70926#L662-1 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 73126#L663-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~11;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~11; 73306#L1437-12 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~11 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~11; 73000#L1458-12 __utac_acc__Specification3_spec__1_#t~ret50 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~0 := __utac_acc__Specification3_spec__1_#t~ret50;havoc __utac_acc__Specification3_spec__1_#t~ret50; 73001#L667-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0;~expectedDirection~0 := 1; 70471#L768-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret100, stopRequestedAtCurrentFloor_#t~ret101, stopRequestedAtCurrentFloor_#t~ret102, stopRequestedAtCurrentFloor_#t~ret103, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~23, stopRequestedAtCurrentFloor_~tmp___0~10;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~23;havoc stopRequestedAtCurrentFloor_~tmp___0~10;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret174, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 70331#L2801-25 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 70332#L2828-25 isExecutiveFloorCalling_#t~ret174 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret174;havoc isExecutiveFloorCalling_#t~ret174;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 70945#L2705-3 stopRequestedAtCurrentFloor_#t~ret100 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~23 := stopRequestedAtCurrentFloor_#t~ret100;havoc stopRequestedAtCurrentFloor_#t~ret100; 70881#L2089-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~23;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 70882#L1420-5 stopRequestedAtCurrentFloor_#t~ret101 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~10 := stopRequestedAtCurrentFloor_#t~ret101;havoc stopRequestedAtCurrentFloor_#t~ret101; 76319#L2093-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 70492#L2106-1 timeShift_#t~ret116 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret116;havoc timeShift_#t~ret116; 71894#L2242-1 assume !(0 != timeShift_~tmp___9~3); 73386#L2333-3 assume !(1 == ~doorState~0); 73387#L2333-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret94, stopRequestedInDirection_#t~ret95, stopRequestedInDirection_#t~ret96, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~17, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~8, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~17;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~8;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret174, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 70342#L2801-28 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 70343#L2828-28 isExecutiveFloorCalling_#t~ret174 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret174;havoc isExecutiveFloorCalling_#t~ret174;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 70954#L2705-4 stopRequestedInDirection_#t~ret94 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~8 := stopRequestedInDirection_#t~ret94;havoc stopRequestedInDirection_#t~ret94; 70955#L1972-2 assume 0 != stopRequestedInDirection_~tmp___0~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 76320#L1420-6 stopRequestedInDirection_#t~ret95 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~20 := stopRequestedInDirection_#t~ret95;havoc stopRequestedInDirection_#t~ret95;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~20 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~17; 73227#L1985-2 timeShift_#t~ret123 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret123;havoc timeShift_#t~ret123; 73228#L2341-1 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret97, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 74108#L2029-3 assume !(1 == ~currentHeading~0); 75819#L2039-9 assume !(0 == ~currentFloorID~0); 76270#L2039-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 70084#L2045-11 havoc __utac_acc__Specification3_spec__2_#t~ret60, __utac_acc__Specification3_spec__2_#t~ret61, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 74823#L793-1 assume !(-1 == ~expectedDirection~0); 75409#L805-1 assume !(1 == ~expectedDirection~0); 74788#L806-1 havoc timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_#t~ret123, timeShift_#t~ret124, timeShift_#t~ret125, timeShift_#t~ret126, timeShift_~tmp~25, timeShift_~tmp___0~12, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~25;havoc timeShift_~tmp___0~12;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_#t~ret54, __utac_acc__Specification3_spec__1_#t~ret55, __utac_acc__Specification3_spec__1_#t~ret56, __utac_acc__Specification3_spec__1_#t~ret57, __utac_acc__Specification3_spec__1_#t~ret58, __utac_acc__Specification3_spec__1_#t~ret59, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 76286#L1420-8 __utac_acc__Specification3_spec__1_#t~ret48 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret48;havoc __utac_acc__Specification3_spec__1_#t~ret48;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~12;havoc getCurrentHeading_~retValue_acc~12;getCurrentHeading_~retValue_acc~12 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~12; 70943#L1472-6 __utac_acc__Specification3_spec__1_#t~ret49 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 70944#L662-2 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 73072#L663-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~11;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~11; 73309#L1437-24 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~11 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~11; 72954#L1458-24 __utac_acc__Specification3_spec__1_#t~ret50 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~0 := __utac_acc__Specification3_spec__1_#t~ret50;havoc __utac_acc__Specification3_spec__1_#t~ret50; 72955#L667-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0;~expectedDirection~0 := 1; 70449#L768-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret100, stopRequestedAtCurrentFloor_#t~ret101, stopRequestedAtCurrentFloor_#t~ret102, stopRequestedAtCurrentFloor_#t~ret103, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~23, stopRequestedAtCurrentFloor_~tmp___0~10;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~23;havoc stopRequestedAtCurrentFloor_~tmp___0~10;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret174, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 70844#L2801-50 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 79482#L2828-50 isExecutiveFloorCalling_#t~ret174 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret174;havoc isExecutiveFloorCalling_#t~ret174;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 85101#L2705-6 stopRequestedAtCurrentFloor_#t~ret100 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~23 := stopRequestedAtCurrentFloor_#t~ret100;havoc stopRequestedAtCurrentFloor_#t~ret100; 85099#L2089-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~23;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 76312#L1420-9 stopRequestedAtCurrentFloor_#t~ret101 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~10 := stopRequestedAtCurrentFloor_#t~ret101;havoc stopRequestedAtCurrentFloor_#t~ret101; 76313#L2093-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 70490#L2106-2 timeShift_#t~ret116 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret116;havoc timeShift_#t~ret116; 71909#L2242-2 assume !(0 != timeShift_~tmp___9~3); 73549#L2333-6 assume 1 == ~doorState~0;~doorState~0 := 0; 73372#L2333-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret94, stopRequestedInDirection_#t~ret95, stopRequestedInDirection_#t~ret96, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~17, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~8, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~17;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~8;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret174, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 73373#L2801-53 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 76314#L2828-53 isExecutiveFloorCalling_#t~ret174 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret174;havoc isExecutiveFloorCalling_#t~ret174;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 76315#L2705-7 stopRequestedInDirection_#t~ret94 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~8 := stopRequestedInDirection_#t~ret94;havoc stopRequestedInDirection_#t~ret94; 75058#L1972-4 assume 0 != stopRequestedInDirection_~tmp___0~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 75059#L1420-10 stopRequestedInDirection_#t~ret95 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~20 := stopRequestedInDirection_#t~ret95;havoc stopRequestedInDirection_#t~ret95;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~20 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~17; 89881#L1985-4 timeShift_#t~ret123 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret123;havoc timeShift_#t~ret123; 89866#L2341-2 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret97, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 75495#L2029-6 assume !(1 == ~currentHeading~0); 75496#L2039-18 assume !(0 == ~currentFloorID~0); 76252#L2039-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 76244#L2045-17 havoc __utac_acc__Specification3_spec__2_#t~ret60, __utac_acc__Specification3_spec__2_#t~ret61, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 86854#L793-2 assume !(-1 == ~expectedDirection~0); 86851#L805-2 assume !(1 == ~expectedDirection~0); 86849#L806-2 havoc bobCall_#t~ret63, bobCall_~tmp~7;havoc bobCall_~tmp~7;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 86734#L561-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~4 := 4;getOrigin_#res := getOrigin_~retValue_acc~4; 86726#L586-1 bobCall_#t~ret63 := getOrigin_#res;bobCall_~tmp~7 := bobCall_#t~ret63;havoc bobCall_#t~ret63;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~7;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 86724#L3072-1 assume 0 == initPersonOnFloor_~floor; 86695#L3073-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 86680#L3180-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 86678#L2864-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 81755#L2876-5 havoc cleanup_#t~ret69, cleanup_#t~ret70, cleanup_~i~2, cleanup_~tmp~13, cleanup_~tmp___0~4, cleanup_~__cil_tmp4~2;havoc cleanup_~i~2;havoc cleanup_~tmp~13;havoc cleanup_~tmp___0~4;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_#t~ret123, timeShift_#t~ret124, timeShift_#t~ret125, timeShift_#t~ret126, timeShift_~tmp~25, timeShift_~tmp___0~12, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~25;havoc timeShift_~tmp___0~12;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_#t~ret54, __utac_acc__Specification3_spec__1_#t~ret55, __utac_acc__Specification3_spec__1_#t~ret56, __utac_acc__Specification3_spec__1_#t~ret57, __utac_acc__Specification3_spec__1_#t~ret58, __utac_acc__Specification3_spec__1_#t~ret59, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 81754#L1420-12 __utac_acc__Specification3_spec__1_#t~ret48 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret48;havoc __utac_acc__Specification3_spec__1_#t~ret48;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~12;havoc getCurrentHeading_~retValue_acc~12;getCurrentHeading_~retValue_acc~12 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~12; 81753#L1472-9 __utac_acc__Specification3_spec__1_#t~ret49 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 81751#L662-3 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 81752#L663-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~11;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~11; 85077#L1437-36 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~11 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~11; 85075#L1458-36 __utac_acc__Specification3_spec__1_#t~ret50 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~0 := __utac_acc__Specification3_spec__1_#t~ret50;havoc __utac_acc__Specification3_spec__1_#t~ret50; 81727#L667-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0;~expectedDirection~0 := 1; 78098#L768-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret100, stopRequestedAtCurrentFloor_#t~ret101, stopRequestedAtCurrentFloor_#t~ret102, stopRequestedAtCurrentFloor_#t~ret103, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~23, stopRequestedAtCurrentFloor_~tmp___0~10;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~23;havoc stopRequestedAtCurrentFloor_~tmp___0~10;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret174, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 72499#L2801-75 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 72500#L2828-75 isExecutiveFloorCalling_#t~ret174 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret174;havoc isExecutiveFloorCalling_#t~ret174;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 70930#L2705-9 stopRequestedAtCurrentFloor_#t~ret100 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~23 := stopRequestedAtCurrentFloor_#t~ret100;havoc stopRequestedAtCurrentFloor_#t~ret100; 70887#L2089-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~23;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 70888#L1420-13 stopRequestedAtCurrentFloor_#t~ret101 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~10 := stopRequestedAtCurrentFloor_#t~ret101;havoc stopRequestedAtCurrentFloor_#t~ret101; 76318#L2093-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 70494#L2106-3 timeShift_#t~ret116 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret116;havoc timeShift_#t~ret116; 71908#L2242-3 assume !(0 != timeShift_~tmp___9~3); 73510#L2333-9 assume !(1 == ~doorState~0); 73511#L2333-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret94, stopRequestedInDirection_#t~ret95, stopRequestedInDirection_#t~ret96, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~17, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~8, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~17;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~8;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret174, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 72456#L2801-78 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 72457#L2828-78 isExecutiveFloorCalling_#t~ret174 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret174;havoc isExecutiveFloorCalling_#t~ret174;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 70927#L2705-10 stopRequestedInDirection_#t~ret94 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~8 := stopRequestedInDirection_#t~ret94;havoc stopRequestedInDirection_#t~ret94; 70928#L1972-6 assume 0 != stopRequestedInDirection_~tmp___0~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 76308#L1420-14 stopRequestedInDirection_#t~ret95 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~20 := stopRequestedInDirection_#t~ret95;havoc stopRequestedInDirection_#t~ret95;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~20 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~17; 72837#L1985-6 timeShift_#t~ret123 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret123;havoc timeShift_#t~ret123; 72838#L2341-3 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret97, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 90076#L2029-9 assume !(1 == ~currentHeading~0); 76248#L2039-27 assume !(0 == ~currentFloorID~0); 76249#L2039-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 76209#L2045-23 havoc __utac_acc__Specification3_spec__2_#t~ret60, __utac_acc__Specification3_spec__2_#t~ret61, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 88314#L793-3 assume !(-1 == ~expectedDirection~0); 88308#L805-3 assume !(1 == ~expectedDirection~0); 88302#L806-3 cleanup_~i~2 := 0; 88297#L969-2 [2020-11-29 19:16:56,564 INFO L796 eck$LassoCheckResult]: Loop: 88297#L969-2 assume !false; 88291#L970 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 88290#L973 assume cleanup_~i~2 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~8;havoc isBlocked_~retValue_acc~8;isBlocked_~retValue_acc~8 := 0;isBlocked_#res := isBlocked_~retValue_acc~8; 88289#L1271 cleanup_#t~ret69 := isBlocked_#res;cleanup_~tmp___0~4 := cleanup_#t~ret69;havoc cleanup_#t~ret69; 88288#L977 assume 1 != cleanup_~tmp___0~4; 88285#L977-1 havoc isIdle_#res;havoc isIdle_#t~ret82, isIdle_~retValue_acc~15, isIdle_~tmp~18;havoc isIdle_~retValue_acc~15;havoc isIdle_~tmp~18;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret77, anyStopRequested_#t~ret78, anyStopRequested_#t~ret79, anyStopRequested_#t~ret80, anyStopRequested_#t~ret81, anyStopRequested_~retValue_acc~14, anyStopRequested_~tmp~17, anyStopRequested_~tmp___0~6, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~2, anyStopRequested_~tmp___3~1;havoc anyStopRequested_~retValue_acc~14;havoc anyStopRequested_~tmp~17;havoc anyStopRequested_~tmp___0~6;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~2;havoc anyStopRequested_~tmp___3~1;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 72683#L2801-100 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 72684#L2828-100 anyStopRequested_#t~ret77 := isFloorCalling_#res;anyStopRequested_~tmp___3~1 := anyStopRequested_#t~ret77;havoc anyStopRequested_#t~ret77; 75358#L1528 assume 0 != anyStopRequested_~tmp___3~1;anyStopRequested_~retValue_acc~14 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~14; 70454#L1592 isIdle_#t~ret82 := anyStopRequested_#res;isIdle_~tmp~18 := isIdle_#t~ret82;havoc isIdle_#t~ret82;isIdle_~retValue_acc~15 := (if 0 == isIdle_~tmp~18 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~15; 76337#L1605 cleanup_#t~ret70 := isIdle_#res;cleanup_~tmp~13 := cleanup_#t~ret70;havoc cleanup_#t~ret70; 74661#L989 assume !(0 != cleanup_~tmp~13);havoc timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_#t~ret123, timeShift_#t~ret124, timeShift_#t~ret125, timeShift_#t~ret126, timeShift_~tmp~25, timeShift_~tmp___0~12, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~25;havoc timeShift_~tmp___0~12;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_#t~ret54, __utac_acc__Specification3_spec__1_#t~ret55, __utac_acc__Specification3_spec__1_#t~ret56, __utac_acc__Specification3_spec__1_#t~ret57, __utac_acc__Specification3_spec__1_#t~ret58, __utac_acc__Specification3_spec__1_#t~ret59, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 74662#L1420-16 __utac_acc__Specification3_spec__1_#t~ret48 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret48;havoc __utac_acc__Specification3_spec__1_#t~ret48;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~12;havoc getCurrentHeading_~retValue_acc~12;getCurrentHeading_~retValue_acc~12 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~12; 70872#L1472-12 __utac_acc__Specification3_spec__1_#t~ret49 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 70873#L662-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 73088#L724-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~11;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~11; 74833#L1437-53 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~11 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~11; 73112#L1458-53 __utac_acc__Specification3_spec__1_#t~ret55 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret55;havoc __utac_acc__Specification3_spec__1_#t~ret55; 74121#L728-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 70442#L768-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret100, stopRequestedAtCurrentFloor_#t~ret101, stopRequestedAtCurrentFloor_#t~ret102, stopRequestedAtCurrentFloor_#t~ret103, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~23, stopRequestedAtCurrentFloor_~tmp___0~10;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~23;havoc stopRequestedAtCurrentFloor_~tmp___0~10;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret174, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 70850#L2801-105 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 72672#L2828-105 isExecutiveFloorCalling_#t~ret174 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret174;havoc isExecutiveFloorCalling_#t~ret174;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 70941#L2705-12 stopRequestedAtCurrentFloor_#t~ret100 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~23 := stopRequestedAtCurrentFloor_#t~ret100;havoc stopRequestedAtCurrentFloor_#t~ret100; 70894#L2089-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~23;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 70896#L1420-17 stopRequestedAtCurrentFloor_#t~ret101 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~10 := stopRequestedAtCurrentFloor_#t~ret101;havoc stopRequestedAtCurrentFloor_#t~ret101; 81768#L2093-4 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 70485#L2106-4 timeShift_#t~ret116 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret116;havoc timeShift_#t~ret116; 89681#L2242-4 assume !(0 != timeShift_~tmp___9~3); 73516#L2333-12 assume 1 == ~doorState~0;~doorState~0 := 0; 73517#L2333-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret94, stopRequestedInDirection_#t~ret95, stopRequestedInDirection_#t~ret96, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~17, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~8, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~17;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~8;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret174, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 72678#L2801-108 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 72679#L2828-108 isExecutiveFloorCalling_#t~ret174 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret174;havoc isExecutiveFloorCalling_#t~ret174;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 70901#L2705-13 stopRequestedInDirection_#t~ret94 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~8 := stopRequestedInDirection_#t~ret94;havoc stopRequestedInDirection_#t~ret94; 70902#L1972-8 assume 0 != stopRequestedInDirection_~tmp___0~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 76311#L1420-18 stopRequestedInDirection_#t~ret95 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~20 := stopRequestedInDirection_#t~ret95;havoc stopRequestedInDirection_#t~ret95;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~20 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~17; 72813#L1985-8 timeShift_#t~ret123 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret123;havoc timeShift_#t~ret123; 72814#L2341-4 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret97, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 74113#L2029-12 assume !(1 == ~currentHeading~0); 76206#L2039-36 assume !(0 == ~currentFloorID~0); 76207#L2039-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 76204#L2045-29 havoc __utac_acc__Specification3_spec__2_#t~ret60, __utac_acc__Specification3_spec__2_#t~ret61, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 88311#L793-4 assume !(-1 == ~expectedDirection~0); 88305#L805-4 assume !(1 == ~expectedDirection~0); 88303#L806-4 cleanup_~i~2 := 1 + cleanup_~i~2; 88297#L969-2 [2020-11-29 19:16:56,565 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-11-29 19:16:56,566 INFO L82 PathProgramCache]: Analyzing trace with hash -1477147638, now seen corresponding path program 1 times [2020-11-29 19:16:56,566 INFO L162 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-11-29 19:16:56,567 INFO L353 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [493120604] [2020-11-29 19:16:56,567 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-11-29 19:16:56,684 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-11-29 19:16:56,830 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-11-29 19:16:56,832 INFO L353 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [493120604] [2020-11-29 19:16:56,832 INFO L219 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-11-29 19:16:56,832 INFO L232 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2020-11-29 19:16:56,834 INFO L155 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [335392175] [2020-11-29 19:16:56,836 INFO L799 eck$LassoCheckResult]: stem already infeasible [2020-11-29 19:16:56,837 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-11-29 19:16:56,837 INFO L82 PathProgramCache]: Analyzing trace with hash -830564258, now seen corresponding path program 1 times [2020-11-29 19:16:56,838 INFO L162 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-11-29 19:16:56,838 INFO L353 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1658733131] [2020-11-29 19:16:56,838 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-11-29 19:16:56,872 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-11-29 19:16:56,933 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-11-29 19:16:56,933 INFO L353 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1658733131] [2020-11-29 19:16:56,933 INFO L219 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-11-29 19:16:56,934 INFO L232 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2020-11-29 19:16:56,934 INFO L155 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [61013393] [2020-11-29 19:16:56,935 INFO L811 eck$LassoCheckResult]: loop already infeasible [2020-11-29 19:16:56,935 INFO L142 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-11-29 19:16:56,936 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2020-11-29 19:16:56,936 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2020-11-29 19:16:56,936 INFO L87 Difference]: Start difference. First operand 20194 states and 38017 transitions. cyclomatic complexity: 17826 Second operand 5 states. [2020-11-29 19:16:59,196 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-11-29 19:16:59,196 INFO L93 Difference]: Finished difference Result 34029 states and 63820 transitions. [2020-11-29 19:16:59,197 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2020-11-29 19:16:59,198 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 34029 states and 63820 transitions. [2020-11-29 19:16:59,426 INFO L131 ngComponentsAnalysis]: Automaton has 3 accepting balls. 8275 [2020-11-29 19:16:59,646 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 34029 states to 34029 states and 63820 transitions. [2020-11-29 19:16:59,646 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 34029 [2020-11-29 19:16:59,761 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 34029 [2020-11-29 19:16:59,769 INFO L73 IsDeterministic]: Start isDeterministic. Operand 34029 states and 63820 transitions. [2020-11-29 19:16:59,821 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2020-11-29 19:16:59,821 INFO L691 BuchiCegarLoop]: Abstraction has 34029 states and 63820 transitions. [2020-11-29 19:16:59,865 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 34029 states and 63820 transitions. [2020-11-29 19:17:01,038 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 34029 to 32997. [2020-11-29 19:17:01,039 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 32997 states. [2020-11-29 19:17:01,408 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 32997 states to 32997 states and 62072 transitions. [2020-11-29 19:17:01,408 INFO L714 BuchiCegarLoop]: Abstraction has 32997 states and 62072 transitions. [2020-11-29 19:17:01,408 INFO L594 BuchiCegarLoop]: Abstraction has 32997 states and 62072 transitions. [2020-11-29 19:17:01,409 INFO L427 BuchiCegarLoop]: ======== Iteration 3============ [2020-11-29 19:17:01,409 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 32997 states and 62072 transitions. [2020-11-29 19:17:01,603 INFO L131 ngComponentsAnalysis]: Automaton has 3 accepting balls. 7839 [2020-11-29 19:17:01,604 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2020-11-29 19:17:01,604 INFO L119 BuchiIsEmpty]: Starting construction of run [2020-11-29 19:17:01,612 INFO L852 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-11-29 19:17:01,613 INFO L853 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-11-29 19:17:01,614 INFO L794 eck$LassoCheckResult]: Stem: 128984#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(2);call write~init~int(48, #t~string4.base, #t~string4.offset, 1);call write~init~int(0, #t~string4.base, 1 + #t~string4.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(31);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(12);call #t~string25.base, #t~string25.offset := #Ultimate.allocOnStack(30);call #t~string26.base, #t~string26.offset := #Ultimate.allocOnStack(9);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(21);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(30);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(9);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(21);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(30);call #t~string35.base, #t~string35.offset := #Ultimate.allocOnStack(9);call #t~string36.base, #t~string36.offset := #Ultimate.allocOnStack(25);call #t~string37.base, #t~string37.offset := #Ultimate.allocOnStack(30);call #t~string38.base, #t~string38.offset := #Ultimate.allocOnStack(9);call #t~string39.base, #t~string39.offset := #Ultimate.allocOnStack(25);call #t~string127.base, #t~string127.offset := #Ultimate.allocOnStack(10);call #t~string129.base, #t~string129.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string129.base, #t~string129.offset, 1);call write~init~int(95, #t~string129.base, 1 + #t~string129.offset, 1);call write~init~int(93, #t~string129.base, 2 + #t~string129.offset, 1);call write~init~int(0, #t~string129.base, 3 + #t~string129.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string131.base, #t~string131.offset, 1);call write~init~int(93, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(32, #t~string131.base, 2 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 3 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string133.base, #t~string133.offset, 1);call write~init~int(97, #t~string133.base, 1 + #t~string133.offset, 1);call write~init~int(116, #t~string133.base, 2 + #t~string133.offset, 1);call write~init~int(32, #t~string133.base, 3 + #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 4 + #t~string133.offset, 1);call #t~string135.base, #t~string135.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string135.base, #t~string135.offset, 1);call write~init~int(105, #t~string135.base, 1 + #t~string135.offset, 1);call write~init~int(0, #t~string135.base, 2 + #t~string135.offset, 1);call #t~string137.base, #t~string137.offset := #Ultimate.allocOnStack(10);call #t~string139.base, #t~string139.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string139.base, #t~string139.offset, 1);call write~init~int(112, #t~string139.base, 1 + #t~string139.offset, 1);call write~init~int(0, #t~string139.base, 2 + #t~string139.offset, 1);call #t~string141.base, #t~string141.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string141.base, #t~string141.offset, 1);call write~init~int(111, #t~string141.base, 1 + #t~string141.offset, 1);call write~init~int(119, #t~string141.base, 2 + #t~string141.offset, 1);call write~init~int(110, #t~string141.base, 3 + #t~string141.offset, 1);call write~init~int(0, #t~string141.base, 4 + #t~string141.offset, 1);call #t~string143.base, #t~string143.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string143.base, #t~string143.offset, 1);call write~init~int(73, #t~string143.base, 1 + #t~string143.offset, 1);call write~init~int(76, #t~string143.base, 2 + #t~string143.offset, 1);call write~init~int(95, #t~string143.base, 3 + #t~string143.offset, 1);call write~init~int(112, #t~string143.base, 4 + #t~string143.offset, 1);call write~init~int(58, #t~string143.base, 5 + #t~string143.offset, 1);call write~init~int(0, #t~string143.base, 6 + #t~string143.offset, 1);call #t~string145.base, #t~string145.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string145.base, #t~string145.offset, 1);call write~init~int(37, #t~string145.base, 1 + #t~string145.offset, 1);call write~init~int(105, #t~string145.base, 2 + #t~string145.offset, 1);call write~init~int(0, #t~string145.base, 3 + #t~string145.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string147.base, #t~string147.offset, 1);call write~init~int(37, #t~string147.base, 1 + #t~string147.offset, 1);call write~init~int(105, #t~string147.base, 2 + #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 3 + #t~string147.offset, 1);call #t~string149.base, #t~string149.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string149.base, #t~string149.offset, 1);call write~init~int(37, #t~string149.base, 1 + #t~string149.offset, 1);call write~init~int(105, #t~string149.base, 2 + #t~string149.offset, 1);call write~init~int(0, #t~string149.base, 3 + #t~string149.offset, 1);call #t~string151.base, #t~string151.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string151.base, #t~string151.offset, 1);call write~init~int(37, #t~string151.base, 1 + #t~string151.offset, 1);call write~init~int(105, #t~string151.base, 2 + #t~string151.offset, 1);call write~init~int(0, #t~string151.base, 3 + #t~string151.offset, 1);call #t~string153.base, #t~string153.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string153.base, #t~string153.offset, 1);call write~init~int(37, #t~string153.base, 1 + #t~string153.offset, 1);call write~init~int(105, #t~string153.base, 2 + #t~string153.offset, 1);call write~init~int(0, #t~string153.base, 3 + #t~string153.offset, 1);call #t~string155.base, #t~string155.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string155.base, #t~string155.offset, 1);call write~init~int(70, #t~string155.base, 1 + #t~string155.offset, 1);call write~init~int(95, #t~string155.base, 2 + #t~string155.offset, 1);call write~init~int(112, #t~string155.base, 3 + #t~string155.offset, 1);call write~init~int(58, #t~string155.base, 4 + #t~string155.offset, 1);call write~init~int(0, #t~string155.base, 5 + #t~string155.offset, 1);call #t~string158.base, #t~string158.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string158.base, #t~string158.offset, 1);call write~init~int(37, #t~string158.base, 1 + #t~string158.offset, 1);call write~init~int(105, #t~string158.base, 2 + #t~string158.offset, 1);call write~init~int(0, #t~string158.base, 3 + #t~string158.offset, 1);call #t~string161.base, #t~string161.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string161.base, #t~string161.offset, 1);call write~init~int(37, #t~string161.base, 1 + #t~string161.offset, 1);call write~init~int(105, #t~string161.base, 2 + #t~string161.offset, 1);call write~init~int(0, #t~string161.base, 3 + #t~string161.offset, 1);call #t~string164.base, #t~string164.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string164.base, #t~string164.offset, 1);call write~init~int(37, #t~string164.base, 1 + #t~string164.offset, 1);call write~init~int(105, #t~string164.base, 2 + #t~string164.offset, 1);call write~init~int(0, #t~string164.base, 3 + #t~string164.offset, 1);call #t~string167.base, #t~string167.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string167.base, #t~string167.offset, 1);call write~init~int(37, #t~string167.base, 1 + #t~string167.offset, 1);call write~init~int(105, #t~string167.base, 2 + #t~string167.offset, 1);call write~init~int(0, #t~string167.base, 3 + #t~string167.offset, 1);call #t~string170.base, #t~string170.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string170.base, #t~string170.offset, 1);call write~init~int(37, #t~string170.base, 1 + #t~string170.offset, 1);call write~init~int(105, #t~string170.base, 2 + #t~string170.offset, 1);call write~init~int(0, #t~string170.base, 3 + #t~string170.offset, 1);call #t~string172.base, #t~string172.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string172.base, #t~string172.offset, 1);call write~init~int(0, #t~string172.base, 1 + #t~string172.offset, 1);~head~0.base, ~head~0.offset := 0, 0;~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~expectedDirection~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 128985#L-1 havoc main_#res;havoc main_#t~ret75, main_~retValue_acc~7, main_~tmp~15;havoc main_~retValue_acc~7;havoc main_~tmp~15; 128301#L3402 havoc valid_product_#res;havoc valid_product_~retValue_acc~29;havoc valid_product_~retValue_acc~29;valid_product_~retValue_acc~29 := 1;valid_product_#res := valid_product_~retValue_acc~29; 125167#L3410 main_#t~ret75 := valid_product_#res;main_~tmp~15 := main_#t~ret75;havoc main_#t~ret75; 125168#L1164 assume 0 != main_~tmp~15; 126191#L1137 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 125114#L2794 havoc bobCall_#t~ret63, bobCall_~tmp~7;havoc bobCall_~tmp~7;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 125115#L561 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~4 := 4;getOrigin_#res := getOrigin_~retValue_acc~4; 126966#L586 bobCall_#t~ret63 := getOrigin_#res;bobCall_~tmp~7 := bobCall_#t~ret63;havoc bobCall_#t~ret63;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~7;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 126569#L3072 assume 0 == initPersonOnFloor_~floor; 126082#L3073 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 124589#L3180-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 127373#L2864 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 126980#L2876-2 havoc timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_#t~ret123, timeShift_#t~ret124, timeShift_#t~ret125, timeShift_#t~ret126, timeShift_~tmp~25, timeShift_~tmp___0~12, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~25;havoc timeShift_~tmp___0~12;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_#t~ret54, __utac_acc__Specification3_spec__1_#t~ret55, __utac_acc__Specification3_spec__1_#t~ret56, __utac_acc__Specification3_spec__1_#t~ret57, __utac_acc__Specification3_spec__1_#t~ret58, __utac_acc__Specification3_spec__1_#t~ret59, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 128128#L1420 __utac_acc__Specification3_spec__1_#t~ret48 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret48;havoc __utac_acc__Specification3_spec__1_#t~ret48;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~12;havoc getCurrentHeading_~retValue_acc~12;getCurrentHeading_~retValue_acc~12 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~12; 125211#L1472 __utac_acc__Specification3_spec__1_#t~ret49 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 125212#L662 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 127345#L724 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~11;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~11; 128597#L1437-5 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~11 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~11; 127250#L1458-5 __utac_acc__Specification3_spec__1_#t~ret55 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret55;havoc __utac_acc__Specification3_spec__1_#t~ret55; 127251#L728 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 124706#L768 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret100, stopRequestedAtCurrentFloor_#t~ret101, stopRequestedAtCurrentFloor_#t~ret102, stopRequestedAtCurrentFloor_#t~ret103, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~23, stopRequestedAtCurrentFloor_~tmp___0~10;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~23;havoc stopRequestedAtCurrentFloor_~tmp___0~10;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret174, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 124261#L2801 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 124262#L2828 isExecutiveFloorCalling_#t~ret174 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret174;havoc isExecutiveFloorCalling_#t~ret174;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 125237#L2705 stopRequestedAtCurrentFloor_#t~ret100 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~23 := stopRequestedAtCurrentFloor_#t~ret100;havoc stopRequestedAtCurrentFloor_#t~ret100; 125125#L2089 assume 0 != stopRequestedAtCurrentFloor_~tmp~23;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 125126#L1420-1 stopRequestedAtCurrentFloor_#t~ret101 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~10 := stopRequestedAtCurrentFloor_#t~ret101;havoc stopRequestedAtCurrentFloor_#t~ret101; 124730#L2093 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 124731#L2106 timeShift_#t~ret116 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret116;havoc timeShift_#t~ret116; 130931#L2242 assume !(0 != timeShift_~tmp___9~3); 127608#L2333 assume !(1 == ~doorState~0); 127609#L2333-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret94, stopRequestedInDirection_#t~ret95, stopRequestedInDirection_#t~ret96, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~17, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~8, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~17;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~8;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret174, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 124226#L2801-3 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 124227#L2828-3 isExecutiveFloorCalling_#t~ret174 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret174;havoc isExecutiveFloorCalling_#t~ret174;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 125246#L2705-1 stopRequestedInDirection_#t~ret94 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~8 := stopRequestedInDirection_#t~ret94;havoc stopRequestedInDirection_#t~ret94; 125247#L1972 assume 0 != stopRequestedInDirection_~tmp___0~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 129330#L1420-2 stopRequestedInDirection_#t~ret95 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~20 := stopRequestedInDirection_#t~ret95;havoc stopRequestedInDirection_#t~ret95;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~20 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~17; 127448#L1985 timeShift_#t~ret123 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret123;havoc timeShift_#t~ret123; 127449#L2341 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret97, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 128359#L2029 assume !(1 == ~currentHeading~0); 130126#L2039 assume !(0 == ~currentFloorID~0); 130656#L2039-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 130638#L2045-5 havoc __utac_acc__Specification3_spec__2_#t~ret60, __utac_acc__Specification3_spec__2_#t~ret61, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 133249#L793 assume !(-1 == ~expectedDirection~0); 133238#L805 assume !(1 == ~expectedDirection~0); 133218#L806 havoc timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_#t~ret123, timeShift_#t~ret124, timeShift_#t~ret125, timeShift_#t~ret126, timeShift_~tmp~25, timeShift_~tmp___0~12, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~25;havoc timeShift_~tmp___0~12;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_#t~ret54, __utac_acc__Specification3_spec__1_#t~ret55, __utac_acc__Specification3_spec__1_#t~ret56, __utac_acc__Specification3_spec__1_#t~ret57, __utac_acc__Specification3_spec__1_#t~ret58, __utac_acc__Specification3_spec__1_#t~ret59, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 133217#L1420-4 __utac_acc__Specification3_spec__1_#t~ret48 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret48;havoc __utac_acc__Specification3_spec__1_#t~ret48;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~12;havoc getCurrentHeading_~retValue_acc~12;getCurrentHeading_~retValue_acc~12 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~12; 133216#L1472-3 __utac_acc__Specification3_spec__1_#t~ret49 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 133189#L662-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 131948#L724-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~11;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~11; 133186#L1437-17 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~11 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~11; 133164#L1458-17 __utac_acc__Specification3_spec__1_#t~ret55 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret55;havoc __utac_acc__Specification3_spec__1_#t~ret55; 133132#L728-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 133124#L768-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret100, stopRequestedAtCurrentFloor_#t~ret101, stopRequestedAtCurrentFloor_#t~ret102, stopRequestedAtCurrentFloor_#t~ret103, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~23, stopRequestedAtCurrentFloor_~tmp___0~10;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~23;havoc stopRequestedAtCurrentFloor_~tmp___0~10;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret174, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 133121#L2801-25 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 132303#L2828-25 isExecutiveFloorCalling_#t~ret174 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret174;havoc isExecutiveFloorCalling_#t~ret174;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 133107#L2705-3 stopRequestedAtCurrentFloor_#t~ret100 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~23 := stopRequestedAtCurrentFloor_#t~ret100;havoc stopRequestedAtCurrentFloor_#t~ret100; 133100#L2089-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~23;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 133101#L1420-5 stopRequestedAtCurrentFloor_#t~ret101 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~10 := stopRequestedAtCurrentFloor_#t~ret101;havoc stopRequestedAtCurrentFloor_#t~ret101; 133122#L2093-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 133123#L2106-1 timeShift_#t~ret116 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret116;havoc timeShift_#t~ret116; 133193#L2242-1 assume !(0 != timeShift_~tmp___9~3); 133192#L2333-3 assume !(1 == ~doorState~0); 133191#L2333-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret94, stopRequestedInDirection_#t~ret95, stopRequestedInDirection_#t~ret96, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~17, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~8, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~17;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~8;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret174, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 133190#L2801-28 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 132523#L2828-28 isExecutiveFloorCalling_#t~ret174 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret174;havoc isExecutiveFloorCalling_#t~ret174;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 133159#L2705-4 stopRequestedInDirection_#t~ret94 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~8 := stopRequestedInDirection_#t~ret94;havoc stopRequestedInDirection_#t~ret94; 132994#L1972-2 assume 0 != stopRequestedInDirection_~tmp___0~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 132995#L1420-6 stopRequestedInDirection_#t~ret95 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~20 := stopRequestedInDirection_#t~ret95;havoc stopRequestedInDirection_#t~ret95;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~20 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~17; 145391#L1985-2 timeShift_#t~ret123 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret123;havoc timeShift_#t~ret123; 145389#L2341-1 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret97, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 145388#L2029-3 assume !(1 == ~currentHeading~0); 130622#L2039-9 assume !(0 == ~currentFloorID~0); 130623#L2039-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 141271#L2045-11 havoc __utac_acc__Specification3_spec__2_#t~ret60, __utac_acc__Specification3_spec__2_#t~ret61, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 141269#L793-1 assume !(-1 == ~expectedDirection~0); 141266#L805-1 assume !(1 == ~expectedDirection~0); 140928#L806-1 havoc timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_#t~ret123, timeShift_#t~ret124, timeShift_#t~ret125, timeShift_#t~ret126, timeShift_~tmp~25, timeShift_~tmp___0~12, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~25;havoc timeShift_~tmp___0~12;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_#t~ret54, __utac_acc__Specification3_spec__1_#t~ret55, __utac_acc__Specification3_spec__1_#t~ret56, __utac_acc__Specification3_spec__1_#t~ret57, __utac_acc__Specification3_spec__1_#t~ret58, __utac_acc__Specification3_spec__1_#t~ret59, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 140536#L1420-8 __utac_acc__Specification3_spec__1_#t~ret48 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret48;havoc __utac_acc__Specification3_spec__1_#t~ret48;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~12;havoc getCurrentHeading_~retValue_acc~12;getCurrentHeading_~retValue_acc~12 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~12; 140535#L1472-6 __utac_acc__Specification3_spec__1_#t~ret49 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 140534#L662-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 136613#L724-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~11;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~11; 140533#L1437-29 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~11 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~11; 140537#L1458-29 __utac_acc__Specification3_spec__1_#t~ret55 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret55;havoc __utac_acc__Specification3_spec__1_#t~ret55; 140523#L728-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 140514#L768-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret100, stopRequestedAtCurrentFloor_#t~ret101, stopRequestedAtCurrentFloor_#t~ret102, stopRequestedAtCurrentFloor_#t~ret103, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~23, stopRequestedAtCurrentFloor_~tmp___0~10;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~23;havoc stopRequestedAtCurrentFloor_~tmp___0~10;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret174, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 140513#L2801-50 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 131033#L2828-50 isExecutiveFloorCalling_#t~ret174 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret174;havoc isExecutiveFloorCalling_#t~ret174;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 140512#L2705-6 stopRequestedAtCurrentFloor_#t~ret100 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~23 := stopRequestedAtCurrentFloor_#t~ret100;havoc stopRequestedAtCurrentFloor_#t~ret100; 140510#L2089-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~23;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 140511#L1420-9 stopRequestedAtCurrentFloor_#t~ret101 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~10 := stopRequestedAtCurrentFloor_#t~ret101;havoc stopRequestedAtCurrentFloor_#t~ret101; 146498#L2093-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 124733#L2106-2 timeShift_#t~ret116 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret116;havoc timeShift_#t~ret116; 126151#L2242-2 assume !(0 != timeShift_~tmp___9~3); 127590#L2333-6 assume 1 == ~doorState~0;~doorState~0 := 0; 127591#L2333-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret94, stopRequestedInDirection_#t~ret95, stopRequestedInDirection_#t~ret96, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~17, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~8, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~17;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~8;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret174, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 126824#L2801-53 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 126825#L2828-53 isExecutiveFloorCalling_#t~ret174 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret174;havoc isExecutiveFloorCalling_#t~ret174;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 125213#L2705-7 stopRequestedInDirection_#t~ret94 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~8 := stopRequestedInDirection_#t~ret94;havoc stopRequestedInDirection_#t~ret94; 125214#L1972-4 assume 0 != stopRequestedInDirection_~tmp___0~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 129341#L1420-10 stopRequestedInDirection_#t~ret95 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~20 := stopRequestedInDirection_#t~ret95;havoc stopRequestedInDirection_#t~ret95;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~20 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~17; 127063#L1985-4 timeShift_#t~ret123 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret123;havoc timeShift_#t~ret123; 127064#L2341-2 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret97, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 128349#L2029-6 assume !(1 == ~currentHeading~0); 140284#L2039-18 assume !(0 == ~currentFloorID~0); 130604#L2039-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 130594#L2045-17 havoc __utac_acc__Specification3_spec__2_#t~ret60, __utac_acc__Specification3_spec__2_#t~ret61, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 145918#L793-2 assume !(-1 == ~expectedDirection~0); 145915#L805-2 assume !(1 == ~expectedDirection~0); 145913#L806-2 havoc bobCall_#t~ret63, bobCall_~tmp~7;havoc bobCall_~tmp~7;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 145909#L561-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~4 := 4;getOrigin_#res := getOrigin_~retValue_acc~4; 145906#L586-1 bobCall_#t~ret63 := getOrigin_#res;bobCall_~tmp~7 := bobCall_#t~ret63;havoc bobCall_#t~ret63;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~7;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 145905#L3072-1 assume 0 == initPersonOnFloor_~floor; 145883#L3073-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 138184#L3180-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 138133#L2864-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 138114#L2876-5 havoc cleanup_#t~ret69, cleanup_#t~ret70, cleanup_~i~2, cleanup_~tmp~13, cleanup_~tmp___0~4, cleanup_~__cil_tmp4~2;havoc cleanup_~i~2;havoc cleanup_~tmp~13;havoc cleanup_~tmp___0~4;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_#t~ret123, timeShift_#t~ret124, timeShift_#t~ret125, timeShift_#t~ret126, timeShift_~tmp~25, timeShift_~tmp___0~12, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~25;havoc timeShift_~tmp___0~12;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_#t~ret54, __utac_acc__Specification3_spec__1_#t~ret55, __utac_acc__Specification3_spec__1_#t~ret56, __utac_acc__Specification3_spec__1_#t~ret57, __utac_acc__Specification3_spec__1_#t~ret58, __utac_acc__Specification3_spec__1_#t~ret59, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 135818#L1420-12 __utac_acc__Specification3_spec__1_#t~ret48 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret48;havoc __utac_acc__Specification3_spec__1_#t~ret48;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~12;havoc getCurrentHeading_~retValue_acc~12;getCurrentHeading_~retValue_acc~12 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~12; 135817#L1472-9 __utac_acc__Specification3_spec__1_#t~ret49 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 135816#L662-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 134376#L724-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~11;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~11; 135815#L1437-41 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~11 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~11; 136142#L1458-41 __utac_acc__Specification3_spec__1_#t~ret55 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret55;havoc __utac_acc__Specification3_spec__1_#t~ret55; 135801#L728-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 135621#L768-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret100, stopRequestedAtCurrentFloor_#t~ret101, stopRequestedAtCurrentFloor_#t~ret102, stopRequestedAtCurrentFloor_#t~ret103, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~23, stopRequestedAtCurrentFloor_~tmp___0~10;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~23;havoc stopRequestedAtCurrentFloor_~tmp___0~10;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret174, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 135614#L2801-75 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 134642#L2828-75 isExecutiveFloorCalling_#t~ret174 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret174;havoc isExecutiveFloorCalling_#t~ret174;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 135611#L2705-9 stopRequestedAtCurrentFloor_#t~ret100 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~23 := stopRequestedAtCurrentFloor_#t~ret100;havoc stopRequestedAtCurrentFloor_#t~ret100; 135607#L2089-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~23;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 135608#L1420-13 stopRequestedAtCurrentFloor_#t~ret101 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~10 := stopRequestedAtCurrentFloor_#t~ret101;havoc stopRequestedAtCurrentFloor_#t~ret101; 146425#L2093-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 124737#L2106-3 timeShift_#t~ret116 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret116;havoc timeShift_#t~ret116; 126150#L2242-3 assume !(0 != timeShift_~tmp___9~3); 127734#L2333-9 assume !(1 == ~doorState~0); 127735#L2333-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret94, stopRequestedInDirection_#t~ret95, stopRequestedInDirection_#t~ret96, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~17, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~8, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~17;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~8;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret174, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 126689#L2801-78 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 126690#L2828-78 isExecutiveFloorCalling_#t~ret174 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret174;havoc isExecutiveFloorCalling_#t~ret174;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 125176#L2705-10 stopRequestedInDirection_#t~ret94 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~8 := stopRequestedInDirection_#t~ret94;havoc stopRequestedInDirection_#t~ret94; 125177#L1972-6 assume 0 != stopRequestedInDirection_~tmp___0~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 129313#L1420-14 stopRequestedInDirection_#t~ret95 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~20 := stopRequestedInDirection_#t~ret95;havoc stopRequestedInDirection_#t~ret95;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~20 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~17; 145650#L1985-6 timeShift_#t~ret123 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret123;havoc timeShift_#t~ret123; 145645#L2341-3 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret97, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 129771#L2029-9 assume !(1 == ~currentHeading~0); 129772#L2039-27 assume !(0 == ~currentFloorID~0); 130602#L2039-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 124294#L2045-23 havoc __utac_acc__Specification3_spec__2_#t~ret60, __utac_acc__Specification3_spec__2_#t~ret61, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 128953#L793-3 assume !(-1 == ~expectedDirection~0); 129721#L805-3 assume !(1 == ~expectedDirection~0); 153910#L806-3 cleanup_~i~2 := 0; 153909#L969-2 [2020-11-29 19:17:01,616 INFO L796 eck$LassoCheckResult]: Loop: 153909#L969-2 assume !false; 153908#L970 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 153907#L973 assume cleanup_~i~2 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~8;havoc isBlocked_~retValue_acc~8;isBlocked_~retValue_acc~8 := 0;isBlocked_#res := isBlocked_~retValue_acc~8; 153906#L1271 cleanup_#t~ret69 := isBlocked_#res;cleanup_~tmp___0~4 := cleanup_#t~ret69;havoc cleanup_#t~ret69; 153905#L977 assume 1 != cleanup_~tmp___0~4; 153904#L977-1 havoc isIdle_#res;havoc isIdle_#t~ret82, isIdle_~retValue_acc~15, isIdle_~tmp~18;havoc isIdle_~retValue_acc~15;havoc isIdle_~tmp~18;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret77, anyStopRequested_#t~ret78, anyStopRequested_#t~ret79, anyStopRequested_#t~ret80, anyStopRequested_#t~ret81, anyStopRequested_~retValue_acc~14, anyStopRequested_~tmp~17, anyStopRequested_~tmp___0~6, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~2, anyStopRequested_~tmp___3~1;havoc anyStopRequested_~retValue_acc~14;havoc anyStopRequested_~tmp~17;havoc anyStopRequested_~tmp___0~6;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~2;havoc anyStopRequested_~tmp___3~1;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 126920#L2801-100 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 126921#L2828-100 anyStopRequested_#t~ret77 := isFloorCalling_#res;anyStopRequested_~tmp___3~1 := anyStopRequested_#t~ret77;havoc anyStopRequested_#t~ret77; 157197#L1528 assume 0 != anyStopRequested_~tmp___3~1;anyStopRequested_~retValue_acc~14 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~14; 157188#L1592 isIdle_#t~ret82 := anyStopRequested_#res;isIdle_~tmp~18 := isIdle_#t~ret82;havoc isIdle_#t~ret82;isIdle_~retValue_acc~15 := (if 0 == isIdle_~tmp~18 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~15; 129104#L1605 cleanup_#t~ret70 := isIdle_#res;cleanup_~tmp~13 := cleanup_#t~ret70;havoc cleanup_#t~ret70; 128930#L989 assume !(0 != cleanup_~tmp~13);havoc timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_#t~ret123, timeShift_#t~ret124, timeShift_#t~ret125, timeShift_#t~ret126, timeShift_~tmp~25, timeShift_~tmp___0~12, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~25;havoc timeShift_~tmp___0~12;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_#t~ret54, __utac_acc__Specification3_spec__1_#t~ret55, __utac_acc__Specification3_spec__1_#t~ret56, __utac_acc__Specification3_spec__1_#t~ret57, __utac_acc__Specification3_spec__1_#t~ret58, __utac_acc__Specification3_spec__1_#t~ret59, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 128931#L1420-16 __utac_acc__Specification3_spec__1_#t~ret48 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret48;havoc __utac_acc__Specification3_spec__1_#t~ret48;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~12;havoc getCurrentHeading_~retValue_acc~12;getCurrentHeading_~retValue_acc~12 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~12; 125121#L1472-12 __utac_acc__Specification3_spec__1_#t~ret49 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 125122#L662-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 127314#L724-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~11;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~11; 129105#L1437-53 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~11 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~11; 146564#L1458-53 __utac_acc__Specification3_spec__1_#t~ret55 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret55;havoc __utac_acc__Specification3_spec__1_#t~ret55; 146536#L728-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 146529#L768-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret100, stopRequestedAtCurrentFloor_#t~ret101, stopRequestedAtCurrentFloor_#t~ret102, stopRequestedAtCurrentFloor_#t~ret103, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~23, stopRequestedAtCurrentFloor_~tmp___0~10;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~23;havoc stopRequestedAtCurrentFloor_~tmp___0~10;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret174, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 148177#L2801-105 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 143895#L2828-105 isExecutiveFloorCalling_#t~ret174 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret174;havoc isExecutiveFloorCalling_#t~ret174;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 148176#L2705-12 stopRequestedAtCurrentFloor_#t~ret100 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~23 := stopRequestedAtCurrentFloor_#t~ret100;havoc stopRequestedAtCurrentFloor_#t~ret100; 148175#L2089-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~23;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 148170#L1420-17 stopRequestedAtCurrentFloor_#t~ret101 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~10 := stopRequestedAtCurrentFloor_#t~ret101;havoc stopRequestedAtCurrentFloor_#t~ret101; 148152#L2093-4 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 148151#L2106-4 timeShift_#t~ret116 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret116;havoc timeShift_#t~ret116; 148143#L2242-4 assume !(0 != timeShift_~tmp___9~3); 148144#L2333-12 assume 1 == ~doorState~0;~doorState~0 := 0; 152866#L2333-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret94, stopRequestedInDirection_#t~ret95, stopRequestedInDirection_#t~ret96, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~17, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~8, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~17;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~8;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret174, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 152865#L2801-108 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 134055#L2828-108 isExecutiveFloorCalling_#t~ret174 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret174;havoc isExecutiveFloorCalling_#t~ret174;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 152864#L2705-13 stopRequestedInDirection_#t~ret94 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~8 := stopRequestedInDirection_#t~ret94;havoc stopRequestedInDirection_#t~ret94; 152863#L1972-8 assume 0 != stopRequestedInDirection_~tmp___0~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 152861#L1420-18 stopRequestedInDirection_#t~ret95 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~20 := stopRequestedInDirection_#t~ret95;havoc stopRequestedInDirection_#t~ret95;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~20 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~17; 152860#L1985-8 timeShift_#t~ret123 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret123;havoc timeShift_#t~ret123; 145870#L2341-4 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret97, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 129784#L2029-12 assume !(1 == ~currentHeading~0); 129785#L2039-36 assume !(0 == ~currentFloorID~0); 130547#L2039-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 153255#L2045-29 havoc __utac_acc__Specification3_spec__2_#t~ret60, __utac_acc__Specification3_spec__2_#t~ret61, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 153918#L793-4 assume !(-1 == ~expectedDirection~0); 153913#L805-4 assume !(1 == ~expectedDirection~0); 153911#L806-4 cleanup_~i~2 := 1 + cleanup_~i~2; 153909#L969-2 [2020-11-29 19:17:01,617 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-11-29 19:17:01,618 INFO L82 PathProgramCache]: Analyzing trace with hash 1847910068, now seen corresponding path program 1 times [2020-11-29 19:17:01,618 INFO L162 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-11-29 19:17:01,618 INFO L353 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [390267344] [2020-11-29 19:17:01,619 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-11-29 19:17:01,676 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-11-29 19:17:01,808 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-11-29 19:17:01,808 INFO L353 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [390267344] [2020-11-29 19:17:01,809 INFO L219 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-11-29 19:17:01,809 INFO L232 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2020-11-29 19:17:01,809 INFO L155 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [70419769] [2020-11-29 19:17:01,810 INFO L799 eck$LassoCheckResult]: stem already infeasible [2020-11-29 19:17:01,811 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-11-29 19:17:01,811 INFO L82 PathProgramCache]: Analyzing trace with hash -828717216, now seen corresponding path program 1 times [2020-11-29 19:17:01,811 INFO L162 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-11-29 19:17:01,812 INFO L353 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1947291026] [2020-11-29 19:17:01,812 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-11-29 19:17:01,828 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-11-29 19:17:01,862 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-11-29 19:17:01,863 INFO L353 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1947291026] [2020-11-29 19:17:01,863 INFO L219 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-11-29 19:17:01,863 INFO L232 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2020-11-29 19:17:01,864 INFO L155 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [38207263] [2020-11-29 19:17:01,864 INFO L811 eck$LassoCheckResult]: loop already infeasible [2020-11-29 19:17:01,864 INFO L142 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-11-29 19:17:01,865 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2020-11-29 19:17:01,866 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2020-11-29 19:17:01,866 INFO L87 Difference]: Start difference. First operand 32997 states and 62072 transitions. cyclomatic complexity: 29078 Second operand 3 states. [2020-11-29 19:17:02,890 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-11-29 19:17:02,891 INFO L93 Difference]: Finished difference Result 51964 states and 97742 transitions. [2020-11-29 19:17:02,891 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2020-11-29 19:17:02,892 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 51964 states and 97742 transitions. [2020-11-29 19:17:03,447 INFO L131 ngComponentsAnalysis]: Automaton has 3 accepting balls. 12185 [2020-11-29 19:17:03,936 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 51964 states to 51964 states and 97742 transitions. [2020-11-29 19:17:03,937 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 51964 [2020-11-29 19:17:03,997 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 51964 [2020-11-29 19:17:03,997 INFO L73 IsDeterministic]: Start isDeterministic. Operand 51964 states and 97742 transitions. [2020-11-29 19:17:04,096 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2020-11-29 19:17:04,096 INFO L691 BuchiCegarLoop]: Abstraction has 51964 states and 97742 transitions. [2020-11-29 19:17:04,151 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 51964 states and 97742 transitions. [2020-11-29 19:17:05,227 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 51964 to 51260. [2020-11-29 19:17:05,229 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 51260 states. [2020-11-29 19:17:05,428 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 51260 states to 51260 states and 96491 transitions. [2020-11-29 19:17:05,428 INFO L714 BuchiCegarLoop]: Abstraction has 51260 states and 96491 transitions. [2020-11-29 19:17:05,428 INFO L594 BuchiCegarLoop]: Abstraction has 51260 states and 96491 transitions. [2020-11-29 19:17:05,428 INFO L427 BuchiCegarLoop]: ======== Iteration 4============ [2020-11-29 19:17:05,429 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 51260 states and 96491 transitions. [2020-11-29 19:17:05,611 INFO L131 ngComponentsAnalysis]: Automaton has 3 accepting balls. 11851 [2020-11-29 19:17:05,612 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2020-11-29 19:17:05,612 INFO L119 BuchiIsEmpty]: Starting construction of run [2020-11-29 19:17:05,621 INFO L852 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-11-29 19:17:05,621 INFO L853 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-11-29 19:17:05,622 INFO L794 eck$LassoCheckResult]: Stem: 213978#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(2);call write~init~int(48, #t~string4.base, #t~string4.offset, 1);call write~init~int(0, #t~string4.base, 1 + #t~string4.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(31);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(12);call #t~string25.base, #t~string25.offset := #Ultimate.allocOnStack(30);call #t~string26.base, #t~string26.offset := #Ultimate.allocOnStack(9);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(21);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(30);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(9);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(21);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(30);call #t~string35.base, #t~string35.offset := #Ultimate.allocOnStack(9);call #t~string36.base, #t~string36.offset := #Ultimate.allocOnStack(25);call #t~string37.base, #t~string37.offset := #Ultimate.allocOnStack(30);call #t~string38.base, #t~string38.offset := #Ultimate.allocOnStack(9);call #t~string39.base, #t~string39.offset := #Ultimate.allocOnStack(25);call #t~string127.base, #t~string127.offset := #Ultimate.allocOnStack(10);call #t~string129.base, #t~string129.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string129.base, #t~string129.offset, 1);call write~init~int(95, #t~string129.base, 1 + #t~string129.offset, 1);call write~init~int(93, #t~string129.base, 2 + #t~string129.offset, 1);call write~init~int(0, #t~string129.base, 3 + #t~string129.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string131.base, #t~string131.offset, 1);call write~init~int(93, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(32, #t~string131.base, 2 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 3 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string133.base, #t~string133.offset, 1);call write~init~int(97, #t~string133.base, 1 + #t~string133.offset, 1);call write~init~int(116, #t~string133.base, 2 + #t~string133.offset, 1);call write~init~int(32, #t~string133.base, 3 + #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 4 + #t~string133.offset, 1);call #t~string135.base, #t~string135.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string135.base, #t~string135.offset, 1);call write~init~int(105, #t~string135.base, 1 + #t~string135.offset, 1);call write~init~int(0, #t~string135.base, 2 + #t~string135.offset, 1);call #t~string137.base, #t~string137.offset := #Ultimate.allocOnStack(10);call #t~string139.base, #t~string139.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string139.base, #t~string139.offset, 1);call write~init~int(112, #t~string139.base, 1 + #t~string139.offset, 1);call write~init~int(0, #t~string139.base, 2 + #t~string139.offset, 1);call #t~string141.base, #t~string141.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string141.base, #t~string141.offset, 1);call write~init~int(111, #t~string141.base, 1 + #t~string141.offset, 1);call write~init~int(119, #t~string141.base, 2 + #t~string141.offset, 1);call write~init~int(110, #t~string141.base, 3 + #t~string141.offset, 1);call write~init~int(0, #t~string141.base, 4 + #t~string141.offset, 1);call #t~string143.base, #t~string143.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string143.base, #t~string143.offset, 1);call write~init~int(73, #t~string143.base, 1 + #t~string143.offset, 1);call write~init~int(76, #t~string143.base, 2 + #t~string143.offset, 1);call write~init~int(95, #t~string143.base, 3 + #t~string143.offset, 1);call write~init~int(112, #t~string143.base, 4 + #t~string143.offset, 1);call write~init~int(58, #t~string143.base, 5 + #t~string143.offset, 1);call write~init~int(0, #t~string143.base, 6 + #t~string143.offset, 1);call #t~string145.base, #t~string145.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string145.base, #t~string145.offset, 1);call write~init~int(37, #t~string145.base, 1 + #t~string145.offset, 1);call write~init~int(105, #t~string145.base, 2 + #t~string145.offset, 1);call write~init~int(0, #t~string145.base, 3 + #t~string145.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string147.base, #t~string147.offset, 1);call write~init~int(37, #t~string147.base, 1 + #t~string147.offset, 1);call write~init~int(105, #t~string147.base, 2 + #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 3 + #t~string147.offset, 1);call #t~string149.base, #t~string149.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string149.base, #t~string149.offset, 1);call write~init~int(37, #t~string149.base, 1 + #t~string149.offset, 1);call write~init~int(105, #t~string149.base, 2 + #t~string149.offset, 1);call write~init~int(0, #t~string149.base, 3 + #t~string149.offset, 1);call #t~string151.base, #t~string151.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string151.base, #t~string151.offset, 1);call write~init~int(37, #t~string151.base, 1 + #t~string151.offset, 1);call write~init~int(105, #t~string151.base, 2 + #t~string151.offset, 1);call write~init~int(0, #t~string151.base, 3 + #t~string151.offset, 1);call #t~string153.base, #t~string153.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string153.base, #t~string153.offset, 1);call write~init~int(37, #t~string153.base, 1 + #t~string153.offset, 1);call write~init~int(105, #t~string153.base, 2 + #t~string153.offset, 1);call write~init~int(0, #t~string153.base, 3 + #t~string153.offset, 1);call #t~string155.base, #t~string155.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string155.base, #t~string155.offset, 1);call write~init~int(70, #t~string155.base, 1 + #t~string155.offset, 1);call write~init~int(95, #t~string155.base, 2 + #t~string155.offset, 1);call write~init~int(112, #t~string155.base, 3 + #t~string155.offset, 1);call write~init~int(58, #t~string155.base, 4 + #t~string155.offset, 1);call write~init~int(0, #t~string155.base, 5 + #t~string155.offset, 1);call #t~string158.base, #t~string158.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string158.base, #t~string158.offset, 1);call write~init~int(37, #t~string158.base, 1 + #t~string158.offset, 1);call write~init~int(105, #t~string158.base, 2 + #t~string158.offset, 1);call write~init~int(0, #t~string158.base, 3 + #t~string158.offset, 1);call #t~string161.base, #t~string161.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string161.base, #t~string161.offset, 1);call write~init~int(37, #t~string161.base, 1 + #t~string161.offset, 1);call write~init~int(105, #t~string161.base, 2 + #t~string161.offset, 1);call write~init~int(0, #t~string161.base, 3 + #t~string161.offset, 1);call #t~string164.base, #t~string164.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string164.base, #t~string164.offset, 1);call write~init~int(37, #t~string164.base, 1 + #t~string164.offset, 1);call write~init~int(105, #t~string164.base, 2 + #t~string164.offset, 1);call write~init~int(0, #t~string164.base, 3 + #t~string164.offset, 1);call #t~string167.base, #t~string167.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string167.base, #t~string167.offset, 1);call write~init~int(37, #t~string167.base, 1 + #t~string167.offset, 1);call write~init~int(105, #t~string167.base, 2 + #t~string167.offset, 1);call write~init~int(0, #t~string167.base, 3 + #t~string167.offset, 1);call #t~string170.base, #t~string170.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string170.base, #t~string170.offset, 1);call write~init~int(37, #t~string170.base, 1 + #t~string170.offset, 1);call write~init~int(105, #t~string170.base, 2 + #t~string170.offset, 1);call write~init~int(0, #t~string170.base, 3 + #t~string170.offset, 1);call #t~string172.base, #t~string172.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string172.base, #t~string172.offset, 1);call write~init~int(0, #t~string172.base, 1 + #t~string172.offset, 1);~head~0.base, ~head~0.offset := 0, 0;~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~expectedDirection~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 213979#L-1 havoc main_#res;havoc main_#t~ret75, main_~retValue_acc~7, main_~tmp~15;havoc main_~retValue_acc~7;havoc main_~tmp~15; 213294#L3402 havoc valid_product_#res;havoc valid_product_~retValue_acc~29;havoc valid_product_~retValue_acc~29;valid_product_~retValue_acc~29 := 1;valid_product_#res := valid_product_~retValue_acc~29; 210158#L3410 main_#t~ret75 := valid_product_#res;main_~tmp~15 := main_#t~ret75;havoc main_#t~ret75; 210159#L1164 assume 0 != main_~tmp~15; 211178#L1137 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 210104#L2794 havoc bobCall_#t~ret63, bobCall_~tmp~7;havoc bobCall_~tmp~7;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 210105#L561 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~4 := 4;getOrigin_#res := getOrigin_~retValue_acc~4; 211961#L586 bobCall_#t~ret63 := getOrigin_#res;bobCall_~tmp~7 := bobCall_#t~ret63;havoc bobCall_#t~ret63;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~7;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 211557#L3072 assume 0 == initPersonOnFloor_~floor; 211070#L3073 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 209558#L3180-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 212364#L2864 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 211976#L2876-2 havoc timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_#t~ret123, timeShift_#t~ret124, timeShift_#t~ret125, timeShift_#t~ret126, timeShift_~tmp~25, timeShift_~tmp___0~12, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~25;havoc timeShift_~tmp___0~12;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_#t~ret54, __utac_acc__Specification3_spec__1_#t~ret55, __utac_acc__Specification3_spec__1_#t~ret56, __utac_acc__Specification3_spec__1_#t~ret57, __utac_acc__Specification3_spec__1_#t~ret58, __utac_acc__Specification3_spec__1_#t~ret59, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 213118#L1420 __utac_acc__Specification3_spec__1_#t~ret48 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret48;havoc __utac_acc__Specification3_spec__1_#t~ret48;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~12;havoc getCurrentHeading_~retValue_acc~12;getCurrentHeading_~retValue_acc~12 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~12; 210202#L1472 __utac_acc__Specification3_spec__1_#t~ret49 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 210203#L662 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 212336#L724 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 213781#L734 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 212842#L745 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 212323#L756 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 210010#L767 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 209680#L768 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret100, stopRequestedAtCurrentFloor_#t~ret101, stopRequestedAtCurrentFloor_#t~ret102, stopRequestedAtCurrentFloor_#t~ret103, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~23, stopRequestedAtCurrentFloor_~tmp___0~10;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~23;havoc stopRequestedAtCurrentFloor_~tmp___0~10;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret174, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 219079#L2801 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 215688#L2828 isExecutiveFloorCalling_#t~ret174 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret174;havoc isExecutiveFloorCalling_#t~ret174;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 210225#L2705 stopRequestedAtCurrentFloor_#t~ret100 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~23 := stopRequestedAtCurrentFloor_#t~ret100;havoc stopRequestedAtCurrentFloor_#t~ret100; 210226#L2089 assume 0 != stopRequestedAtCurrentFloor_~tmp~23;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 219527#L1420-1 stopRequestedAtCurrentFloor_#t~ret101 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~10 := stopRequestedAtCurrentFloor_#t~ret101;havoc stopRequestedAtCurrentFloor_#t~ret101; 219526#L2093 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 219524#L2106 timeShift_#t~ret116 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret116;havoc timeShift_#t~ret116; 219522#L2242 assume !(0 != timeShift_~tmp___9~3); 219521#L2333 assume !(1 == ~doorState~0); 219519#L2333-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret94, stopRequestedInDirection_#t~ret95, stopRequestedInDirection_#t~ret96, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~17, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~8, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~17;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~8;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret174, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 219518#L2801-3 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 219060#L2828-3 isExecutiveFloorCalling_#t~ret174 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret174;havoc isExecutiveFloorCalling_#t~ret174;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 219517#L2705-1 stopRequestedInDirection_#t~ret94 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~8 := stopRequestedInDirection_#t~ret94;havoc stopRequestedInDirection_#t~ret94; 219515#L1972 assume 0 != stopRequestedInDirection_~tmp___0~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 219491#L1420-2 stopRequestedInDirection_#t~ret95 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~20 := stopRequestedInDirection_#t~ret95;havoc stopRequestedInDirection_#t~ret95;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~20 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~17; 219490#L1985 timeShift_#t~ret123 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret123;havoc timeShift_#t~ret123; 219488#L2341 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret97, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 219489#L2029 assume !(1 == ~currentHeading~0); 215660#L2039 assume !(0 == ~currentFloorID~0); 215661#L2039-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 218803#L2045-5 havoc __utac_acc__Specification3_spec__2_#t~ret60, __utac_acc__Specification3_spec__2_#t~ret61, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 228367#L793 assume !(-1 == ~expectedDirection~0); 228364#L805 assume !(1 == ~expectedDirection~0); 225764#L806 havoc timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_#t~ret123, timeShift_#t~ret124, timeShift_#t~ret125, timeShift_#t~ret126, timeShift_~tmp~25, timeShift_~tmp___0~12, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~25;havoc timeShift_~tmp___0~12;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_#t~ret54, __utac_acc__Specification3_spec__1_#t~ret55, __utac_acc__Specification3_spec__1_#t~ret56, __utac_acc__Specification3_spec__1_#t~ret57, __utac_acc__Specification3_spec__1_#t~ret58, __utac_acc__Specification3_spec__1_#t~ret59, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 225763#L1420-4 __utac_acc__Specification3_spec__1_#t~ret48 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret48;havoc __utac_acc__Specification3_spec__1_#t~ret48;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~12;havoc getCurrentHeading_~retValue_acc~12;getCurrentHeading_~retValue_acc~12 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~12; 225762#L1472-3 __utac_acc__Specification3_spec__1_#t~ret49 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 225761#L662-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 216706#L724-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 225747#L734-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 225741#L745-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 225745#L756-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 225739#L767-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 225743#L768-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret100, stopRequestedAtCurrentFloor_#t~ret101, stopRequestedAtCurrentFloor_#t~ret102, stopRequestedAtCurrentFloor_#t~ret103, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~23, stopRequestedAtCurrentFloor_~tmp___0~10;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~23;havoc stopRequestedAtCurrentFloor_~tmp___0~10;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret174, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 225922#L2801-25 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 218421#L2828-25 isExecutiveFloorCalling_#t~ret174 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret174;havoc isExecutiveFloorCalling_#t~ret174;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 225921#L2705-3 stopRequestedAtCurrentFloor_#t~ret100 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~23 := stopRequestedAtCurrentFloor_#t~ret100;havoc stopRequestedAtCurrentFloor_#t~ret100; 225920#L2089-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~23;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 215703#L1420-5 stopRequestedAtCurrentFloor_#t~ret101 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~10 := stopRequestedAtCurrentFloor_#t~ret101;havoc stopRequestedAtCurrentFloor_#t~ret101; 215704#L2093-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 209710#L2106-1 timeShift_#t~ret116 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret116;havoc timeShift_#t~ret116; 228337#L2242-1 assume !(0 != timeShift_~tmp___9~3); 228332#L2333-3 assume !(1 == ~doorState~0); 228331#L2333-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret94, stopRequestedInDirection_#t~ret95, stopRequestedInDirection_#t~ret96, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~17, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~8, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~17;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~8;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret174, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 228325#L2801-28 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 217936#L2828-28 isExecutiveFloorCalling_#t~ret174 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret174;havoc isExecutiveFloorCalling_#t~ret174;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 228243#L2705-4 stopRequestedInDirection_#t~ret94 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~8 := stopRequestedInDirection_#t~ret94;havoc stopRequestedInDirection_#t~ret94; 228242#L1972-2 assume 0 != stopRequestedInDirection_~tmp___0~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 228233#L1420-6 stopRequestedInDirection_#t~ret95 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~20 := stopRequestedInDirection_#t~ret95;havoc stopRequestedInDirection_#t~ret95;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~20 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~17; 228168#L1985-2 timeShift_#t~ret123 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret123;havoc timeShift_#t~ret123; 228166#L2341-1 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret97, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 228167#L2029-3 assume !(1 == ~currentHeading~0); 215794#L2039-9 assume !(0 == ~currentFloorID~0); 215772#L2039-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 224295#L2045-11 havoc __utac_acc__Specification3_spec__2_#t~ret60, __utac_acc__Specification3_spec__2_#t~ret61, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 224293#L793-1 assume !(-1 == ~expectedDirection~0); 224291#L805-1 assume !(1 == ~expectedDirection~0); 224287#L806-1 havoc timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_#t~ret123, timeShift_#t~ret124, timeShift_#t~ret125, timeShift_#t~ret126, timeShift_~tmp~25, timeShift_~tmp___0~12, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~25;havoc timeShift_~tmp___0~12;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_#t~ret54, __utac_acc__Specification3_spec__1_#t~ret55, __utac_acc__Specification3_spec__1_#t~ret56, __utac_acc__Specification3_spec__1_#t~ret57, __utac_acc__Specification3_spec__1_#t~ret58, __utac_acc__Specification3_spec__1_#t~ret59, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 224286#L1420-8 __utac_acc__Specification3_spec__1_#t~ret48 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret48;havoc __utac_acc__Specification3_spec__1_#t~ret48;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~12;havoc getCurrentHeading_~retValue_acc~12;getCurrentHeading_~retValue_acc~12 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~12; 224285#L1472-6 __utac_acc__Specification3_spec__1_#t~ret49 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 224284#L662-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 216021#L724-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 224253#L734-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 224247#L745-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 224251#L756-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 224245#L767-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 224249#L768-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret100, stopRequestedAtCurrentFloor_#t~ret101, stopRequestedAtCurrentFloor_#t~ret102, stopRequestedAtCurrentFloor_#t~ret103, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~23, stopRequestedAtCurrentFloor_~tmp___0~10;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~23;havoc stopRequestedAtCurrentFloor_~tmp___0~10;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret174, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 229296#L2801-50 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 228670#L2828-50 isExecutiveFloorCalling_#t~ret174 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret174;havoc isExecutiveFloorCalling_#t~ret174;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 229295#L2705-6 stopRequestedAtCurrentFloor_#t~ret100 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~23 := stopRequestedAtCurrentFloor_#t~ret100;havoc stopRequestedAtCurrentFloor_#t~ret100; 229293#L2089-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~23;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 229294#L1420-9 stopRequestedAtCurrentFloor_#t~ret101 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~10 := stopRequestedAtCurrentFloor_#t~ret101;havoc stopRequestedAtCurrentFloor_#t~ret101; 231938#L2093-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 229493#L2106-2 timeShift_#t~ret116 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret116;havoc timeShift_#t~ret116; 229491#L2242-2 assume !(0 != timeShift_~tmp___9~3); 229490#L2333-6 assume 1 == ~doorState~0;~doorState~0 := 0; 229489#L2333-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret94, stopRequestedInDirection_#t~ret95, stopRequestedInDirection_#t~ret96, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~17, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~8, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~17;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~8;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret174, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 229488#L2801-53 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 229381#L2828-53 isExecutiveFloorCalling_#t~ret174 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret174;havoc isExecutiveFloorCalling_#t~ret174;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 229487#L2705-7 stopRequestedInDirection_#t~ret94 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~8 := stopRequestedInDirection_#t~ret94;havoc stopRequestedInDirection_#t~ret94; 229486#L1972-4 assume 0 != stopRequestedInDirection_~tmp___0~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 229427#L1420-10 stopRequestedInDirection_#t~ret95 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~20 := stopRequestedInDirection_#t~ret95;havoc stopRequestedInDirection_#t~ret95;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~20 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~17; 229426#L1985-4 timeShift_#t~ret123 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret123;havoc timeShift_#t~ret123; 228593#L2341-2 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret97, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 228594#L2029-6 assume !(1 == ~currentHeading~0); 222569#L2039-18 assume !(0 == ~currentFloorID~0); 222509#L2039-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 222500#L2045-17 havoc __utac_acc__Specification3_spec__2_#t~ret60, __utac_acc__Specification3_spec__2_#t~ret61, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 233021#L793-2 assume !(-1 == ~expectedDirection~0); 233022#L805-2 assume !(1 == ~expectedDirection~0); 257452#L806-2 havoc bobCall_#t~ret63, bobCall_~tmp~7;havoc bobCall_~tmp~7;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 257448#L561-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~4 := 4;getOrigin_#res := getOrigin_~retValue_acc~4; 257445#L586-1 bobCall_#t~ret63 := getOrigin_#res;bobCall_~tmp~7 := bobCall_#t~ret63;havoc bobCall_#t~ret63;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~7;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 257444#L3072-1 assume 0 == initPersonOnFloor_~floor; 257422#L3073-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 257410#L3180-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 257408#L2864-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 245235#L2876-5 havoc cleanup_#t~ret69, cleanup_#t~ret70, cleanup_~i~2, cleanup_~tmp~13, cleanup_~tmp___0~4, cleanup_~__cil_tmp4~2;havoc cleanup_~i~2;havoc cleanup_~tmp~13;havoc cleanup_~tmp___0~4;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_#t~ret123, timeShift_#t~ret124, timeShift_#t~ret125, timeShift_#t~ret126, timeShift_~tmp~25, timeShift_~tmp___0~12, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~25;havoc timeShift_~tmp___0~12;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_#t~ret54, __utac_acc__Specification3_spec__1_#t~ret55, __utac_acc__Specification3_spec__1_#t~ret56, __utac_acc__Specification3_spec__1_#t~ret57, __utac_acc__Specification3_spec__1_#t~ret58, __utac_acc__Specification3_spec__1_#t~ret59, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 245234#L1420-12 __utac_acc__Specification3_spec__1_#t~ret48 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret48;havoc __utac_acc__Specification3_spec__1_#t~ret48;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~12;havoc getCurrentHeading_~retValue_acc~12;getCurrentHeading_~retValue_acc~12 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~12; 245233#L1472-9 __utac_acc__Specification3_spec__1_#t~ret49 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 245232#L662-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 216051#L724-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 213767#L734-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 212853#L745-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 212300#L756-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 210222#L767-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 209677#L768-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret100, stopRequestedAtCurrentFloor_#t~ret101, stopRequestedAtCurrentFloor_#t~ret102, stopRequestedAtCurrentFloor_#t~ret103, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~23, stopRequestedAtCurrentFloor_~tmp___0~10;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~23;havoc stopRequestedAtCurrentFloor_~tmp___0~10;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret174, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 248905#L2801-75 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 235026#L2828-75 isExecutiveFloorCalling_#t~ret174 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret174;havoc isExecutiveFloorCalling_#t~ret174;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 248900#L2705-9 stopRequestedAtCurrentFloor_#t~ret100 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~23 := stopRequestedAtCurrentFloor_#t~ret100;havoc stopRequestedAtCurrentFloor_#t~ret100; 248897#L2089-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~23;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 248893#L1420-13 stopRequestedAtCurrentFloor_#t~ret101 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~10 := stopRequestedAtCurrentFloor_#t~ret101;havoc stopRequestedAtCurrentFloor_#t~ret101; 248882#L2093-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 248880#L2106-3 timeShift_#t~ret116 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret116;havoc timeShift_#t~ret116; 248878#L2242-3 assume !(0 != timeShift_~tmp___9~3); 248877#L2333-9 assume !(1 == ~doorState~0); 248876#L2333-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret94, stopRequestedInDirection_#t~ret95, stopRequestedInDirection_#t~ret96, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~17, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~8, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~17;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~8;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret174, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 248875#L2801-78 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 242709#L2828-78 isExecutiveFloorCalling_#t~ret174 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret174;havoc isExecutiveFloorCalling_#t~ret174;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 248842#L2705-10 stopRequestedInDirection_#t~ret94 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~8 := stopRequestedInDirection_#t~ret94;havoc stopRequestedInDirection_#t~ret94; 248841#L1972-6 assume 0 != stopRequestedInDirection_~tmp___0~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 245604#L1420-14 stopRequestedInDirection_#t~ret95 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~20 := stopRequestedInDirection_#t~ret95;havoc stopRequestedInDirection_#t~ret95;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~20 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~17; 245602#L1985-6 timeShift_#t~ret123 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret123;havoc timeShift_#t~ret123; 245598#L2341-3 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret97, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 245597#L2029-9 assume !(1 == ~currentHeading~0); 215793#L2039-27 assume !(0 == ~currentFloorID~0); 215762#L2039-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 237780#L2045-23 havoc __utac_acc__Specification3_spec__2_#t~ret60, __utac_acc__Specification3_spec__2_#t~ret61, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 245580#L793-3 assume !(-1 == ~expectedDirection~0); 245581#L805-3 assume !(1 == ~expectedDirection~0); 245570#L806-3 cleanup_~i~2 := 0; 245569#L969-2 [2020-11-29 19:17:05,623 INFO L796 eck$LassoCheckResult]: Loop: 245569#L969-2 assume !false; 245564#L970 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 245562#L973 assume cleanup_~i~2 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~8;havoc isBlocked_~retValue_acc~8;isBlocked_~retValue_acc~8 := 0;isBlocked_#res := isBlocked_~retValue_acc~8; 245561#L1271 cleanup_#t~ret69 := isBlocked_#res;cleanup_~tmp___0~4 := cleanup_#t~ret69;havoc cleanup_#t~ret69; 245560#L977 assume 1 != cleanup_~tmp___0~4; 245559#L977-1 havoc isIdle_#res;havoc isIdle_#t~ret82, isIdle_~retValue_acc~15, isIdle_~tmp~18;havoc isIdle_~retValue_acc~15;havoc isIdle_~tmp~18;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret77, anyStopRequested_#t~ret78, anyStopRequested_#t~ret79, anyStopRequested_#t~ret80, anyStopRequested_#t~ret81, anyStopRequested_~retValue_acc~14, anyStopRequested_~tmp~17, anyStopRequested_~tmp___0~6, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~2, anyStopRequested_~tmp___3~1;havoc anyStopRequested_~retValue_acc~14;havoc anyStopRequested_~tmp~17;havoc anyStopRequested_~tmp___0~6;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~2;havoc anyStopRequested_~tmp___3~1;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 245558#L2801-100 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 245557#L2828-100 anyStopRequested_#t~ret77 := isFloorCalling_#res;anyStopRequested_~tmp___3~1 := anyStopRequested_#t~ret77;havoc anyStopRequested_#t~ret77; 245547#L1528 assume 0 != anyStopRequested_~tmp___3~1;anyStopRequested_~retValue_acc~14 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~14; 245538#L1592 isIdle_#t~ret82 := anyStopRequested_#res;isIdle_~tmp~18 := isIdle_#t~ret82;havoc isIdle_#t~ret82;isIdle_~retValue_acc~15 := (if 0 == isIdle_~tmp~18 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~15; 245537#L1605 cleanup_#t~ret70 := isIdle_#res;cleanup_~tmp~13 := cleanup_#t~ret70;havoc cleanup_#t~ret70; 245536#L989 assume !(0 != cleanup_~tmp~13);havoc timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_#t~ret123, timeShift_#t~ret124, timeShift_#t~ret125, timeShift_#t~ret126, timeShift_~tmp~25, timeShift_~tmp___0~12, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~25;havoc timeShift_~tmp___0~12;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_#t~ret54, __utac_acc__Specification3_spec__1_#t~ret55, __utac_acc__Specification3_spec__1_#t~ret56, __utac_acc__Specification3_spec__1_#t~ret57, __utac_acc__Specification3_spec__1_#t~ret58, __utac_acc__Specification3_spec__1_#t~ret59, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 245535#L1420-16 __utac_acc__Specification3_spec__1_#t~ret48 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret48;havoc __utac_acc__Specification3_spec__1_#t~ret48;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~12;havoc getCurrentHeading_~retValue_acc~12;getCurrentHeading_~retValue_acc~12 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~12; 245534#L1472-12 __utac_acc__Specification3_spec__1_#t~ret49 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 245533#L662-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 237661#L724-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 245508#L734-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 245503#L745-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 245506#L756-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 245509#L767-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 245468#L768-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret100, stopRequestedAtCurrentFloor_#t~ret101, stopRequestedAtCurrentFloor_#t~ret102, stopRequestedAtCurrentFloor_#t~ret103, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~23, stopRequestedAtCurrentFloor_~tmp___0~10;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~23;havoc stopRequestedAtCurrentFloor_~tmp___0~10;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret174, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 245467#L2801-105 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 241655#L2828-105 isExecutiveFloorCalling_#t~ret174 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret174;havoc isExecutiveFloorCalling_#t~ret174;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 245461#L2705-12 stopRequestedAtCurrentFloor_#t~ret100 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~23 := stopRequestedAtCurrentFloor_#t~ret100;havoc stopRequestedAtCurrentFloor_#t~ret100; 245458#L2089-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~23;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 245457#L1420-17 stopRequestedAtCurrentFloor_#t~ret101 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~10 := stopRequestedAtCurrentFloor_#t~ret101;havoc stopRequestedAtCurrentFloor_#t~ret101; 245447#L2093-4 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 209702#L2106-4 timeShift_#t~ret116 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret116;havoc timeShift_#t~ret116; 249327#L2242-4 assume !(0 != timeShift_~tmp___9~3); 249328#L2333-12 assume 1 == ~doorState~0;~doorState~0 := 0; 249891#L2333-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret94, stopRequestedInDirection_#t~ret95, stopRequestedInDirection_#t~ret96, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~17, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~8, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~17;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~8;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret174, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 249889#L2801-108 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 238405#L2828-108 isExecutiveFloorCalling_#t~ret174 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret174;havoc isExecutiveFloorCalling_#t~ret174;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 249886#L2705-13 stopRequestedInDirection_#t~ret94 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~8 := stopRequestedInDirection_#t~ret94;havoc stopRequestedInDirection_#t~ret94; 249883#L1972-8 assume 0 != stopRequestedInDirection_~tmp___0~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 249837#L1420-18 stopRequestedInDirection_#t~ret95 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~20 := stopRequestedInDirection_#t~ret95;havoc stopRequestedInDirection_#t~ret95;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~20 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~17; 249836#L1985-8 timeShift_#t~ret123 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret123;havoc timeShift_#t~ret123; 249834#L2341-4 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret97, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 249835#L2029-12 assume !(1 == ~currentHeading~0); 239681#L2039-36 assume !(0 == ~currentFloorID~0); 215749#L2039-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 237777#L2045-29 havoc __utac_acc__Specification3_spec__2_#t~ret60, __utac_acc__Specification3_spec__2_#t~ret61, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 245576#L793-4 assume !(-1 == ~expectedDirection~0); 245577#L805-4 assume !(1 == ~expectedDirection~0); 245571#L806-4 cleanup_~i~2 := 1 + cleanup_~i~2; 245569#L969-2 [2020-11-29 19:17:05,624 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-11-29 19:17:05,625 INFO L82 PathProgramCache]: Analyzing trace with hash 411275747, now seen corresponding path program 1 times [2020-11-29 19:17:05,625 INFO L162 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-11-29 19:17:05,626 INFO L353 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1902143306] [2020-11-29 19:17:05,626 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-11-29 19:17:05,662 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-11-29 19:17:05,991 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-11-29 19:17:05,992 INFO L353 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1902143306] [2020-11-29 19:17:05,992 INFO L219 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-11-29 19:17:05,992 INFO L232 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2020-11-29 19:17:05,993 INFO L155 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1974694853] [2020-11-29 19:17:05,993 INFO L799 eck$LassoCheckResult]: stem already infeasible [2020-11-29 19:17:05,994 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-11-29 19:17:05,994 INFO L82 PathProgramCache]: Analyzing trace with hash -654122214, now seen corresponding path program 1 times [2020-11-29 19:17:05,994 INFO L162 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-11-29 19:17:05,995 INFO L353 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1937871224] [2020-11-29 19:17:05,995 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-11-29 19:17:06,020 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-11-29 19:17:06,756 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-11-29 19:17:06,756 INFO L353 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1937871224] [2020-11-29 19:17:06,757 INFO L219 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-11-29 19:17:06,758 INFO L232 FreeRefinementEngine]: Number of different interpolants: perfect sequences [18] imperfect sequences [] total 18 [2020-11-29 19:17:06,758 INFO L155 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [97920957] [2020-11-29 19:17:06,758 INFO L811 eck$LassoCheckResult]: loop already infeasible [2020-11-29 19:17:06,759 INFO L142 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-11-29 19:17:06,760 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 18 interpolants. [2020-11-29 19:17:06,761 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=38, Invalid=268, Unknown=0, NotChecked=0, Total=306 [2020-11-29 19:17:06,761 INFO L87 Difference]: Start difference. First operand 51260 states and 96491 transitions. cyclomatic complexity: 45234 Second operand 18 states. [2020-11-29 19:17:09,315 WARN L193 SmtUtils]: Spent 158.00 ms on a formula simplification. DAG size of input: 34 DAG size of output: 29 [2020-11-29 19:17:09,574 WARN L193 SmtUtils]: Spent 174.00 ms on a formula simplification. DAG size of input: 39 DAG size of output: 31 [2020-11-29 19:17:10,027 WARN L193 SmtUtils]: Spent 187.00 ms on a formula simplification. DAG size of input: 42 DAG size of output: 35 [2020-11-29 19:17:11,178 WARN L193 SmtUtils]: Spent 157.00 ms on a formula simplification. DAG size of input: 38 DAG size of output: 33 [2020-11-29 19:17:12,117 WARN L193 SmtUtils]: Spent 228.00 ms on a formula simplification. DAG size of input: 41 DAG size of output: 33 [2020-11-29 19:17:12,567 WARN L193 SmtUtils]: Spent 144.00 ms on a formula simplification. DAG size of input: 36 DAG size of output: 31 [2020-11-29 19:17:12,953 WARN L193 SmtUtils]: Spent 117.00 ms on a formula simplification. DAG size of input: 31 DAG size of output: 27 [2020-11-29 19:17:13,383 WARN L193 SmtUtils]: Spent 112.00 ms on a formula simplification. DAG size of input: 26 DAG size of output: 22 [2020-11-29 19:17:13,804 WARN L193 SmtUtils]: Spent 209.00 ms on a formula simplification. DAG size of input: 44 DAG size of output: 37 [2020-11-29 19:17:14,455 WARN L193 SmtUtils]: Spent 188.00 ms on a formula simplification. DAG size of input: 40 DAG size of output: 35 [2020-11-29 19:17:15,199 WARN L193 SmtUtils]: Spent 124.00 ms on a formula simplification. DAG size of input: 29 DAG size of output: 25 [2020-11-29 19:17:15,810 WARN L193 SmtUtils]: Spent 141.00 ms on a formula simplification. DAG size of input: 26 DAG size of output: 22 [2020-11-29 19:17:15,954 WARN L193 SmtUtils]: Spent 102.00 ms on a formula simplification. DAG size of input: 31 DAG size of output: 26 [2020-11-29 19:17:16,095 WARN L193 SmtUtils]: Spent 114.00 ms on a formula simplification. DAG size of input: 33 DAG size of output: 29 [2020-11-29 19:17:17,349 WARN L193 SmtUtils]: Spent 111.00 ms on a formula simplification. DAG size of input: 28 DAG size of output: 24 [2020-11-29 19:17:17,902 WARN L193 SmtUtils]: Spent 137.00 ms on a formula simplification. DAG size of input: 35 DAG size of output: 30 [2020-11-29 19:17:18,198 WARN L193 SmtUtils]: Spent 107.00 ms on a formula simplification. DAG size of input: 28 DAG size of output: 24 [2020-11-29 19:17:20,073 WARN L193 SmtUtils]: Spent 131.00 ms on a formula simplification. DAG size of input: 31 DAG size of output: 27 [2020-11-29 19:17:20,749 WARN L193 SmtUtils]: Spent 109.00 ms on a formula simplification. DAG size of input: 28 DAG size of output: 24 [2020-11-29 19:17:24,583 WARN L193 SmtUtils]: Spent 109.00 ms on a formula simplification. DAG size of input: 29 DAG size of output: 22 [2020-11-29 19:17:25,071 WARN L193 SmtUtils]: Spent 136.00 ms on a formula simplification. DAG size of input: 36 DAG size of output: 28 [2020-11-29 19:17:34,138 WARN L193 SmtUtils]: Spent 240.00 ms on a formula simplification. DAG size of input: 35 DAG size of output: 26 [2020-11-29 19:17:34,872 WARN L193 SmtUtils]: Spent 207.00 ms on a formula simplification. DAG size of input: 38 DAG size of output: 30 [2020-11-29 19:17:35,430 WARN L193 SmtUtils]: Spent 127.00 ms on a formula simplification. DAG size of input: 30 DAG size of output: 24 [2020-11-29 19:17:36,975 WARN L193 SmtUtils]: Spent 177.00 ms on a formula simplification. DAG size of input: 34 DAG size of output: 28 [2020-11-29 19:17:39,204 WARN L193 SmtUtils]: Spent 176.00 ms on a formula simplification. DAG size of input: 32 DAG size of output: 26 [2020-11-29 19:17:39,912 WARN L193 SmtUtils]: Spent 206.00 ms on a formula simplification. DAG size of input: 39 DAG size of output: 32 [2020-11-29 19:17:55,589 WARN L193 SmtUtils]: Spent 118.00 ms on a formula simplification. DAG size of input: 28 DAG size of output: 24 [2020-11-29 19:17:56,366 WARN L193 SmtUtils]: Spent 178.00 ms on a formula simplification. DAG size of input: 30 DAG size of output: 26 [2020-11-29 19:17:56,968 WARN L193 SmtUtils]: Spent 142.00 ms on a formula simplification. DAG size of input: 31 DAG size of output: 27 [2020-11-29 19:17:57,289 WARN L193 SmtUtils]: Spent 120.00 ms on a formula simplification that was a NOOP. DAG size: 17 [2020-11-29 19:17:58,060 WARN L193 SmtUtils]: Spent 185.00 ms on a formula simplification. DAG size of input: 33 DAG size of output: 29 [2020-11-29 19:18:00,301 WARN L193 SmtUtils]: Spent 120.00 ms on a formula simplification. DAG size of input: 28 DAG size of output: 24 [2020-11-29 19:18:01,228 WARN L193 SmtUtils]: Spent 143.00 ms on a formula simplification. DAG size of input: 30 DAG size of output: 26 [2020-11-29 19:18:01,689 WARN L193 SmtUtils]: Spent 223.00 ms on a formula simplification. DAG size of input: 30 DAG size of output: 26 [2020-11-29 19:18:02,480 WARN L193 SmtUtils]: Spent 142.00 ms on a formula simplification. DAG size of input: 32 DAG size of output: 28 [2020-11-29 19:18:03,188 WARN L193 SmtUtils]: Spent 149.00 ms on a formula simplification. DAG size of input: 33 DAG size of output: 29 [2020-11-29 19:18:03,818 WARN L193 SmtUtils]: Spent 106.00 ms on a formula simplification. DAG size of input: 22 DAG size of output: 22 [2020-11-29 19:18:04,421 WARN L193 SmtUtils]: Spent 255.00 ms on a formula simplification. DAG size of input: 35 DAG size of output: 31 [2020-11-29 19:18:06,176 WARN L193 SmtUtils]: Spent 124.00 ms on a formula simplification. DAG size of input: 31 DAG size of output: 31 [2020-11-29 19:18:06,438 WARN L193 SmtUtils]: Spent 105.00 ms on a formula simplification. DAG size of input: 28 DAG size of output: 24 [2020-11-29 19:18:07,045 WARN L193 SmtUtils]: Spent 151.00 ms on a formula simplification. DAG size of input: 38 DAG size of output: 33 [2020-11-29 19:18:07,573 WARN L193 SmtUtils]: Spent 185.00 ms on a formula simplification. DAG size of input: 43 DAG size of output: 35 [2020-11-29 19:18:07,760 WARN L193 SmtUtils]: Spent 134.00 ms on a formula simplification. DAG size of input: 30 DAG size of output: 26 [2020-11-29 19:18:08,457 WARN L193 SmtUtils]: Spent 218.00 ms on a formula simplification. DAG size of input: 32 DAG size of output: 28 [2020-11-29 19:18:09,411 WARN L193 SmtUtils]: Spent 216.00 ms on a formula simplification. DAG size of input: 46 DAG size of output: 39 [2020-11-29 19:18:10,714 WARN L193 SmtUtils]: Spent 177.00 ms on a formula simplification. DAG size of input: 41 DAG size of output: 33 [2020-11-29 19:18:11,403 WARN L193 SmtUtils]: Spent 227.00 ms on a formula simplification. DAG size of input: 44 DAG size of output: 37 [2020-11-29 19:18:11,792 WARN L193 SmtUtils]: Spent 140.00 ms on a formula simplification. DAG size of input: 36 DAG size of output: 31 [2020-11-29 19:18:12,236 WARN L193 SmtUtils]: Spent 217.00 ms on a formula simplification. DAG size of input: 35 DAG size of output: 31 [2020-11-29 19:18:13,165 WARN L193 SmtUtils]: Spent 113.00 ms on a formula simplification. DAG size of input: 38 DAG size of output: 35 [2020-11-29 19:18:14,349 WARN L193 SmtUtils]: Spent 193.00 ms on a formula simplification. DAG size of input: 45 DAG size of output: 37 [2020-11-29 19:18:14,814 WARN L193 SmtUtils]: Spent 188.00 ms on a formula simplification. DAG size of input: 42 DAG size of output: 37 [2020-11-29 19:18:16,244 WARN L193 SmtUtils]: Spent 235.00 ms on a formula simplification. DAG size of input: 48 DAG size of output: 41 [2020-11-29 19:18:16,494 WARN L193 SmtUtils]: Spent 114.00 ms on a formula simplification. DAG size of input: 32 DAG size of output: 28 [2020-11-29 19:18:16,770 WARN L193 SmtUtils]: Spent 155.00 ms on a formula simplification. DAG size of input: 40 DAG size of output: 35 [2020-11-29 19:18:18,387 WARN L193 SmtUtils]: Spent 194.00 ms on a formula simplification. DAG size of input: 44 DAG size of output: 39 [2020-11-29 19:18:20,236 WARN L193 SmtUtils]: Spent 141.00 ms on a formula simplification. DAG size of input: 37 DAG size of output: 33 [2020-11-29 19:18:21,357 WARN L193 SmtUtils]: Spent 119.00 ms on a formula simplification. DAG size of input: 40 DAG size of output: 37 [2020-11-29 19:18:23,187 WARN L193 SmtUtils]: Spent 150.00 ms on a formula simplification. DAG size of input: 39 DAG size of output: 30 [2020-11-29 19:18:24,343 WARN L193 SmtUtils]: Spent 177.00 ms on a formula simplification. DAG size of input: 42 DAG size of output: 34 [2020-11-29 19:18:25,475 WARN L193 SmtUtils]: Spent 114.00 ms on a formula simplification. DAG size of input: 34 DAG size of output: 28 [2020-11-29 19:18:26,414 WARN L193 SmtUtils]: Spent 108.00 ms on a formula simplification. DAG size of input: 31 DAG size of output: 26 [2020-11-29 19:18:26,829 WARN L193 SmtUtils]: Spent 174.00 ms on a formula simplification. DAG size of input: 38 DAG size of output: 32 [2020-11-29 19:18:28,218 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-11-29 19:18:28,218 INFO L93 Difference]: Finished difference Result 159612 states and 293009 transitions. [2020-11-29 19:18:28,219 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 218 states. [2020-11-29 19:18:28,220 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 159612 states and 293009 transitions. [2020-11-29 19:18:29,382 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 37595 [2020-11-29 19:18:30,736 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 159612 states to 159612 states and 293009 transitions. [2020-11-29 19:18:30,736 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 159612 [2020-11-29 19:18:30,923 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 159612 [2020-11-29 19:18:30,923 INFO L73 IsDeterministic]: Start isDeterministic. Operand 159612 states and 293009 transitions. [2020-11-29 19:18:31,098 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2020-11-29 19:18:31,098 INFO L691 BuchiCegarLoop]: Abstraction has 159612 states and 293009 transitions. [2020-11-29 19:18:31,247 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 159612 states and 293009 transitions. [2020-11-29 19:18:33,388 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 159612 to 78921. [2020-11-29 19:18:33,388 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 78921 states. [2020-11-29 19:18:33,647 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 78921 states to 78921 states and 146765 transitions. [2020-11-29 19:18:33,648 INFO L714 BuchiCegarLoop]: Abstraction has 78921 states and 146765 transitions. [2020-11-29 19:18:33,648 INFO L594 BuchiCegarLoop]: Abstraction has 78921 states and 146765 transitions. [2020-11-29 19:18:33,648 INFO L427 BuchiCegarLoop]: ======== Iteration 5============ [2020-11-29 19:18:33,648 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 78921 states and 146765 transitions. [2020-11-29 19:18:34,424 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 18107 [2020-11-29 19:18:34,425 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2020-11-29 19:18:34,425 INFO L119 BuchiIsEmpty]: Starting construction of run [2020-11-29 19:18:34,440 INFO L852 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-11-29 19:18:34,440 INFO L853 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-11-29 19:18:34,443 INFO L794 eck$LassoCheckResult]: Stem: 425468#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(2);call write~init~int(48, #t~string4.base, #t~string4.offset, 1);call write~init~int(0, #t~string4.base, 1 + #t~string4.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(31);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(12);call #t~string25.base, #t~string25.offset := #Ultimate.allocOnStack(30);call #t~string26.base, #t~string26.offset := #Ultimate.allocOnStack(9);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(21);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(30);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(9);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(21);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(30);call #t~string35.base, #t~string35.offset := #Ultimate.allocOnStack(9);call #t~string36.base, #t~string36.offset := #Ultimate.allocOnStack(25);call #t~string37.base, #t~string37.offset := #Ultimate.allocOnStack(30);call #t~string38.base, #t~string38.offset := #Ultimate.allocOnStack(9);call #t~string39.base, #t~string39.offset := #Ultimate.allocOnStack(25);call #t~string127.base, #t~string127.offset := #Ultimate.allocOnStack(10);call #t~string129.base, #t~string129.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string129.base, #t~string129.offset, 1);call write~init~int(95, #t~string129.base, 1 + #t~string129.offset, 1);call write~init~int(93, #t~string129.base, 2 + #t~string129.offset, 1);call write~init~int(0, #t~string129.base, 3 + #t~string129.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string131.base, #t~string131.offset, 1);call write~init~int(93, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(32, #t~string131.base, 2 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 3 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string133.base, #t~string133.offset, 1);call write~init~int(97, #t~string133.base, 1 + #t~string133.offset, 1);call write~init~int(116, #t~string133.base, 2 + #t~string133.offset, 1);call write~init~int(32, #t~string133.base, 3 + #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 4 + #t~string133.offset, 1);call #t~string135.base, #t~string135.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string135.base, #t~string135.offset, 1);call write~init~int(105, #t~string135.base, 1 + #t~string135.offset, 1);call write~init~int(0, #t~string135.base, 2 + #t~string135.offset, 1);call #t~string137.base, #t~string137.offset := #Ultimate.allocOnStack(10);call #t~string139.base, #t~string139.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string139.base, #t~string139.offset, 1);call write~init~int(112, #t~string139.base, 1 + #t~string139.offset, 1);call write~init~int(0, #t~string139.base, 2 + #t~string139.offset, 1);call #t~string141.base, #t~string141.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string141.base, #t~string141.offset, 1);call write~init~int(111, #t~string141.base, 1 + #t~string141.offset, 1);call write~init~int(119, #t~string141.base, 2 + #t~string141.offset, 1);call write~init~int(110, #t~string141.base, 3 + #t~string141.offset, 1);call write~init~int(0, #t~string141.base, 4 + #t~string141.offset, 1);call #t~string143.base, #t~string143.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string143.base, #t~string143.offset, 1);call write~init~int(73, #t~string143.base, 1 + #t~string143.offset, 1);call write~init~int(76, #t~string143.base, 2 + #t~string143.offset, 1);call write~init~int(95, #t~string143.base, 3 + #t~string143.offset, 1);call write~init~int(112, #t~string143.base, 4 + #t~string143.offset, 1);call write~init~int(58, #t~string143.base, 5 + #t~string143.offset, 1);call write~init~int(0, #t~string143.base, 6 + #t~string143.offset, 1);call #t~string145.base, #t~string145.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string145.base, #t~string145.offset, 1);call write~init~int(37, #t~string145.base, 1 + #t~string145.offset, 1);call write~init~int(105, #t~string145.base, 2 + #t~string145.offset, 1);call write~init~int(0, #t~string145.base, 3 + #t~string145.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string147.base, #t~string147.offset, 1);call write~init~int(37, #t~string147.base, 1 + #t~string147.offset, 1);call write~init~int(105, #t~string147.base, 2 + #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 3 + #t~string147.offset, 1);call #t~string149.base, #t~string149.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string149.base, #t~string149.offset, 1);call write~init~int(37, #t~string149.base, 1 + #t~string149.offset, 1);call write~init~int(105, #t~string149.base, 2 + #t~string149.offset, 1);call write~init~int(0, #t~string149.base, 3 + #t~string149.offset, 1);call #t~string151.base, #t~string151.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string151.base, #t~string151.offset, 1);call write~init~int(37, #t~string151.base, 1 + #t~string151.offset, 1);call write~init~int(105, #t~string151.base, 2 + #t~string151.offset, 1);call write~init~int(0, #t~string151.base, 3 + #t~string151.offset, 1);call #t~string153.base, #t~string153.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string153.base, #t~string153.offset, 1);call write~init~int(37, #t~string153.base, 1 + #t~string153.offset, 1);call write~init~int(105, #t~string153.base, 2 + #t~string153.offset, 1);call write~init~int(0, #t~string153.base, 3 + #t~string153.offset, 1);call #t~string155.base, #t~string155.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string155.base, #t~string155.offset, 1);call write~init~int(70, #t~string155.base, 1 + #t~string155.offset, 1);call write~init~int(95, #t~string155.base, 2 + #t~string155.offset, 1);call write~init~int(112, #t~string155.base, 3 + #t~string155.offset, 1);call write~init~int(58, #t~string155.base, 4 + #t~string155.offset, 1);call write~init~int(0, #t~string155.base, 5 + #t~string155.offset, 1);call #t~string158.base, #t~string158.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string158.base, #t~string158.offset, 1);call write~init~int(37, #t~string158.base, 1 + #t~string158.offset, 1);call write~init~int(105, #t~string158.base, 2 + #t~string158.offset, 1);call write~init~int(0, #t~string158.base, 3 + #t~string158.offset, 1);call #t~string161.base, #t~string161.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string161.base, #t~string161.offset, 1);call write~init~int(37, #t~string161.base, 1 + #t~string161.offset, 1);call write~init~int(105, #t~string161.base, 2 + #t~string161.offset, 1);call write~init~int(0, #t~string161.base, 3 + #t~string161.offset, 1);call #t~string164.base, #t~string164.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string164.base, #t~string164.offset, 1);call write~init~int(37, #t~string164.base, 1 + #t~string164.offset, 1);call write~init~int(105, #t~string164.base, 2 + #t~string164.offset, 1);call write~init~int(0, #t~string164.base, 3 + #t~string164.offset, 1);call #t~string167.base, #t~string167.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string167.base, #t~string167.offset, 1);call write~init~int(37, #t~string167.base, 1 + #t~string167.offset, 1);call write~init~int(105, #t~string167.base, 2 + #t~string167.offset, 1);call write~init~int(0, #t~string167.base, 3 + #t~string167.offset, 1);call #t~string170.base, #t~string170.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string170.base, #t~string170.offset, 1);call write~init~int(37, #t~string170.base, 1 + #t~string170.offset, 1);call write~init~int(105, #t~string170.base, 2 + #t~string170.offset, 1);call write~init~int(0, #t~string170.base, 3 + #t~string170.offset, 1);call #t~string172.base, #t~string172.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string172.base, #t~string172.offset, 1);call write~init~int(0, #t~string172.base, 1 + #t~string172.offset, 1);~head~0.base, ~head~0.offset := 0, 0;~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~expectedDirection~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 425469#L-1 havoc main_#res;havoc main_#t~ret75, main_~retValue_acc~7, main_~tmp~15;havoc main_~retValue_acc~7;havoc main_~tmp~15; 424754#L3402 havoc valid_product_#res;havoc valid_product_~retValue_acc~29;havoc valid_product_~retValue_acc~29;valid_product_~retValue_acc~29 := 1;valid_product_#res := valid_product_~retValue_acc~29; 421581#L3410 main_#t~ret75 := valid_product_#res;main_~tmp~15 := main_#t~ret75;havoc main_#t~ret75; 421582#L1164 assume 0 != main_~tmp~15; 422596#L1137 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 421526#L2794 havoc bobCall_#t~ret63, bobCall_~tmp~7;havoc bobCall_~tmp~7;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 421527#L561 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~4 := 4;getOrigin_#res := getOrigin_~retValue_acc~4; 423380#L586 bobCall_#t~ret63 := getOrigin_#res;bobCall_~tmp~7 := bobCall_#t~ret63;havoc bobCall_#t~ret63;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~7;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 422975#L3072 assume 0 == initPersonOnFloor_~floor; 422480#L3073 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 420944#L3180-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 423790#L2864 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 423398#L2876-2 havoc timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_#t~ret123, timeShift_#t~ret124, timeShift_#t~ret125, timeShift_#t~ret126, timeShift_~tmp~25, timeShift_~tmp___0~12, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~25;havoc timeShift_~tmp___0~12;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_#t~ret54, __utac_acc__Specification3_spec__1_#t~ret55, __utac_acc__Specification3_spec__1_#t~ret56, __utac_acc__Specification3_spec__1_#t~ret57, __utac_acc__Specification3_spec__1_#t~ret58, __utac_acc__Specification3_spec__1_#t~ret59, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 424569#L1420 __utac_acc__Specification3_spec__1_#t~ret48 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret48;havoc __utac_acc__Specification3_spec__1_#t~ret48;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~12;havoc getCurrentHeading_~retValue_acc~12;getCurrentHeading_~retValue_acc~12 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~12; 421627#L1472 __utac_acc__Specification3_spec__1_#t~ret49 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 421628#L662 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 423756#L724 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~11;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~11; 425069#L1437-5 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~11 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~11; 423660#L1458-5 __utac_acc__Specification3_spec__1_#t~ret55 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret55;havoc __utac_acc__Specification3_spec__1_#t~ret55; 423661#L728 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 421064#L768 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret100, stopRequestedAtCurrentFloor_#t~ret101, stopRequestedAtCurrentFloor_#t~ret102, stopRequestedAtCurrentFloor_#t~ret103, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~23, stopRequestedAtCurrentFloor_~tmp___0~10;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~23;havoc stopRequestedAtCurrentFloor_~tmp___0~10;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret174, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 420619#L2801 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 420620#L2828 isExecutiveFloorCalling_#t~ret174 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret174;havoc isExecutiveFloorCalling_#t~ret174;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 421648#L2705 stopRequestedAtCurrentFloor_#t~ret100 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~23 := stopRequestedAtCurrentFloor_#t~ret100;havoc stopRequestedAtCurrentFloor_#t~ret100; 421537#L2089 assume 0 != stopRequestedAtCurrentFloor_~tmp~23;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 421538#L1420-1 stopRequestedAtCurrentFloor_#t~ret101 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~10 := stopRequestedAtCurrentFloor_#t~ret101;havoc stopRequestedAtCurrentFloor_#t~ret101; 421094#L2093 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 421095#L2106 timeShift_#t~ret116 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret116;havoc timeShift_#t~ret116; 427985#L2242 assume !(0 != timeShift_~tmp___9~3); 427987#L2333 assume !(1 == ~doorState~0); 427981#L2333-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret94, stopRequestedInDirection_#t~ret95, stopRequestedInDirection_#t~ret96, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~17, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~8, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~17;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~8;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret174, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 427982#L2801-3 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 429176#L2828-3 isExecutiveFloorCalling_#t~ret174 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret174;havoc isExecutiveFloorCalling_#t~ret174;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 427978#L2705-1 stopRequestedInDirection_#t~ret94 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~8 := stopRequestedInDirection_#t~ret94;havoc stopRequestedInDirection_#t~ret94; 427979#L1972 assume 0 != stopRequestedInDirection_~tmp___0~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 428016#L1420-2 stopRequestedInDirection_#t~ret95 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~20 := stopRequestedInDirection_#t~ret95;havoc stopRequestedInDirection_#t~ret95;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~20 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~17; 428017#L1985 timeShift_#t~ret123 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret123;havoc timeShift_#t~ret123; 428012#L2341 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret97, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 428013#L2029 assume !(1 == ~currentHeading~0); 430127#L2039 assume !(0 == ~currentFloorID~0); 429375#L2039-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 427421#L2045-5 havoc __utac_acc__Specification3_spec__2_#t~ret60, __utac_acc__Specification3_spec__2_#t~ret61, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 428249#L793 assume -1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~12;havoc getCurrentHeading_~retValue_acc~12;getCurrentHeading_~retValue_acc~12 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~12; 428234#L1472-1 __utac_acc__Specification3_spec__2_#t~ret60 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp___0~3 := __utac_acc__Specification3_spec__2_#t~ret60;havoc __utac_acc__Specification3_spec__2_#t~ret60; 428232#L797 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~3); 428205#L805 assume !(1 == ~expectedDirection~0); 428203#L806 havoc timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_#t~ret123, timeShift_#t~ret124, timeShift_#t~ret125, timeShift_#t~ret126, timeShift_~tmp~25, timeShift_~tmp___0~12, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~25;havoc timeShift_~tmp___0~12;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_#t~ret54, __utac_acc__Specification3_spec__1_#t~ret55, __utac_acc__Specification3_spec__1_#t~ret56, __utac_acc__Specification3_spec__1_#t~ret57, __utac_acc__Specification3_spec__1_#t~ret58, __utac_acc__Specification3_spec__1_#t~ret59, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 428202#L1420-4 __utac_acc__Specification3_spec__1_#t~ret48 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret48;havoc __utac_acc__Specification3_spec__1_#t~ret48;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~12;havoc getCurrentHeading_~retValue_acc~12;getCurrentHeading_~retValue_acc~12 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~12; 428201#L1472-3 __utac_acc__Specification3_spec__1_#t~ret49 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 428192#L662-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 427823#L724-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 425577#L734-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 424293#L745-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 424294#L756-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 421634#L767-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 421635#L768-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret100, stopRequestedAtCurrentFloor_#t~ret101, stopRequestedAtCurrentFloor_#t~ret102, stopRequestedAtCurrentFloor_#t~ret103, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~23, stopRequestedAtCurrentFloor_~tmp___0~10;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~23;havoc stopRequestedAtCurrentFloor_~tmp___0~10;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret174, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 466731#L2801-25 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 437019#L2828-25 isExecutiveFloorCalling_#t~ret174 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret174;havoc isExecutiveFloorCalling_#t~ret174;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 466729#L2705-3 stopRequestedAtCurrentFloor_#t~ret100 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~23 := stopRequestedAtCurrentFloor_#t~ret100;havoc stopRequestedAtCurrentFloor_#t~ret100; 466726#L2089-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~23);havoc stopRequestedAtCurrentFloor__wrappee__empty_#res;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret98, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret99, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~22, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~9;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~22;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~9;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 466718#L2801-27 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 466711#L2828-27 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret98 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~9 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret98;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret98; 466706#L2062-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~9;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19; 423419#L2074-3 stopRequestedAtCurrentFloor_#t~ret103 := stopRequestedAtCurrentFloor__wrappee__empty_#res;stopRequestedAtCurrentFloor_~retValue_acc~20 := stopRequestedAtCurrentFloor_#t~ret103;havoc stopRequestedAtCurrentFloor_#t~ret103;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 422538#L2106-1 timeShift_#t~ret116 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret116;havoc timeShift_#t~ret116; 422539#L2242-1 assume !(0 != timeShift_~tmp___9~3); 458184#L2333-3 assume !(1 == ~doorState~0); 458181#L2333-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret94, stopRequestedInDirection_#t~ret95, stopRequestedInDirection_#t~ret96, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~17, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~8, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~17;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~8;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret174, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 458180#L2801-28 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 432127#L2828-28 isExecutiveFloorCalling_#t~ret174 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret174;havoc isExecutiveFloorCalling_#t~ret174;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 421615#L2705-4 stopRequestedInDirection_#t~ret94 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~8 := stopRequestedInDirection_#t~ret94;havoc stopRequestedInDirection_#t~ret94; 421616#L1972-2 assume 0 != stopRequestedInDirection_~tmp___0~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 427271#L1420-6 stopRequestedInDirection_#t~ret95 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~20 := stopRequestedInDirection_#t~ret95;havoc stopRequestedInDirection_#t~ret95;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~20 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~17; 423865#L1985-2 timeShift_#t~ret123 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret123;havoc timeShift_#t~ret123; 423866#L2341-1 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret97, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 424827#L2029-3 assume !(1 == ~currentHeading~0); 427905#L2039-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 427367#L2039-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 487601#L2045-11 havoc __utac_acc__Specification3_spec__2_#t~ret60, __utac_acc__Specification3_spec__2_#t~ret61, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 487599#L793-1 assume !(-1 == ~expectedDirection~0); 487598#L805-1 assume !(1 == ~expectedDirection~0); 427639#L806-1 havoc timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_#t~ret123, timeShift_#t~ret124, timeShift_#t~ret125, timeShift_#t~ret126, timeShift_~tmp~25, timeShift_~tmp___0~12, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~25;havoc timeShift_~tmp___0~12;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_#t~ret54, __utac_acc__Specification3_spec__1_#t~ret55, __utac_acc__Specification3_spec__1_#t~ret56, __utac_acc__Specification3_spec__1_#t~ret57, __utac_acc__Specification3_spec__1_#t~ret58, __utac_acc__Specification3_spec__1_#t~ret59, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 427638#L1420-8 __utac_acc__Specification3_spec__1_#t~ret48 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret48;havoc __utac_acc__Specification3_spec__1_#t~ret48;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~12;havoc getCurrentHeading_~retValue_acc~12;getCurrentHeading_~retValue_acc~12 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~12; 427637#L1472-6 __utac_acc__Specification3_spec__1_#t~ret49 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 427424#L662-2 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 423950#L663-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~11;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~11; 423951#L1437-24 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~11 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~11; 423598#L1458-24 __utac_acc__Specification3_spec__1_#t~ret50 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~0 := __utac_acc__Specification3_spec__1_#t~ret50;havoc __utac_acc__Specification3_spec__1_#t~ret50; 423599#L667-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0;~expectedDirection~0 := 1; 421461#L768-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret100, stopRequestedAtCurrentFloor_#t~ret101, stopRequestedAtCurrentFloor_#t~ret102, stopRequestedAtCurrentFloor_#t~ret103, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~23, stopRequestedAtCurrentFloor_~tmp___0~10;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~23;havoc stopRequestedAtCurrentFloor_~tmp___0~10;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret174, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 439010#L2801-50 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 432986#L2828-50 isExecutiveFloorCalling_#t~ret174 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret174;havoc isExecutiveFloorCalling_#t~ret174;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 439007#L2705-6 stopRequestedAtCurrentFloor_#t~ret100 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~23 := stopRequestedAtCurrentFloor_#t~ret100;havoc stopRequestedAtCurrentFloor_#t~ret100; 439004#L2089-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~23;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 439001#L1420-9 stopRequestedAtCurrentFloor_#t~ret101 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~10 := stopRequestedAtCurrentFloor_#t~ret101;havoc stopRequestedAtCurrentFloor_#t~ret101; 438999#L2093-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 438987#L2106-2 timeShift_#t~ret116 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret116;havoc timeShift_#t~ret116; 442871#L2242-2 assume !(0 != timeShift_~tmp___9~3); 442870#L2333-6 assume 1 == ~doorState~0;~doorState~0 := 0; 442869#L2333-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret94, stopRequestedInDirection_#t~ret95, stopRequestedInDirection_#t~ret96, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~17, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~8, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~17;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~8;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret174, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 442868#L2801-53 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 442867#L2828-53 isExecutiveFloorCalling_#t~ret174 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret174;havoc isExecutiveFloorCalling_#t~ret174;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 442866#L2705-7 stopRequestedInDirection_#t~ret94 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~8 := stopRequestedInDirection_#t~ret94;havoc stopRequestedInDirection_#t~ret94; 442864#L1972-4 assume 0 != stopRequestedInDirection_~tmp___0~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 442865#L1420-10 stopRequestedInDirection_#t~ret95 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~20 := stopRequestedInDirection_#t~ret95;havoc stopRequestedInDirection_#t~ret95;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~20 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~17; 457329#L1985-4 timeShift_#t~ret123 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret123;havoc timeShift_#t~ret123; 457327#L2341-2 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret97, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 457328#L2029-6 assume 1 == ~currentHeading~0;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~27;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~27;isTopFloor_~retValue_acc~27 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~27; 433108#L3375-11 continueInDirection_#t~ret97 := isTopFloor_#res;continueInDirection_~tmp~21 := continueInDirection_#t~ret97;havoc continueInDirection_#t~ret97; 433109#L2033-18 assume !(0 != continueInDirection_~tmp~21); 453346#L2039-20 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 427153#L2045-17 havoc __utac_acc__Specification3_spec__2_#t~ret60, __utac_acc__Specification3_spec__2_#t~ret61, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 467451#L793-2 assume !(-1 == ~expectedDirection~0); 467075#L805-2 assume !(1 == ~expectedDirection~0); 467069#L806-2 havoc bobCall_#t~ret63, bobCall_~tmp~7;havoc bobCall_~tmp~7;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~4;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~4; 467065#L561-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~4 := 4;getOrigin_#res := getOrigin_~retValue_acc~4; 467062#L586-1 bobCall_#t~ret63 := getOrigin_#res;bobCall_~tmp~7 := bobCall_#t~ret63;havoc bobCall_#t~ret63;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~7;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 467061#L3072-1 assume 0 == initPersonOnFloor_~floor; 467039#L3073-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 467027#L3180-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 467025#L2864-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 427646#L2876-5 havoc cleanup_#t~ret69, cleanup_#t~ret70, cleanup_~i~2, cleanup_~tmp~13, cleanup_~tmp___0~4, cleanup_~__cil_tmp4~2;havoc cleanup_~i~2;havoc cleanup_~tmp~13;havoc cleanup_~tmp___0~4;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_#t~ret123, timeShift_#t~ret124, timeShift_#t~ret125, timeShift_#t~ret126, timeShift_~tmp~25, timeShift_~tmp___0~12, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~25;havoc timeShift_~tmp___0~12;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_#t~ret54, __utac_acc__Specification3_spec__1_#t~ret55, __utac_acc__Specification3_spec__1_#t~ret56, __utac_acc__Specification3_spec__1_#t~ret57, __utac_acc__Specification3_spec__1_#t~ret58, __utac_acc__Specification3_spec__1_#t~ret59, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 427645#L1420-12 __utac_acc__Specification3_spec__1_#t~ret48 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret48;havoc __utac_acc__Specification3_spec__1_#t~ret48;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~12;havoc getCurrentHeading_~retValue_acc~12;getCurrentHeading_~retValue_acc~12 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~12; 427643#L1472-9 __utac_acc__Specification3_spec__1_#t~ret49 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 427644#L662-3 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 423902#L663-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~11;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~11; 423903#L1437-36 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~11 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~11; 423494#L1458-36 __utac_acc__Specification3_spec__1_#t~ret50 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~0 := __utac_acc__Specification3_spec__1_#t~ret50;havoc __utac_acc__Specification3_spec__1_#t~ret50; 423495#L667-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0;~expectedDirection~0 := 1; 421467#L768-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret100, stopRequestedAtCurrentFloor_#t~ret101, stopRequestedAtCurrentFloor_#t~ret102, stopRequestedAtCurrentFloor_#t~ret103, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~23, stopRequestedAtCurrentFloor_~tmp___0~10;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~23;havoc stopRequestedAtCurrentFloor_~tmp___0~10;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret174, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 470066#L2801-75 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 470065#L2828-75 isExecutiveFloorCalling_#t~ret174 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret174;havoc isExecutiveFloorCalling_#t~ret174;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 470064#L2705-9 stopRequestedAtCurrentFloor_#t~ret100 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~23 := stopRequestedAtCurrentFloor_#t~ret100;havoc stopRequestedAtCurrentFloor_#t~ret100; 470062#L2089-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~23;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 470061#L1420-13 stopRequestedAtCurrentFloor_#t~ret101 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~10 := stopRequestedAtCurrentFloor_#t~ret101;havoc stopRequestedAtCurrentFloor_#t~ret101; 470059#L2093-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 470051#L2106-3 timeShift_#t~ret116 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret116;havoc timeShift_#t~ret116; 470048#L2242-3 assume !(0 != timeShift_~tmp___9~3); 470049#L2333-9 assume !(1 == ~doorState~0); 480003#L2333-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret94, stopRequestedInDirection_#t~ret95, stopRequestedInDirection_#t~ret96, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~17, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~8, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~17;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~8;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret174, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 480002#L2801-78 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 480001#L2828-78 isExecutiveFloorCalling_#t~ret174 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret174;havoc isExecutiveFloorCalling_#t~ret174;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 480000#L2705-10 stopRequestedInDirection_#t~ret94 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~8 := stopRequestedInDirection_#t~ret94;havoc stopRequestedInDirection_#t~ret94; 479999#L1972-6 assume 0 != stopRequestedInDirection_~tmp___0~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 479971#L1420-14 stopRequestedInDirection_#t~ret95 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~20 := stopRequestedInDirection_#t~ret95;havoc stopRequestedInDirection_#t~ret95;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~20 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~17; 479972#L1985-6 timeShift_#t~ret123 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret123;havoc timeShift_#t~ret123; 480065#L2341-3 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret97, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 480067#L2029-9 assume !(1 == ~currentHeading~0); 492205#L2039-27 assume !(0 == ~currentFloorID~0); 491430#L2039-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 491422#L2045-23 havoc __utac_acc__Specification3_spec__2_#t~ret60, __utac_acc__Specification3_spec__2_#t~ret61, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 491417#L793-3 assume !(-1 == ~expectedDirection~0); 491414#L805-3 assume !(1 == ~expectedDirection~0); 491406#L806-3 cleanup_~i~2 := 0; 491405#L969-2 [2020-11-29 19:18:34,444 INFO L796 eck$LassoCheckResult]: Loop: 491405#L969-2 assume !false; 491404#L970 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 488292#L973 assume cleanup_~i~2 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~8;havoc isBlocked_~retValue_acc~8;isBlocked_~retValue_acc~8 := 0;isBlocked_#res := isBlocked_~retValue_acc~8; 467016#L1271 cleanup_#t~ret69 := isBlocked_#res;cleanup_~tmp___0~4 := cleanup_#t~ret69;havoc cleanup_#t~ret69; 467015#L977 assume 1 != cleanup_~tmp___0~4; 467010#L977-1 havoc isIdle_#res;havoc isIdle_#t~ret82, isIdle_~retValue_acc~15, isIdle_~tmp~18;havoc isIdle_~retValue_acc~15;havoc isIdle_~tmp~18;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret77, anyStopRequested_#t~ret78, anyStopRequested_#t~ret79, anyStopRequested_#t~ret80, anyStopRequested_#t~ret81, anyStopRequested_~retValue_acc~14, anyStopRequested_~tmp~17, anyStopRequested_~tmp___0~6, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~2, anyStopRequested_~tmp___3~1;havoc anyStopRequested_~retValue_acc~14;havoc anyStopRequested_~tmp~17;havoc anyStopRequested_~tmp___0~6;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~2;havoc anyStopRequested_~tmp___3~1;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 467008#L2801-100 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 464090#L2828-100 anyStopRequested_#t~ret77 := isFloorCalling_#res;anyStopRequested_~tmp___3~1 := anyStopRequested_#t~ret77;havoc anyStopRequested_#t~ret77; 464079#L1528 assume 0 != anyStopRequested_~tmp___3~1;anyStopRequested_~retValue_acc~14 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~14; 464070#L1592 isIdle_#t~ret82 := anyStopRequested_#res;isIdle_~tmp~18 := isIdle_#t~ret82;havoc isIdle_#t~ret82;isIdle_~retValue_acc~15 := (if 0 == isIdle_~tmp~18 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~15; 463246#L1605 cleanup_#t~ret70 := isIdle_#res;cleanup_~tmp~13 := cleanup_#t~ret70;havoc cleanup_#t~ret70; 427838#L989 assume !(0 != cleanup_~tmp~13);havoc timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_#t~ret123, timeShift_#t~ret124, timeShift_#t~ret125, timeShift_#t~ret126, timeShift_~tmp~25, timeShift_~tmp___0~12, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~25;havoc timeShift_~tmp___0~12;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_#t~ret54, __utac_acc__Specification3_spec__1_#t~ret55, __utac_acc__Specification3_spec__1_#t~ret56, __utac_acc__Specification3_spec__1_#t~ret57, __utac_acc__Specification3_spec__1_#t~ret58, __utac_acc__Specification3_spec__1_#t~ret59, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 427826#L1420-16 __utac_acc__Specification3_spec__1_#t~ret48 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret48;havoc __utac_acc__Specification3_spec__1_#t~ret48;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~12;havoc getCurrentHeading_~retValue_acc~12;getCurrentHeading_~retValue_acc~12 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~12; 427825#L1472-12 __utac_acc__Specification3_spec__1_#t~ret49 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 427824#L662-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 427648#L724-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~11;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~11; 426195#L1437-53 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~11 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~11; 423749#L1458-53 __utac_acc__Specification3_spec__1_#t~ret55 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret55;havoc __utac_acc__Specification3_spec__1_#t~ret55; 424841#L728-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 421039#L768-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret100, stopRequestedAtCurrentFloor_#t~ret101, stopRequestedAtCurrentFloor_#t~ret102, stopRequestedAtCurrentFloor_#t~ret103, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~23, stopRequestedAtCurrentFloor_~tmp___0~10;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~23;havoc stopRequestedAtCurrentFloor_~tmp___0~10;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret174, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 471700#L2801-105 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 442949#L2828-105 isExecutiveFloorCalling_#t~ret174 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret174;havoc isExecutiveFloorCalling_#t~ret174;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 471699#L2705-12 stopRequestedAtCurrentFloor_#t~ret100 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~23 := stopRequestedAtCurrentFloor_#t~ret100;havoc stopRequestedAtCurrentFloor_#t~ret100; 471697#L2089-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~23;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 471692#L1420-17 stopRequestedAtCurrentFloor_#t~ret101 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~10 := stopRequestedAtCurrentFloor_#t~ret101;havoc stopRequestedAtCurrentFloor_#t~ret101; 471674#L2093-4 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 471673#L2106-4 timeShift_#t~ret116 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret116;havoc timeShift_#t~ret116; 471665#L2242-4 assume !(0 != timeShift_~tmp___9~3); 471666#L2333-12 assume 1 == ~doorState~0;~doorState~0 := 0; 495412#L2333-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret94, stopRequestedInDirection_#t~ret95, stopRequestedInDirection_#t~ret96, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~17, stopRequestedInDirection_~tmp~20, stopRequestedInDirection_~tmp___0~8, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~17;havoc stopRequestedInDirection_~tmp~20;havoc stopRequestedInDirection_~tmp___0~8;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret174, isExecutiveFloorCalling_~retValue_acc~23;havoc isExecutiveFloorCalling_~retValue_acc~23;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~25;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~25; 494258#L2801-108 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~25 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~25; 477142#L2828-108 isExecutiveFloorCalling_#t~ret174 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~23 := isExecutiveFloorCalling_#t~ret174;havoc isExecutiveFloorCalling_#t~ret174;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~23; 494250#L2705-13 stopRequestedInDirection_#t~ret94 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~8 := stopRequestedInDirection_#t~ret94;havoc stopRequestedInDirection_#t~ret94; 494251#L1972-8 assume 0 != stopRequestedInDirection_~tmp___0~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~9;havoc getCurrentFloorID_~retValue_acc~9;getCurrentFloorID_~retValue_acc~9 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~9; 479895#L1420-18 stopRequestedInDirection_#t~ret95 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~20 := stopRequestedInDirection_#t~ret95;havoc stopRequestedInDirection_#t~ret95;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~20 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~17; 479896#L1985-8 timeShift_#t~ret123 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret123;havoc timeShift_#t~ret123; 479776#L2341-4 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret97, continueInDirection_~dir, continueInDirection_~tmp~21;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~21;~currentHeading~0 := continueInDirection_~dir; 479778#L2029-12 assume !(1 == ~currentHeading~0); 494471#L2039-36 assume !(0 == ~currentFloorID~0); 494468#L2039-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 493955#L2045-29 havoc __utac_acc__Specification3_spec__2_#t~ret60, __utac_acc__Specification3_spec__2_#t~ret61, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 493178#L793-4 assume -1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~12;havoc getCurrentHeading_~retValue_acc~12;getCurrentHeading_~retValue_acc~12 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~12; 491421#L1472-13 __utac_acc__Specification3_spec__2_#t~ret60 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp___0~3 := __utac_acc__Specification3_spec__2_#t~ret60;havoc __utac_acc__Specification3_spec__2_#t~ret60; 491419#L797-4 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~3); 491411#L805-4 assume !(1 == ~expectedDirection~0); 491407#L806-4 cleanup_~i~2 := 1 + cleanup_~i~2; 491405#L969-2 [2020-11-29 19:18:34,445 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-11-29 19:18:34,446 INFO L82 PathProgramCache]: Analyzing trace with hash 1150262859, now seen corresponding path program 1 times [2020-11-29 19:18:34,446 INFO L162 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-11-29 19:18:34,446 INFO L353 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [731225202] [2020-11-29 19:18:34,447 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-11-29 19:18:34,492 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-11-29 19:18:34,593 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-11-29 19:18:34,593 INFO L353 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [731225202] [2020-11-29 19:18:34,594 INFO L219 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-11-29 19:18:34,594 INFO L232 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2020-11-29 19:18:34,594 INFO L155 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1369017955] [2020-11-29 19:18:34,595 INFO L799 eck$LassoCheckResult]: stem already infeasible [2020-11-29 19:18:34,595 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-11-29 19:18:34,596 INFO L82 PathProgramCache]: Analyzing trace with hash -1842189285, now seen corresponding path program 1 times [2020-11-29 19:18:34,596 INFO L162 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-11-29 19:18:34,604 INFO L353 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [877159603] [2020-11-29 19:18:34,604 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-11-29 19:18:34,630 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2020-11-29 19:18:34,633 INFO L221 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2020-11-29 19:18:34,654 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2020-11-29 19:18:34,654 INFO L221 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2020-11-29 19:18:34,734 INFO L173 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2020-11-29 19:18:36,164 WARN L193 SmtUtils]: Spent 1.42 s on a formula simplification. DAG size of input: 200 DAG size of output: 176 [2020-11-29 19:18:36,982 WARN L193 SmtUtils]: Spent 767.00 ms on a formula simplification. DAG size of input: 154 DAG size of output: 136 [2020-11-29 19:18:36,994 INFO L210 LassoAnalysis]: Preferences: [2020-11-29 19:18:36,995 INFO L126 ssoRankerPreferences]: Compute integeral hull: false [2020-11-29 19:18:36,995 INFO L127 ssoRankerPreferences]: Enable LassoPartitioneer: true [2020-11-29 19:18:36,995 INFO L128 ssoRankerPreferences]: Term annotations enabled: false [2020-11-29 19:18:36,996 INFO L129 ssoRankerPreferences]: Use exernal solver: true [2020-11-29 19:18:36,996 INFO L130 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2020-11-29 19:18:36,996 INFO L131 ssoRankerPreferences]: Dump SMT script to file: false [2020-11-29 19:18:36,996 INFO L132 ssoRankerPreferences]: Path of dumped script: [2020-11-29 19:18:36,997 INFO L133 ssoRankerPreferences]: Filename of dumped script: elevator_spec3_product11.cil.c_Iteration5_Loop [2020-11-29 19:18:36,997 INFO L134 ssoRankerPreferences]: MapElimAlgo: Frank [2020-11-29 19:18:36,997 INFO L274 LassoAnalysis]: Starting lasso preprocessing... [2020-11-29 19:18:37,037 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:37,060 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:37,065 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:37,075 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:37,078 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:37,084 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:37,088 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:37,098 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:37,101 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:37,110 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:37,114 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:37,143 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:37,146 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:37,170 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:37,181 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:37,184 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:37,190 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:37,197 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:37,200 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:37,213 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:37,217 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:37,220 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:37,231 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:37,235 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:37,238 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:37,241 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:37,245 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:37,249 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:37,252 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:37,256 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:37,259 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:37,263 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:37,266 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:37,311 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:37,316 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:37,337 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:37,368 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:37,375 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:37,380 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:37,385 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:37,389 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:37,398 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:37,403 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:37,407 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:37,411 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:37,414 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:37,419 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:37,422 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:37,426 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:37,429 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:37,432 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:37,443 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:37,448 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:37,452 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:37,455 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:37,459 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:37,463 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:37,467 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:37,470 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:37,473 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:37,477 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:37,495 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:37,499 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:37,504 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:37,514 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:37,523 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:37,531 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:37,534 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:37,542 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:37,547 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:37,550 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:37,554 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:37,557 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:37,561 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:37,565 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:37,575 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:37,584 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:37,588 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:37,591 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:37,595 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:37,598 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:37,601 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:37,605 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:37,608 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:37,612 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:38,439 WARN L193 SmtUtils]: Spent 217.00 ms on a formula simplification that was a NOOP. DAG size: 36 [2020-11-29 19:18:38,556 WARN L193 SmtUtils]: Spent 113.00 ms on a formula simplification that was a NOOP. DAG size: 30 [2020-11-29 19:18:38,939 INFO L292 LassoAnalysis]: Preprocessing complete. [2020-11-29 19:18:38,940 INFO L404 LassoAnalysis]: Checking for nontermination... No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_1851a923-bb58-40d0-a682-f93b13a216ab/bin/uautomizer/z3 Starting monitored process 2 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 2 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2020-11-29 19:18:38,951 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2020-11-29 19:18:38,951 INFO L160 nArgumentSynthesizer]: Using integer mode. [2020-11-29 19:18:38,963 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2020-11-29 19:18:38,963 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___1~7=0} Honda state: {ULTIMATE.start_timeShift_~tmp___1~7=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_1851a923-bb58-40d0-a682-f93b13a216ab/bin/uautomizer/z3 Starting monitored process 3 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 3 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2020-11-29 19:18:38,993 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2020-11-29 19:18:38,994 INFO L160 nArgumentSynthesizer]: Using integer mode. [2020-11-29 19:18:38,997 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2020-11-29 19:18:38,998 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___6~3=0} Honda state: {ULTIMATE.start_timeShift_~tmp___6~3=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_1851a923-bb58-40d0-a682-f93b13a216ab/bin/uautomizer/z3 Starting monitored process 4 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 4 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2020-11-29 19:18:39,042 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2020-11-29 19:18:39,042 INFO L160 nArgumentSynthesizer]: Using integer mode. [2020-11-29 19:18:39,045 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2020-11-29 19:18:39,045 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___5~3=0} Honda state: {ULTIMATE.start_timeShift_~tmp___5~3=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_1851a923-bb58-40d0-a682-f93b13a216ab/bin/uautomizer/z3 Starting monitored process 5 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 5 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2020-11-29 19:18:39,077 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2020-11-29 19:18:39,077 INFO L160 nArgumentSynthesizer]: Using integer mode. [2020-11-29 19:18:39,099 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2020-11-29 19:18:39,099 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__1_#t~ret52=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__1_#t~ret52=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_1851a923-bb58-40d0-a682-f93b13a216ab/bin/uautomizer/z3 Starting monitored process 6 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2020-11-29 19:18:39,152 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2020-11-29 19:18:39,152 INFO L160 nArgumentSynthesizer]: Using integer mode. Waiting until toolchain timeout for monitored process 6 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2020-11-29 19:18:39,159 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2020-11-29 19:18:39,159 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_cleanup_~tmp~13=0} Honda state: {ULTIMATE.start_cleanup_~tmp~13=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_1851a923-bb58-40d0-a682-f93b13a216ab/bin/uautomizer/z3 Starting monitored process 7 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2020-11-29 19:18:39,212 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2020-11-29 19:18:39,212 INFO L160 nArgumentSynthesizer]: Using integer mode. Waiting until toolchain timeout for monitored process 7 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2020-11-29 19:18:39,240 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2020-11-29 19:18:39,240 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedAtCurrentFloor_~retValue_acc~20=0} Honda state: {ULTIMATE.start_stopRequestedAtCurrentFloor_~retValue_acc~20=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_1851a923-bb58-40d0-a682-f93b13a216ab/bin/uautomizer/z3 Starting monitored process 8 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 8 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2020-11-29 19:18:39,309 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2020-11-29 19:18:39,309 INFO L160 nArgumentSynthesizer]: Using integer mode. [2020-11-29 19:18:39,314 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2020-11-29 19:18:39,315 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_~__cil_tmp7~5=0, ULTIMATE.start_stopRequestedInDirection_~__cil_tmp8~5=0} Honda state: {ULTIMATE.start_stopRequestedInDirection_~__cil_tmp7~5=0, ULTIMATE.start_stopRequestedInDirection_~__cil_tmp8~5=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_1851a923-bb58-40d0-a682-f93b13a216ab/bin/uautomizer/z3 Starting monitored process 9 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 9 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2020-11-29 19:18:39,363 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2020-11-29 19:18:39,363 INFO L160 nArgumentSynthesizer]: Using integer mode. [2020-11-29 19:18:39,371 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2020-11-29 19:18:39,371 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret126=0} Honda state: {ULTIMATE.start_timeShift_#t~ret126=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_1851a923-bb58-40d0-a682-f93b13a216ab/bin/uautomizer/z3 Starting monitored process 10 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2020-11-29 19:18:39,431 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2020-11-29 19:18:39,431 INFO L160 nArgumentSynthesizer]: Using integer mode. Waiting until toolchain timeout for monitored process 10 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2020-11-29 19:18:39,447 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2020-11-29 19:18:39,447 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_#in~respectFloorCalls=1, ULTIMATE.start_stopRequestedInDirection_~respectFloorCalls=1} Honda state: {ULTIMATE.start_stopRequestedInDirection_#in~respectFloorCalls=1, ULTIMATE.start_stopRequestedInDirection_~respectFloorCalls=1} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_1851a923-bb58-40d0-a682-f93b13a216ab/bin/uautomizer/z3 Starting monitored process 11 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2020-11-29 19:18:39,504 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2020-11-29 19:18:39,504 INFO L160 nArgumentSynthesizer]: Using integer mode. Waiting until toolchain timeout for monitored process 11 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2020-11-29 19:18:39,510 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2020-11-29 19:18:39,510 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret123=0} Honda state: {ULTIMATE.start_timeShift_#t~ret123=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_1851a923-bb58-40d0-a682-f93b13a216ab/bin/uautomizer/z3 Starting monitored process 12 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2020-11-29 19:18:39,566 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2020-11-29 19:18:39,567 INFO L160 nArgumentSynthesizer]: Using integer mode. Waiting until toolchain timeout for monitored process 12 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2020-11-29 19:18:39,591 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2020-11-29 19:18:39,591 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_continueInDirection_#in~dir=-2, ULTIMATE.start___utac_acc__Specification3_spec__2_~tmp___0~3=-2, ULTIMATE.start_stopRequestedInDirection_~dir=-2, ~currentHeading~0=-2, ULTIMATE.start_stopRequestedInDirection_#in~dir=-2, ULTIMATE.start_continueInDirection_~dir=-2, ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___10~0=-2, ULTIMATE.start_getCurrentHeading_#res=-2, ULTIMATE.start_getCurrentHeading_~retValue_acc~12=-2} Honda state: {ULTIMATE.start_continueInDirection_#in~dir=-2, ULTIMATE.start___utac_acc__Specification3_spec__2_~tmp___0~3=-2, ULTIMATE.start_stopRequestedInDirection_~dir=-2, ~currentHeading~0=-2, ULTIMATE.start_stopRequestedInDirection_#in~dir=-2, ULTIMATE.start_continueInDirection_~dir=-2, ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___10~0=-2, ULTIMATE.start_getCurrentHeading_#res=-2, ULTIMATE.start_getCurrentHeading_~retValue_acc~12=-2} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_1851a923-bb58-40d0-a682-f93b13a216ab/bin/uautomizer/z3 Starting monitored process 13 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2020-11-29 19:18:39,649 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2020-11-29 19:18:39,649 INFO L160 nArgumentSynthesizer]: Using integer mode. Waiting until toolchain timeout for monitored process 13 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2020-11-29 19:18:39,654 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2020-11-29 19:18:39,654 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedAtCurrentFloor_#t~ret101=0} Honda state: {ULTIMATE.start_stopRequestedAtCurrentFloor_#t~ret101=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_1851a923-bb58-40d0-a682-f93b13a216ab/bin/uautomizer/z3 Starting monitored process 14 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 14 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2020-11-29 19:18:39,695 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2020-11-29 19:18:39,695 INFO L160 nArgumentSynthesizer]: Using integer mode. [2020-11-29 19:18:39,722 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2020-11-29 19:18:39,722 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_anyStopRequested_~tmp___3~1=-6, ULTIMATE.start_stopRequestedAtCurrentFloor_~tmp~23=-6, ULTIMATE.start_isFloorCalling_#res=-6, ULTIMATE.start_isFloorCalling_~retValue_acc~25=-6, ~calls_0~0=-6, ULTIMATE.start_isExecutiveFloorCalling_#res=-6, ULTIMATE.start_stopRequestedInDirection_~tmp___0~8=-6, ULTIMATE.start_isExecutiveFloorCalling_~retValue_acc~23=-6} Honda state: {ULTIMATE.start_anyStopRequested_~tmp___3~1=-6, ULTIMATE.start_stopRequestedAtCurrentFloor_~tmp~23=-6, ULTIMATE.start_isFloorCalling_#res=-6, ULTIMATE.start_isFloorCalling_~retValue_acc~25=-6, ~calls_0~0=-6, ULTIMATE.start_isExecutiveFloorCalling_#res=-6, ULTIMATE.start_stopRequestedInDirection_~tmp___0~8=-6, ULTIMATE.start_isExecutiveFloorCalling_~retValue_acc~23=-6} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_1851a923-bb58-40d0-a682-f93b13a216ab/bin/uautomizer/z3 Starting monitored process 15 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2020-11-29 19:18:39,780 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2020-11-29 19:18:39,780 INFO L160 nArgumentSynthesizer]: Using integer mode. Waiting until toolchain timeout for monitored process 15 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2020-11-29 19:18:39,786 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2020-11-29 19:18:39,786 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {~expectedDirection~0=-1} Honda state: {~expectedDirection~0=-1} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_1851a923-bb58-40d0-a682-f93b13a216ab/bin/uautomizer/z3 Starting monitored process 16 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 16 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2020-11-29 19:18:39,823 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2020-11-29 19:18:39,823 INFO L160 nArgumentSynthesizer]: Using integer mode. [2020-11-29 19:18:39,826 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2020-11-29 19:18:39,826 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___6~0=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___6~0=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_1851a923-bb58-40d0-a682-f93b13a216ab/bin/uautomizer/z3 Starting monitored process 17 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 17 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2020-11-29 19:18:39,858 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2020-11-29 19:18:39,858 INFO L160 nArgumentSynthesizer]: Using integer mode. [2020-11-29 19:18:39,861 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2020-11-29 19:18:39,861 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret125=0} Honda state: {ULTIMATE.start_timeShift_#t~ret125=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_1851a923-bb58-40d0-a682-f93b13a216ab/bin/uautomizer/z3 Starting monitored process 18 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 18 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2020-11-29 19:18:39,892 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2020-11-29 19:18:39,892 INFO L160 nArgumentSynthesizer]: Using integer mode. [2020-11-29 19:18:39,896 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2020-11-29 19:18:39,896 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___2~5=0} Honda state: {ULTIMATE.start_timeShift_~tmp___2~5=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_1851a923-bb58-40d0-a682-f93b13a216ab/bin/uautomizer/z3 Starting monitored process 19 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 19 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2020-11-29 19:18:39,931 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2020-11-29 19:18:39,931 INFO L160 nArgumentSynthesizer]: Using integer mode. [2020-11-29 19:18:39,941 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2020-11-29 19:18:39,941 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_isIdle_#t~ret82=0} Honda state: {ULTIMATE.start_isIdle_#t~ret82=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_1851a923-bb58-40d0-a682-f93b13a216ab/bin/uautomizer/z3 Starting monitored process 20 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 20 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2020-11-29 19:18:39,979 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2020-11-29 19:18:39,979 INFO L160 nArgumentSynthesizer]: Using integer mode. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_1851a923-bb58-40d0-a682-f93b13a216ab/bin/uautomizer/z3 Starting monitored process 21 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 21 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2020-11-29 19:18:40,019 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 3 Nilpotent components: true [2020-11-29 19:18:40,019 INFO L160 nArgumentSynthesizer]: Using integer mode. [2020-11-29 19:18:40,945 INFO L444 LassoAnalysis]: Proving nontermination failed: No geometric nontermination argument exists. [2020-11-29 19:18:40,948 INFO L210 LassoAnalysis]: Preferences: [2020-11-29 19:18:40,948 INFO L126 ssoRankerPreferences]: Compute integeral hull: false [2020-11-29 19:18:40,948 INFO L127 ssoRankerPreferences]: Enable LassoPartitioneer: true [2020-11-29 19:18:40,948 INFO L128 ssoRankerPreferences]: Term annotations enabled: false [2020-11-29 19:18:40,948 INFO L129 ssoRankerPreferences]: Use exernal solver: false [2020-11-29 19:18:40,948 INFO L130 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2020-11-29 19:18:40,948 INFO L131 ssoRankerPreferences]: Dump SMT script to file: false [2020-11-29 19:18:40,948 INFO L132 ssoRankerPreferences]: Path of dumped script: [2020-11-29 19:18:40,948 INFO L133 ssoRankerPreferences]: Filename of dumped script: elevator_spec3_product11.cil.c_Iteration5_Loop [2020-11-29 19:18:40,949 INFO L134 ssoRankerPreferences]: MapElimAlgo: Frank [2020-11-29 19:18:40,949 INFO L274 LassoAnalysis]: Starting lasso preprocessing... [2020-11-29 19:18:40,956 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:40,968 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:40,971 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:40,975 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:40,979 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:40,984 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:40,992 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:41,035 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:41,039 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:41,043 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:41,052 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:41,056 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:41,060 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:41,064 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:41,074 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:41,078 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:41,082 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:41,096 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:41,101 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:41,112 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:41,116 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:41,135 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:41,140 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:41,145 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:41,150 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:41,155 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:41,160 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:41,165 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:41,170 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:41,175 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:41,181 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:41,186 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:41,191 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:41,197 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:41,202 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:41,213 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:41,218 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:41,252 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:41,257 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:41,263 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:41,268 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:41,279 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:41,284 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:41,300 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:41,323 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:41,331 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:41,342 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:41,347 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:41,351 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:41,362 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:41,366 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:41,370 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:41,373 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:41,377 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:41,381 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:41,390 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:41,395 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:41,400 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:41,433 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:41,438 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:41,443 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:41,461 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:41,466 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:41,471 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:41,477 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:41,488 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:41,493 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:41,498 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:41,507 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:41,512 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:41,518 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:41,522 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:41,527 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:41,538 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:41,543 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:41,558 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:41,573 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:41,579 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:41,584 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:41,589 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:41,594 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:41,599 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:41,604 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:41,609 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:41,615 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2020-11-29 19:18:42,661 WARN L193 SmtUtils]: Spent 233.00 ms on a formula simplification that was a NOOP. DAG size: 36 [2020-11-29 19:18:43,072 WARN L193 SmtUtils]: Spent 117.00 ms on a formula simplification that was a NOOP. DAG size: 30 [2020-11-29 19:18:43,233 INFO L292 LassoAnalysis]: Preprocessing complete. [2020-11-29 19:18:43,239 INFO L489 LassoAnalysis]: Using template 'affine'. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_1851a923-bb58-40d0-a682-f93b13a216ab/bin/uautomizer/z3 Starting monitored process 22 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2020-11-29 19:18:43,253 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2020-11-29 19:18:43,256 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2020-11-29 19:18:43,257 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2020-11-29 19:18:43,257 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2020-11-29 19:18:43,257 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2020-11-29 19:18:43,257 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. Waiting until toolchain timeout for monitored process 22 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2020-11-29 19:18:43,259 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2020-11-29 19:18:43,259 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2020-11-29 19:18:43,262 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_1851a923-bb58-40d0-a682-f93b13a216ab/bin/uautomizer/z3 Starting monitored process 23 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 23 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2020-11-29 19:18:43,292 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2020-11-29 19:18:43,294 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2020-11-29 19:18:43,294 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2020-11-29 19:18:43,294 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2020-11-29 19:18:43,294 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2020-11-29 19:18:43,294 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2020-11-29 19:18:43,295 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2020-11-29 19:18:43,295 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2020-11-29 19:18:43,297 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_1851a923-bb58-40d0-a682-f93b13a216ab/bin/uautomizer/z3 Starting monitored process 24 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 24 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2020-11-29 19:18:43,328 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2020-11-29 19:18:43,330 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2020-11-29 19:18:43,330 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2020-11-29 19:18:43,330 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2020-11-29 19:18:43,331 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2020-11-29 19:18:43,331 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2020-11-29 19:18:43,331 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2020-11-29 19:18:43,331 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2020-11-29 19:18:43,333 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_1851a923-bb58-40d0-a682-f93b13a216ab/bin/uautomizer/z3 Starting monitored process 25 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 25 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2020-11-29 19:18:43,364 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2020-11-29 19:18:43,366 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2020-11-29 19:18:43,366 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2020-11-29 19:18:43,367 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2020-11-29 19:18:43,367 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2020-11-29 19:18:43,367 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2020-11-29 19:18:43,368 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2020-11-29 19:18:43,368 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2020-11-29 19:18:43,372 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_1851a923-bb58-40d0-a682-f93b13a216ab/bin/uautomizer/z3 Starting monitored process 26 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 26 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2020-11-29 19:18:43,404 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2020-11-29 19:18:43,405 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2020-11-29 19:18:43,406 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2020-11-29 19:18:43,406 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2020-11-29 19:18:43,406 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2020-11-29 19:18:43,406 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2020-11-29 19:18:43,407 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2020-11-29 19:18:43,407 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2020-11-29 19:18:43,409 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_1851a923-bb58-40d0-a682-f93b13a216ab/bin/uautomizer/z3 Starting monitored process 27 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 27 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2020-11-29 19:18:43,441 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2020-11-29 19:18:43,443 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2020-11-29 19:18:43,443 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2020-11-29 19:18:43,443 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2020-11-29 19:18:43,443 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2020-11-29 19:18:43,443 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2020-11-29 19:18:43,445 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2020-11-29 19:18:43,445 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2020-11-29 19:18:43,457 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_1851a923-bb58-40d0-a682-f93b13a216ab/bin/uautomizer/z3 Starting monitored process 28 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 28 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2020-11-29 19:18:43,498 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2020-11-29 19:18:43,503 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2020-11-29 19:18:43,503 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2020-11-29 19:18:43,503 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2020-11-29 19:18:43,504 INFO L204 nArgumentSynthesizer]: 2 loop disjuncts [2020-11-29 19:18:43,504 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2020-11-29 19:18:43,533 INFO L401 nArgumentSynthesizer]: We have 4 Motzkin's Theorem applications. [2020-11-29 19:18:43,533 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2020-11-29 19:18:43,539 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_1851a923-bb58-40d0-a682-f93b13a216ab/bin/uautomizer/z3 Starting monitored process 29 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 29 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2020-11-29 19:18:43,571 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2020-11-29 19:18:43,573 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2020-11-29 19:18:43,573 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2020-11-29 19:18:43,573 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2020-11-29 19:18:43,573 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2020-11-29 19:18:43,573 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2020-11-29 19:18:43,574 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2020-11-29 19:18:43,574 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2020-11-29 19:18:43,576 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_1851a923-bb58-40d0-a682-f93b13a216ab/bin/uautomizer/z3 Starting monitored process 30 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 30 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2020-11-29 19:18:43,607 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2020-11-29 19:18:43,610 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2020-11-29 19:18:43,610 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2020-11-29 19:18:43,610 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2020-11-29 19:18:43,611 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2020-11-29 19:18:43,611 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2020-11-29 19:18:43,611 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2020-11-29 19:18:43,611 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2020-11-29 19:18:43,613 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_1851a923-bb58-40d0-a682-f93b13a216ab/bin/uautomizer/z3 Starting monitored process 31 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 31 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2020-11-29 19:18:43,646 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2020-11-29 19:18:43,648 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2020-11-29 19:18:43,649 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2020-11-29 19:18:43,649 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2020-11-29 19:18:43,649 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2020-11-29 19:18:43,649 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2020-11-29 19:18:43,651 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2020-11-29 19:18:43,651 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2020-11-29 19:18:43,661 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_1851a923-bb58-40d0-a682-f93b13a216ab/bin/uautomizer/z3 Starting monitored process 32 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2020-11-29 19:18:43,694 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2020-11-29 19:18:43,697 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2020-11-29 19:18:43,697 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2020-11-29 19:18:43,697 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2020-11-29 19:18:43,697 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2020-11-29 19:18:43,697 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2020-11-29 19:18:43,698 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2020-11-29 19:18:43,699 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. Waiting until toolchain timeout for monitored process 32 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2020-11-29 19:18:43,701 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_1851a923-bb58-40d0-a682-f93b13a216ab/bin/uautomizer/z3 Starting monitored process 33 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 33 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2020-11-29 19:18:43,735 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2020-11-29 19:18:43,737 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2020-11-29 19:18:43,737 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2020-11-29 19:18:43,738 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2020-11-29 19:18:43,738 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2020-11-29 19:18:43,738 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2020-11-29 19:18:43,739 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2020-11-29 19:18:43,739 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2020-11-29 19:18:43,741 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_1851a923-bb58-40d0-a682-f93b13a216ab/bin/uautomizer/z3 Starting monitored process 34 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 34 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2020-11-29 19:18:43,778 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2020-11-29 19:18:43,779 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2020-11-29 19:18:43,780 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2020-11-29 19:18:43,780 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2020-11-29 19:18:43,780 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2020-11-29 19:18:43,780 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2020-11-29 19:18:43,780 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2020-11-29 19:18:43,781 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2020-11-29 19:18:43,782 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_1851a923-bb58-40d0-a682-f93b13a216ab/bin/uautomizer/z3 Starting monitored process 35 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 35 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2020-11-29 19:18:43,816 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2020-11-29 19:18:43,818 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2020-11-29 19:18:43,818 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2020-11-29 19:18:43,819 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2020-11-29 19:18:43,819 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2020-11-29 19:18:43,819 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2020-11-29 19:18:43,820 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2020-11-29 19:18:43,820 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2020-11-29 19:18:43,822 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_1851a923-bb58-40d0-a682-f93b13a216ab/bin/uautomizer/z3 Starting monitored process 36 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 36 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2020-11-29 19:18:43,853 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2020-11-29 19:18:43,855 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2020-11-29 19:18:43,855 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2020-11-29 19:18:43,855 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2020-11-29 19:18:43,856 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2020-11-29 19:18:43,856 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2020-11-29 19:18:43,856 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2020-11-29 19:18:43,856 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2020-11-29 19:18:43,868 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_1851a923-bb58-40d0-a682-f93b13a216ab/bin/uautomizer/z3 Starting monitored process 37 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 37 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2020-11-29 19:18:43,901 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2020-11-29 19:18:43,902 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2020-11-29 19:18:43,902 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2020-11-29 19:18:43,902 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2020-11-29 19:18:43,903 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2020-11-29 19:18:43,903 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2020-11-29 19:18:43,905 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2020-11-29 19:18:43,905 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2020-11-29 19:18:43,906 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_1851a923-bb58-40d0-a682-f93b13a216ab/bin/uautomizer/z3 Starting monitored process 38 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 38 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2020-11-29 19:18:43,938 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2020-11-29 19:18:43,940 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2020-11-29 19:18:43,940 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2020-11-29 19:18:43,940 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2020-11-29 19:18:43,940 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2020-11-29 19:18:43,940 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2020-11-29 19:18:43,942 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2020-11-29 19:18:43,942 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2020-11-29 19:18:43,946 INFO L420 nArgumentSynthesizer]: Found a termination argument, trying to simplify. [2020-11-29 19:18:43,986 INFO L443 ModelExtractionUtils]: Simplification made 4 calls to the SMT solver. [2020-11-29 19:18:43,986 INFO L444 ModelExtractionUtils]: 1 out of 5 variables were initially zero. Simplification set additionally 1 variables to zero. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_1851a923-bb58-40d0-a682-f93b13a216ab/bin/uautomizer/z3 Starting monitored process 39 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 39 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2020-11-29 19:18:44,011 INFO L435 nArgumentSynthesizer]: Simplifying supporting invariants... [2020-11-29 19:18:44,011 INFO L438 nArgumentSynthesizer]: Removed 0 redundant supporting invariants from a total of 0. [2020-11-29 19:18:44,012 INFO L510 LassoAnalysis]: Proved termination. [2020-11-29 19:18:44,012 INFO L512 LassoAnalysis]: Termination argument consisting of: Ranking function f(~cleanupTimeShifts~0, ULTIMATE.start_cleanup_~i~2) = 1*~cleanupTimeShifts~0 - 1*ULTIMATE.start_cleanup_~i~2 Supporting invariants [] [2020-11-29 19:18:44,058 INFO L297 tatePredicateManager]: 0 out of 0 supporting invariants were superfluous and have been removed [2020-11-29 19:18:44,097 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-11-29 19:18:44,498 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-11-29 19:18:44,507 INFO L263 TraceCheckSpWp]: Trace formula consists of 1203 conjuncts, 2 conjunts are in the unsatisfiable core [2020-11-29 19:18:44,526 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2020-11-29 19:18:44,643 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-11-29 19:18:44,645 INFO L263 TraceCheckSpWp]: Trace formula consists of 179 conjuncts, 5 conjunts are in the unsatisfiable core [2020-11-29 19:18:44,651 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2020-11-29 19:18:44,719 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-11-29 19:18:44,730 INFO L152 lantAutomatonBouncer]: Defining deterministic Buchi interpolant automaton with honda bouncer for stem and without honda bouncer for loop.1 stem predicates 3 loop predicates [2020-11-29 19:18:44,731 INFO L71 iDifferenceNCSBLazy3]: Start buchiDifferenceNCSBLazy3. First operand 78921 states and 146765 transitions. cyclomatic complexity: 67848 Second operand 5 states. [2020-11-29 19:18:46,350 INFO L75 iDifferenceNCSBLazy3]: Finished buchiDifferenceNCSBLazy3. First operand 78921 states and 146765 transitions. cyclomatic complexity: 67848. Second operand 5 states. Result 97080 states and 180474 transitions. Complement of second has 8 states. [2020-11-29 19:18:46,351 INFO L141 InterpolantAutomaton]: Switched to read-only mode: Buchi interpolant automaton has 5 states 1 stem states 3 non-accepting loop states 1 accepting loop states [2020-11-29 19:18:46,352 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-11-29 19:18:46,371 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 11375 transitions. [2020-11-29 19:18:46,374 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 5 states and 11375 transitions. Stem has 155 letters. Loop has 46 letters. [2020-11-29 19:18:46,380 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2020-11-29 19:18:46,381 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 5 states and 11375 transitions. Stem has 201 letters. Loop has 46 letters. [2020-11-29 19:18:46,386 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2020-11-29 19:18:46,386 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 5 states and 11375 transitions. Stem has 155 letters. Loop has 92 letters. [2020-11-29 19:18:46,387 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2020-11-29 19:18:46,388 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 97080 states and 180474 transitions. [2020-11-29 19:18:47,426 INFO L131 ngComponentsAnalysis]: Automaton has 0 accepting balls. 0 [2020-11-29 19:18:47,426 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 97080 states to 0 states and 0 transitions. [2020-11-29 19:18:47,427 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 0 [2020-11-29 19:18:47,427 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 0 [2020-11-29 19:18:47,427 INFO L73 IsDeterministic]: Start isDeterministic. Operand 0 states and 0 transitions. [2020-11-29 19:18:47,427 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2020-11-29 19:18:47,427 INFO L691 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2020-11-29 19:18:47,427 INFO L714 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2020-11-29 19:18:47,427 INFO L142 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-11-29 19:18:47,428 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2020-11-29 19:18:47,428 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2020-11-29 19:18:47,428 INFO L87 Difference]: Start difference. First operand 0 states and 0 transitions. Second operand 4 states. [2020-11-29 19:18:47,428 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-11-29 19:18:47,428 INFO L93 Difference]: Finished difference Result 0 states and 0 transitions. [2020-11-29 19:18:47,428 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2020-11-29 19:18:47,428 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 0 states and 0 transitions. [2020-11-29 19:18:47,428 INFO L131 ngComponentsAnalysis]: Automaton has 0 accepting balls. 0 [2020-11-29 19:18:47,428 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 0 states to 0 states and 0 transitions. [2020-11-29 19:18:47,428 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 0 [2020-11-29 19:18:47,428 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 0 [2020-11-29 19:18:47,429 INFO L73 IsDeterministic]: Start isDeterministic. Operand 0 states and 0 transitions. [2020-11-29 19:18:47,429 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2020-11-29 19:18:47,429 INFO L691 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2020-11-29 19:18:47,429 INFO L714 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2020-11-29 19:18:47,429 INFO L594 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2020-11-29 19:18:47,429 INFO L427 BuchiCegarLoop]: ======== Iteration 6============ [2020-11-29 19:18:47,429 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 0 states and 0 transitions. [2020-11-29 19:18:47,429 INFO L131 ngComponentsAnalysis]: Automaton has 0 accepting balls. 0 [2020-11-29 19:18:47,429 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is true [2020-11-29 19:18:47,435 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer CFG 29.11 07:18:47 BoogieIcfgContainer [2020-11-29 19:18:47,435 INFO L132 PluginConnector]: ------------------------ END BuchiAutomizer---------------------------- [2020-11-29 19:18:47,436 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2020-11-29 19:18:47,436 INFO L271 PluginConnector]: Initializing Witness Printer... [2020-11-29 19:18:47,437 INFO L275 PluginConnector]: Witness Printer initialized [2020-11-29 19:18:47,437 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 29.11 07:16:33" (3/4) ... [2020-11-29 19:18:47,440 INFO L140 WitnessPrinter]: No result that supports witness generation found [2020-11-29 19:18:47,441 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2020-11-29 19:18:47,442 INFO L168 Benchmark]: Toolchain (without parser) took 154239.08 ms. Allocated memory was 98.6 MB in the beginning and 6.5 GB in the end (delta: 6.4 GB). Free memory was 66.5 MB in the beginning and 4.7 GB in the end (delta: -4.6 GB). Peak memory consumption was 1.8 GB. Max. memory is 16.1 GB. [2020-11-29 19:18:47,443 INFO L168 Benchmark]: CDTParser took 1.02 ms. Allocated memory is still 98.6 MB. Free memory is still 57.4 MB. There was no memory consumed. Max. memory is 16.1 GB. [2020-11-29 19:18:47,443 INFO L168 Benchmark]: CACSL2BoogieTranslator took 1139.59 ms. Allocated memory was 98.6 MB in the beginning and 127.9 MB in the end (delta: 29.4 MB). Free memory was 66.3 MB in the beginning and 91.0 MB in the end (delta: -24.7 MB). Peak memory consumption was 26.0 MB. Max. memory is 16.1 GB. [2020-11-29 19:18:47,444 INFO L168 Benchmark]: Boogie Procedure Inliner took 563.44 ms. Allocated memory is still 127.9 MB. Free memory was 91.0 MB in the beginning and 69.1 MB in the end (delta: 21.8 MB). Peak memory consumption was 57.2 MB. Max. memory is 16.1 GB. [2020-11-29 19:18:47,444 INFO L168 Benchmark]: Boogie Preprocessor took 718.64 ms. Allocated memory was 127.9 MB in the beginning and 218.1 MB in the end (delta: 90.2 MB). Free memory was 69.1 MB in the beginning and 117.6 MB in the end (delta: -48.5 MB). Peak memory consumption was 45.9 MB. Max. memory is 16.1 GB. [2020-11-29 19:18:47,445 INFO L168 Benchmark]: RCFGBuilder took 17687.92 ms. Allocated memory was 218.1 MB in the beginning and 794.8 MB in the end (delta: 576.7 MB). Free memory was 117.6 MB in the beginning and 582.6 MB in the end (delta: -465.0 MB). Peak memory consumption was 377.0 MB. Max. memory is 16.1 GB. [2020-11-29 19:18:47,445 INFO L168 Benchmark]: BuchiAutomizer took 134115.95 ms. Allocated memory was 794.8 MB in the beginning and 6.5 GB in the end (delta: 5.8 GB). Free memory was 581.6 MB in the beginning and 4.7 GB in the end (delta: -4.1 GB). Peak memory consumption was 1.7 GB. Max. memory is 16.1 GB. [2020-11-29 19:18:47,446 INFO L168 Benchmark]: Witness Printer took 4.94 ms. Allocated memory is still 6.5 GB. Free memory was 4.7 GB in the beginning and 4.7 GB in the end (delta: 1.0 MB). There was no memory consumed. Max. memory is 16.1 GB. [2020-11-29 19:18:47,449 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 1.02 ms. Allocated memory is still 98.6 MB. Free memory is still 57.4 MB. There was no memory consumed. Max. memory is 16.1 GB. * CACSL2BoogieTranslator took 1139.59 ms. Allocated memory was 98.6 MB in the beginning and 127.9 MB in the end (delta: 29.4 MB). Free memory was 66.3 MB in the beginning and 91.0 MB in the end (delta: -24.7 MB). Peak memory consumption was 26.0 MB. Max. memory is 16.1 GB. * Boogie Procedure Inliner took 563.44 ms. Allocated memory is still 127.9 MB. Free memory was 91.0 MB in the beginning and 69.1 MB in the end (delta: 21.8 MB). Peak memory consumption was 57.2 MB. Max. memory is 16.1 GB. * Boogie Preprocessor took 718.64 ms. Allocated memory was 127.9 MB in the beginning and 218.1 MB in the end (delta: 90.2 MB). Free memory was 69.1 MB in the beginning and 117.6 MB in the end (delta: -48.5 MB). Peak memory consumption was 45.9 MB. Max. memory is 16.1 GB. * RCFGBuilder took 17687.92 ms. Allocated memory was 218.1 MB in the beginning and 794.8 MB in the end (delta: 576.7 MB). Free memory was 117.6 MB in the beginning and 582.6 MB in the end (delta: -465.0 MB). Peak memory consumption was 377.0 MB. Max. memory is 16.1 GB. * BuchiAutomizer took 134115.95 ms. Allocated memory was 794.8 MB in the beginning and 6.5 GB in the end (delta: 5.8 GB). Free memory was 581.6 MB in the beginning and 4.7 GB in the end (delta: -4.1 GB). Peak memory consumption was 1.7 GB. Max. memory is 16.1 GB. * Witness Printer took 4.94 ms. Allocated memory is still 6.5 GB. Free memory was 4.7 GB in the beginning and 4.7 GB in the end (delta: 1.0 MB). There was no memory consumed. Max. memory is 16.1 GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: Constructed decomposition of program Your program was decomposed into 6 terminating modules (5 trivial, 1 deterministic, 0 nondeterministic). One deterministic module has affine ranking function cleanupTimeShifts + -1 * i and consists of 5 locations. 5 modules have a trivial ranking function, the largest among these consists of 18 locations. - StatisticsResult: Timing statistics BüchiAutomizer plugin needed 134.0s and 6 iterations. TraceHistogramMax:1. Analysis of lassos took 12.3s. Construction of modules took 52.5s. Büchi inclusion checks took 52.6s. Highest rank in rank-based complementation 3. Minimization of det autom 6. Minimization of nondet autom 0. Automata minimization 6.6s AutomataMinimizationTime, 4 MinimizatonAttempts, 125882 StatesRemovedByMinimization, 4 NontrivialMinimizations. Non-live state removal took 6.6s Buchi closure took 0.5s. Biggest automaton had 78921 states and ocurred in iteration 4. Nontrivial modules had stage [1, 0, 0, 0, 0]. InterpolantCoveringCapabilityFinite: 0/0 InterpolantCoveringCapabilityBuchi: 0/0 HoareTripleCheckerStatistics: 77611 SDtfs, 469811 SDslu, 466076 SDs, 0 SdLazy, 45453 SolverSat, 3707 SolverUnsat, 0 SolverUnknown, 0 SolverNotchecked, 52.5s Time LassoAnalysisResults: nont0 unkn0 SFLI0 SFLT0 conc0 concLT0 SILN0 SILU0 SILI4 SILT1 lasso0 LassoPreprocessingBenchmarks: Lassos: inital197 mio100 ax100 hnf101 lsp16 ukn100 mio100 lsp100 div100 bol100 ite100 ukn100 eq221 hnf87 smp100 dnf187 smp100 tf101 neg98 sie103 LassoTerminationAnalysisBenchmarks: ConstraintsSatisfiability: unsat Degree: 0 Time: 46ms VariablesStem: 0 VariablesLoop: 10 DisjunctsStem: 1 DisjunctsLoop: 2 SupportingInvariants: 0 MotzkinApplications: 4 LassoTerminationAnalysisBenchmarks: LassoNonterminationAnalysisSatFixpoint: 18 LassoNonterminationAnalysisSatUnbounded: 0 LassoNonterminationAnalysisUnsat: 1 LassoNonterminationAnalysisUnknown: 0 LassoNonterminationAnalysisTime: 1.3s - TerminationAnalysisResult: Termination proven Buchi Automizer proved that your program is terminating RESULT: Ultimate proved your program to be correct! Received shutdown request...